Privacy

Fondazione Banca degli Occhi del Veneto Onlus takes very seriously the privacy of the user and undertakes to respect it in accordance with the applicable regulations (Legislative Decree No. 196/2003, henceforth "Code" and Regulation (EU) 2016 / 679, henceforth "Regulations").

This document provides information on the processing of personal data collected by Fondazione Banca degli Occhi del Veneto Onlus and therefore constitutes information to interested parties, in accordance with the aforementioned regulations.

 

This privacy policy may change over time, without prior notice, also as a consequence of integrations and legislative and regulatory changes in this field or for institutional decisions. Therefore, interested parties are invited to consult periodically the website www.fbov.org.

 

Il Regolamento prevede una serie di obblighi in capo ai titolari che effettuano trattamenti di dati personali riferiti ad altri soggetti (interessati).

The Regulations provide for a series of obligations for controllers who process personal data referring to other subjects (interested parties). This information is provided solely and exclusively for the activities of Fondazione Banca degli Occhi del Veneto Onlus and for data collected through its website (www.fbov.org) and not for any other websites that may be accessed by the user through hyperlinks.

 

The data controller is Fondazione Banca degli Occhi del Veneto Onlus located in Via Paccagnella n. 11, 30174 Venice-Zelarino (Italy), tel. +39 0419656400, fax +39 0419656421, email info@fbov.it.

 

The Data Protection Officer (DPO) can be contacted at the email address dpo@fbov.it.

 

For interested it is meant the individual identified or identifiable at the latter processes the personal data (user).

 

During processing, the controller may become aware of personal data provided in a spontaneous manner by users when they, either interacting with the functions of the www.fbov.org site or requesting access to the services offered by Fondazione or, in any case, entering into contact with it. Such data may be:

- common (such as name, an identification number, location data, an email address, an online identifier);

- particular (i.e. health data, genetic data, biometric data, data suitable for detecting the sex life or sexual orientation of the person, personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or union membership);

- judicial data (possibly gathered during medical history screening activities).

 

The processing of personal data pursues purposes strictly related and instrumental to the contacts and institutional activities of the controller. The processing purposes are connected to the execution:

- of requests for health information with particular reference to the donation and transplantation of ocular tissues, of eye diseases, as well as for the purpose of research for the treatment of ocular diseases;

- to supporters who provide charitable donations in favour of the controller and to maintain contact with them in order to be able to update them on the institutional activities that were made possible thanks to the donations received;

- for registration to participate in events / initiatives of solidarity and awareness-raising, requests to receive newsletters / periodicals, information on initiatives and activities of the controller;

- to contacts with surgeons / suppliers / clients;

- management of curriculum vitae received from candidates.

 

The processing of personal data is permitted if:

- the person concerned (or who has parental authority) has expressed consent to the processing of their personal data (or of the minor) for one or more specific purposes;

- the processing is necessary for the execution of a contract of which the person concerned is a party or for the execution of pre-contractual measures adopted at the request of the same;

- processing is necessary for the carrying out of a task of public interest;

- the processing is necessary for the pursuit of the legitimate interest of the data controller (namely the realization of institutional goals).

 

The processing will take place with computerized / automated and paper / manual systems to store, manage and transmit the data, with rationalities strictly related to the purposes outlined above, by persons specifically delegated to do so. Specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access to the same.

 

Data will be processed by personnel assigned by the controller and will not be disclosed to third parties except, depending on the specific purpose, to supervisory and regulatory authorities following inspections/audits or otherwise required by law, to certification and accounting bodies, research centres and analysis laboratories (as part of the activities of tissue donation / transplantation or eye examinations), to consultants, banks, post offices and issuers of credit cards (in order to manage cash receipts and payments), to insurance companies, to technical service providers (e.g. for printers, mail carriers, communication agencies used for public relations and communication purposes).

The possibility of disseminating data to indeterminate subjects is not envisaged.

 

The storage period of the data subject's personal data is limited to the duration necessary for the execution of the activity, of the request or contract in place and in any case strictly related to the specific purpose of the processing

For purposes in the field of health (donations and transplants of ocular tissues, eye examinations), no matter what, the periods of storage laid down in legislation are observed.

For statistical and research purposes, such data may be stored for a longer duration using, where possible and compatible, protection and anonymisation systems.

For purposes related to contacts with supporters who provide charitable donations and in the context of raising awareness of events / initiatives promoted by the controller, the data retention period is strictly limited to the realization of the institutional activities.

For purposes connected to relations with surgeons/suppliers/clients, the retention period is 10 years from the termination of the relationship; personal data may be processed for a longer period if there is an interruption and/or suspension of the prescription that justifies the prolongation of the processing.

For those purposes related to the collection of curricula vitae of applicants aspiring to the activities of the collector, the storage period is 10 years.

Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

 

In order to guarantee a correct and transparent processing we inform you that the interested party:

- can obtain confirmation of the existence or not of personal data concerning him or her;

- can ask the data controller to access personal data and to update, correct, supplement or delete the data or to limit the processing of data that concerns them or to object to the processing including for the purpose of sending institutional material of the controller, except for the legitimate interest in the processing by the owner himself;

- the interested party has the right to the portability of his or her personal data if this is possible with reference to the specific purposes of the processing;

- if the processing of personal data is based on consent the person concerned (or who has parental authority) may revoke the consent at any time without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation;

- the interested party can lodge a complaint with a supervisory authority;

- the conferment by the interested party of personal data is in any case spontaneous. The provision of the aforementioned data is entirely voluntary and strictly related to the purposes indicated above. Conversely, the conferment of data is mandatory if it is connected and instrumental to the execution of a contract. In the case of a refusal to provide the data or to permit their processing or their communication, it will become impossible to furnish the information or services requested or the execution of the contract;

- personal data will not be subject to profiling, except in the context of the purposes related to the collection of charitable donations and to the communication and awareness-raising undertakings of the controller's initiatives in order to determine the level of interest and participation of interested parties in the activities of the controller.

 

READ ALSO OUR DISCLOSURE ON COOKIES