EU Regulation 2016/679 (“GDPR”)

The Congregation of the Franciscan Sisters of the Lord collects, uses, and retains your data in compliance with EU Regulation 2016/679 (“GDPR”).

DATA CONTROLLER
The data controller is "Congregazione Suore Francescane del Signore", Via Vicalvi, 35, 00131 Roma.
The email address of the Data Controller is: This email address is being protected from spambots. You need JavaScript enabled to view it.

TYPES OF DATA COLLECTED

francescanedelsignore.it collects, uses, and retains the following data, either independently or through third parties: IP address, Browser Information, unique session identifier, unique user profile identifier, account/email and password, to ensure the basic functionality of the service.
Full details on each type of collected data are provided in the relevant sections.
Personal Data can be provided voluntarily by the User or collected automatically during the use of francescanedelsignore.it
Some Data required on francescanedelsignore.it are mandatory to ensure the service, and will always be indicated via a mandatory checkbox or with the * symbol next to the label of the requested data. Other data are optional and can be freely omitted without affecting the service's operation.
The possible use of Cookies - or other tracking tools - by francescanedelsignore.it or the third-party service providers used by francescanedelsignore.it unless otherwise specified, is aimed at providing the requested Service, in addition to the further purposes described in this document and the Cookie Policy, if available.
The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through francescanedelsignore.it and guarantees that they have the right to communicate or disclose them, releasing the Data Controller from any liability towards third parties.

METHODS AND LOCATION OF DATA PROCESSING

Processing methods
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
The processing is carried out using computer and/or telematic tools, strictly related to the purposes indicated.
In some cases, other parties involved in the organization of francescanedelsignore.it (administrative, commercial, marketing staff, legal, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, and may be appointed as Data Processors if necessary. An updated list of the Data Processors can always be requested from the Data Controller.

Legal basis for processing
Data generated by access to the website
The IT systems and software procedures responsible for the operation of this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
The legal basis justifying the processing of such data is the necessity to make the functionalities of francescanedelsignore.it available following the User’s access.
Data provided voluntarily by the User
The legal basis justifying the processing is the necessity of fulfilling the orders placed through francescanedelsignore.it in which the data subject is a party, or the execution of pre-contractual measures adopted at the subject's request. In cases explicitly indicated, the legal basis is the consent freely provided by the subject.

Location of processing
The processing of the collected data is carried out by the internal personnel of francescanedelsignore.it The personnel is identified and authorized to process the data according to specific instructions issued in compliance with applicable regulations.
The collected data, when necessary or instrumental for the fulfillment of the indicated purposes, may be processed by third parties designated as external Data Processors, or, depending on the case, communicated to them as independent controllers, and specifically:

• People within our company

• People, companies, associations, or professional firms providing assistance and consulting services to our company

• Companies, entities, associations providing services connected and instrumental to the execution of the purposes outlined in this document.
  The collected data may also be transferred abroad, to companies that are part of or not part of our corporate group, including outside the European Union in the forms and ways provided by applicable regulations, ensuring an adequate level of protection in all cases.
  In any case, personal data will never be disclosed.

Data retention period
Data are processed and stored for the time required to fulfill the purposes for which they were collected.
Personal Data collected for purposes related to the execution of a contract/order between the Data Controller and the User will be retained until the completion of the contract.
Personal Data collected for purposes based on the legitimate interest of the Data Controller will be retained until that interest is fulfilled. When processing is based on the User’s consent, the Data Controller may retain the Personal Data for a longer period until the consent is withdrawn. The Data Controller may also be required to retain Personal Data for a longer period in compliance with a legal obligation or a request from an authority.
The rules used by francescanedelsignore.it prevent the indefinite retention of data and limit the retention time in accordance with the data processing minimization principle.

Purposes of Data processing
The User’s Data is collected to enable the Data Controller to provide its Services, as well as for the following purposes: Direct registration, Navigation data, Communication and Profiling, Cookies, Payments, Tag Management, Flow Analysis and Statistics, Session Registration and Control, Surveys/Feedback and Reviews, Marketing, Remarketing and behavioral analysis, Infrastructure Monitoring, and Contact Management and message sending.

DETAILS OF PERSONAL DATA PROCESSING
francescanedelsignore.it collects data for the following purposes and using the following services:

Direct registration (francescanedelsignore.it):
The User registers by filling out the registration form and providing their Personal Data directly to francescanedelsignore.it
Collected Personal Data: Surname, Date of Birth, Email, Name, and Password.
Location of processing: Italy.

Navigation data:
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the response status from the server (successful, error, etc.), and other parameters related to the user’s operating system and IT environment. This data is used solely to obtain anonymous statistical information about site usage and to check its correct functioning. Data may also be used to ascertain responsibility in case of potential computer crimes and, in such cases, may be retained for the period provided by law.

Communication and Profiling:
This type of service allows francescanedelsignore.it to manage support and contact requests received via email or through other tools, such as the contact form. The Personal Data processed depends on the information provided by the User within the messages and on the tool used for communication (for example, the email address).

Purpose: To contact the User for administrative and/or commercial purposes.
Personal Data collected: Email Account, First and Last Name, Telephone Contacts.
Means: Email Address or Telephone.
Place of Processing: Italy.

Purpose: Direct use of Social Networks
Personal Data collected: General data of various kinds.
Means: FaceBook, Pinterest, Instagram referred to as “Social”. francescanedelsignore.it uses Social channels without automatic Sharing functions, but only through the publication of Posts and Promotions on its own Wall/Profile.
These services may allow francescanedelsignore.it to collect data relating to the date and time the messages are viewed by the User, as well as the User's interaction with them, such as information about clicks on links included in the messages.
Place of Processing: Italy.

Purpose: Mailing List / Newsletter for service or promotional purposes.
Personal Data collected: Email Account, First and Last Name
Means: MailUP
The User's email address, First and Last Name are automatically added to a contact list to which email messages containing information, including commercial and promotional content, may be sent.
The User’s email address is added to this list as a result of registering on francescanedelsignore.it or after making a purchase.
MailUp is an email address management and email messaging service provided by MailUp S.p.A.
Place of Processing: Refer to the privacy policy of MailUp S.p.A – Privacy Policy.
https://www.mailup.it/informativa-privacy

Purpose: Use of the information database and user profiling.
Means: Own infrastructure of Physical Servers and/or Cloud Servers.
This type of service allows the Data Controller to build user profiles starting from an email address, name, or any other information the User provides to francescanedelsignore.it as well as to track the User’s activities through statistical features.
This Personal Data may also be cross-referenced with publicly available information about the User (such as social network profiles) and used to build private profiles that the Data Controller can view and use to improve francescanedelsignore.it
Place of Processing: Italy.

Cookies:

Purpose: Basic functionality of sessions and user profiles through Cookies.
No personal data of users is collected by the site for this purpose. No cookies are used to transmit personal information, nor are persistent cookies of any kind or user tracking systems used.
The use of session cookies is strictly limited to the transmission of unique session identifiers generated by the web server and necessary to enable secure and efficient navigation of the site.
The session cookies used on this site avoid the use of other IT techniques that could potentially compromise user browsing privacy and in no way allow the acquisition of personal or identifying data related to the User.
Place of Processing: Italy.

Tag Management:
The services contained in this section allow the Data Controller to collect information about User behavior in an anonymous and automatic manner in order to obtain useful data for optimizing and analyzing the service.
This type of service is used for centralized management of tags or scripts used on francescanedelsignore.it The use of such services implies the flow of User Data through them and, if applicable, their retention.

Purpose: Integration of data tracking via Google Tag Manager (Google LLC)
Google Tag Manager is a tag management service provided by Google LLC.
Personal Data collected: Cookies and Usage Data.
Place of Processing: United States – Privacy Policy. Participant in the Privacy Shield.
https://www.privacyshield.gov

Flow Analysis and Statistics:
The services in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.

Purpose: Data and session analysis via Google Analytics (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and examine the use of francescanedelsignore.it compile reports, and share them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize ads in its advertising network.
Personal Data collected: Cookies and Usage Data.
Place of Processing: United States – Privacy Policy – Opt Out. Participant in the Privacy Shield.
https://www.privacyshield.gov

Purpose: Data and session analysis via Facebook Analytics (Facebook, Inc.)
Facebook Business Manager, Facebook Pixel, and Facebook Analytics are profile management, marketing, and analytics services provided by Facebook, Inc.
Personal Data collected: Usage Data and various types of Data as specified in the service's privacy policy.
Place of Processing: United States – Privacy Policy. Participant in the Privacy Shield.
https://www.privacyshield.gov

Marketing, Remarketing, and Behavioral Analysis:
This type of service allows francescanedelsignore.it and its partners to communicate, optimize, and serve advertising based on the User's past use of francescanedelsignore.it
This activity is carried out through the tracking of Usage Data and the use of Cookies, information that is transferred to the partners to whom the remarketing and behavioral targeting activity is linked.

Purpose: Advertising Campaigns via Google AdWords (Google Inc.)
AdWords Remarketing is a remarketing and behavioral targeting service provided by Google Inc. that connects the activity of francescanedelsignore.it with the AdWords advertising network and the DoubleClick Cookie.
Personal Data collected: Cookies and Usage Data.
Place of Processing: United States – Privacy Policy – Opt Out.
https://www.privacyshield.gov

Purpose: Marketing through Google Analytics for Display Advertising (Google Inc.)
Google Analytics for Display Advertising is a remarketing and behavioral targeting service provided by Google Inc. that links the tracking activity performed by Google Analytics and its Cookies with the AdWords advertising network and the DoubleClick Cookie.
Personal Data collected: Cookies and Usage Data.
Place of Processing: United States – Privacy Policy – Opt Out. Participant in the Privacy Shield.
https://www.privacyshield.gov

Purpose: Audience Management via Facebook Custom Audience (Facebook, Inc.)
Facebook Custom Audience is a remarketing and behavioral targeting service provided by Facebook, Inc. that links the activity of francescanedelsignore.it with the Facebook advertising network.
Personal Data collected: Cookies and email.
Place of Processing: United States – Privacy Policy – Opt Out. Participant in the Privacy Shield.
https://www.privacyshield.gov

Purpose: Remarketing via Facebook Remarketing (Facebook, Inc.)
Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. that links the activity of francescanedelsignore.it with the Facebook advertising network.
Personal Data collected: Cookies and Usage Data.
Place of Processing: United States – Privacy Policy – Opt Out. Participant in the Privacy Shield.
https://www.privacyshield.gov

Services and Functions Provided by the Site
The Personal Data collected is used for the provision of services to the User.

Purpose: Device Identification
francescanedelsignore.it may track Users by saving a unique identification code of their device, for statistical purposes or to store User preferences.

Purpose: User Data Analysis and Profiling
The Data Controller may process usage data collected through francescanedelsignore.it to create or update user profiles. This type of processing allows the Controller to evaluate User choices, preferences, and behavior for the purposes specified in the respective sections of this document.
User profiles may also be created using automated tools, such as algorithms, which may also be provided by third parties.
The User has the right to object to such profiling activities at any time.

USER RIGHTS

What are the user's rights
At any time, users can access their data, object to processing, or request the deletion, modification, or update of all personal information collected by francescanedelsignore.it by exercising the right to restriction of processing and the right to data portability, by sending an email to the provided address.

• Withdraw consent at any time. Users may revoke previously given consent to the processing of their Personal Data.

• Object to the processing of their Data. Users may object to the processing of their Data when it is carried out on a legal basis other than consent. Further details on the right to object are provided below.

• Access their Data. Users have the right to obtain information about the Data processed by the Data Controller, on certain aspects of the processing, and to receive a copy of the processed Data.

• Verify and request rectification. Users may verify the accuracy of their Data and request its update or correction.

• Obtain restriction of processing. When certain conditions are met, Users may request the restriction of the processing of their Data. In this case, the Data Controller will not process the Data for any purpose other than their storage.

• Obtain the deletion or removal of their Personal Data. When certain conditions are met, Users may request the erasure of their Data by the Data Controller.

• Receive their Data or have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance. This provision applies when the Data is processed with automated tools and the processing is based on the User’s consent, on a contract of which the User is a party, or on pre-contractual measures related thereto.

• Lodge a complaint. Users may lodge a complaint with the competent data protection authority or take legal action.

How to Exercise the Rights
To exercise their rights, Users may send a request to the Data Controller's contact details indicated in this document. Requests are submitted free of charge and handled by the Controller as soon as possible, in any case within one month.
Requests must be sent via email to the address: This email address is being protected from spambots. You need JavaScript enabled to view it.

ADDITIONAL INFORMATION ON DATA PROCESSING

Legal Defense
The User’s Personal Data may be used by the Controller in court or in the preparatory stages leading to possible legal action for defense against abuse in the use of francescanedelsignore.it or related Services by the User.
The User declares to be aware that the Controller may be required to disclose the Data by order of public authorities.

Specific Information
Upon User request, in addition to the information contained in this privacy policy, francescanedelsignore.it may provide the User with additional and contextual information concerning specific Services, or the collection and processing of Personal Data.

Server Log Tracking
For operation and maintenance purposes, francescanedelsignore.it and any third-party services it uses may collect system Logs, which are files that record interactions and may also contain Personal Data, such as the User's IP address.

Information Not Contained in This Policy
Further information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact details provided.

Changes to This Privacy Policy
The Data Controller reserves the right to make changes to this privacy policy at any time by informing Users on this page and, if possible, on francescanedelsignore.it as well as, where technically and legally feasible, by sending a notification to Users via one of the contact details held by the Controller.
If the changes affect processing activities whose legal basis is consent, the Controller will collect the User’s consent again, if necessary.

LEGAL REFERENCES
This privacy policy is drafted based on multiple legislative frameworks, including Articles 13 and 14 of Regulation (EU) 2016/679.

SCOPE OF THE POLICY
Unless otherwise specified, this privacy policy applies exclusively to francescanedelsignore.it