Privacy Policy

Dear Interested Party,

Pursuant to Articles 12 and 13 of the European Regulation No. 679/2016 “General Data Protection Regulation” (GDPR), we are providing you with this Information regarding the processing of your Personal Data.

Please note that you have the right to review this information before providing us with your Personal Data, as well as the right to object to one or more purposes of processing indicated in this Information under the dedicated section.

Data Controller:

Istituto Buddista Italiano Soka Gakkai
Via di Bellagio, 2/E
50141 – Florence (FI), Italy
www.sgi-italia.org
privacy@sgi-italia.org

The main processing activities involve the acquisition and/or dissemination, through the dedicated portal, of social projects funded or fundable by the Istituto Buddista Italiano Soka Gakkai (hereinafter “the Institute”).

Purposes for Processing Your Personal Data

• Pre-contractual activities: Acquisition of information regarding the proposing organization and the project for which funding is requested. The legal basis lies in pre-contractual measures and in any subsequent agreement signed for the allocation of funds.
• Dissemination activities: Publication of information related to proposed projects, including information about individuals associated with the proposing organization. In this case, consent constitutes the legal basis for processing.
• Dissemination to beneficiaries: Publication of information regarding proposed projects specifically referring to the recipients of funds. In this case, the consent provided by the fund beneficiaries constitutes the legal basis for processing.

Upon request, a complete list of recipients with whom your Personal Data may need to be shared in compliance with current regulations is available. Requests should be sent to the Data Protection Officer without formal requirements.

Categories of Recipients

1. Companies and professionals responsible for managing, maintaining, and assisting the Institute’s IT infrastructure.
2. Companies managing the Institute’s web infrastructure.
3. Software houses and software solution providers used by the Institute.
4. Volunteers and internal staff of the Institute.
5. Judicial institutions and law enforcement authorities, if the Institute is required to disclose personal data of its members under national or European law.

All recipients will be appointed as Data Processors and instructed by the Institute in accordance with legal provisions. They will also be required to maintain confidentiality regarding the information transmitted and to delete or return it once processing is completed.

The Institute does not and will not transfer your Personal Data to international organizations or controllers located outside the European Economic Area. If it decides to do so, it will strictly comply with the provisions of EU Regulation 679/2016 regarding international data transfers and will inform you in accordance with the law prior to the transfer.

Data Retention

The Istituto Buddista Italiano Soka Gakkai will retain your Personal Data according to the following criteria:

1. For Personal Data subject to retention obligations under Italian or European law: For no longer than the limits established by the applicable legislation, after which the data will be deleted or anonymized.
2. For Personal Data not subject to specific retention obligations and not made public: Until they are no longer useful, or until the data subject withdraws consent or exercises the right of opposition.

Your Rights under GDPR

To exercise one or more of the following rights, simply contact the Data Protection Officer without formalities:

Data Protection Officer
Mr. Lorenzo Frascotti
privacy@sgi-italia.org

• Right of Access – Art. 15 GDPR
  The data subject has the right to obtain from the data controller confirmation as to whether personal data concerning them is being processed and, if so, to access the personal data and related information.
• Right to Rectification – Art. 16 GDPR
  The data subject has the right to obtain from the data controller the rectification of inaccurate personal data without undue delay. Considering the purpose of processing, the data subject also has the right to complete incomplete personal data, including by providing a supplementary statement.
• Right to Erasure – Art. 17 GDPR
  The data subject has the right to obtain from the data controller the deletion of personal data concerning them without undue delay.
• Right to Restriction of Processing – Art. 18 GDPR
  The data subject has the right to obtain from the data controller the restriction of processing, i.e., to prohibit the processing of their personal data for specific purposes.
• Right to Data Portability – Art. 20 GDPR
  The data subject has the right to receive personal data concerning them in a structured, commonly used, and machine-readable format and to transmit such data to another controller without hindrance from the controller to whom the data was provided.
• Right to Object – Art. 21 GDPR
  The data subject has the right to object at any time, for reasons related to their particular situation, to the processing of personal data concerning them.

For purposes where consent is required, you have the right to withdraw your consent at any time.

If you believe that any processing carried out by us has caused you harm or prejudice, or if you consider that irregularities or unlawful processing of your Personal Data have occurred, you have the right to lodge a complaint with the Supervisory Authority in accordance with its procedures, available on its official website.

Partial or complete refusal to provide your Personal Data to the Institute will make it impossible to enter into any agreement or contract.