Privacy policy

Information on the Protection of Personal Data
(Law 196/2003 and EU-GDPR 2016/679)

Legislative Decree No. 196/2003 and EU-GDPR 2016/679, the subsequent adaptation to EU-GDPR 2016/679 (General Data Protection Regulation), provide for the protection of individuals and other subjects with regard to the processing of personal data. According to the aforementioned laws, such processing will be based on principles of fairness, lawfulness and transparency, protecting the privacy and rights of users and members. The following information is provided pursuant to Article 13 of Legislative Decree No. 196/2003 and EU-GDPR 2016/679.

The Data Controller is the Pian dei Ciliegi Association, loc. Bulla di Montesanto, 29028 Ponte dell’Olio (PC), email info@piandeiciliegi.it

The Data Protection Officer (DPO) is Mr. Gianni Burgazzi, resident at 29028 Ponte dell’Olio (PC), loc. Bulla di Montesanto, email info@piandeiciliegi.it

The processing we intend to carry out is as follows:

a) Personal data voluntarily provided will be recorded in electronic and paper databases, protected and inaccessible to the public, and will be retained until the termination of the membership relationship and within the terms provided for by Art. 2220 of the Italian Civil Code. The owner of the databases and the party responsible for data processing is:

Pian dei Ciliegi Association, loc. Bulla di Montesanto, Ponte dell’Olio (PC), email: info@piandeiciliegi.it

b) The data provided will be processed for the following purposes:

• organization of Vipassana and Metta meditation retreats for members;

In particular, your personal data may be processed for the following purposes:

• to provide event booking services and access to areas reserved for members;
• to provide the electronic Newsletter service;
• to provide information on the activities of the Pian dei Ciliegi Association;
• to provide assistance and respond to any requests;
• to send information by email concerning the organization of meditation retreats by teachers or affiliated associations;
• for any fundraising among members necessary to carry out institutional activities. Such fundraising may be carried out in various ways (credit card, direct debit or other methods).

Personal data may also be used for other processing operations, provided that they are compatible with these purposes and comply with current security regulations.

The forms to be completed on the Pian dei Ciliegi website request only data that is strictly necessary for the relevant purpose, and failure to provide such data will normally prevent the request from being processed.

The personal data normally required to use the services of this website includes personal details, contact information and information relating to payment methods and details. The optional, explicit and voluntary sending of emails to the addresses indicated on this website or the completion of electronic contact forms results in the subsequent acquisition of the sender’s address, which is necessary in order to respond to requests, as well as any other personal data included in the message. Specific summary notices will progressively be provided or displayed on the pages of the website intended for particular services requested by users. Normally, sensitive data pursuant to Art. 9 of the Regulation is not processed (if sensitive data is processed for specific services, a dedicated notice will be provided and the specific consent of the user concerned will be requested).

The data provided is not subject to automated decision-making processes, but will be retained indefinitely, until you request its deletion.

c) Your personal data may be disclosed by the Pian dei Ciliegi Association, pursuant to Art. 20 of the Law:

• to natural or legal persons who, on behalf of and/or in the interest of the Pian dei Ciliegi Association, provide specific processing services or carry out activities connected with or supporting those of the Association itself.

In no other case will your personal data be transmitted by us to third parties, except where the Pian dei Ciliegi Association:

• has obtained your explicit consent to share your data with third parties;
• is required to comply with written orders from the Judicial Authority;

d) In accordance with Art. 7 of Legislative Decree No. 196 of 2003 and EU-GDPR 2016/679 (General Data Protection Regulation), the Pian dei Ciliegi Association recognizes the following rights:

1. to access your data at any time.
2. to obtain at any time:
   1. confirmation as to whether or not personal data concerning you exists, even if it has not yet been recorded, and communication of such data and its origin in an intelligible form;
   2. the deletion, transformation into anonymous form or blocking of data processed unlawfully, as well as the updating, rectification or, where you have an interest in doing so, integration of the data.
3. to obtain information concerning:
   1. the origin of the personal data;
   2. the purposes and methods of processing;
   3. the logic applied in the event of processing carried out with the aid of electronic instruments;
   4. the identification details of the Data Controller, the data processors and the designated representative pursuant to Article 5, paragraph 2;
   5. the subjects or categories of subjects to whom the personal data may be disclosed or who may become aware of it in their capacity as designated representative within the territory of the State, data processors or persons in charge of processing;
   6. the updating, rectification or, where you have an interest in doing so, integration of the data;
   7. the deletion, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed;
   8. confirmation that the operations referred to in points f) and g), including their content, have been brought to the attention of those to whom the data has been communicated or disclosed, except where this requirement proves impossible or involves the use of means that are manifestly disproportionate to the right being protected.
4. You have the right to object, in whole or in part and on legitimate grounds, to the processing of personal data concerning you, even where such data is relevant to the purpose for which it was collected.

To exercise the above rights, you may contact us at the following email address: info@piandeiciliegi.it

SECURITY

To ensure maximum security for users who decide to make donations by credit card, the Pian dei Ciliegi Association has chosen to use PayPal. The security and functionality of this service are guaranteed by the following measures: credit card details are entered directly on a secure PayPal server using SSL encryption and are not stored on the Pian dei Ciliegi Association’s server.

No one other than PayPal can access the credit card details. Users do not need to obtain any authentication certificate and can simply use a standard web browser.

The PayPal payment service, as regards credit card verification and responses from international payment networks, uses the same system employed by physical P.O.S. terminals and is therefore widely tested to ensure continuity of service in accordance with current market standards. When a user decides to make a donation, after clicking the “PROCEED” button, they are redirected to the payment page hosted on PayPal’s secure server. On this page, they will find the appropriate form where they must enter their credit card details. The data is entered securely, providing complete protection for the donor. PayPal collects the data relating to the transaction (card details and amount) and submits it to international authorization networks in the same way as transactions carried out through physical P.O.S. terminals. Through these networks, the institution that issued the card is contacted and provides a positive or negative response to the authorization request, which is then communicated to PayPal.

PayPal then redirects the user to the Pian dei Ciliegi Association website with confirmation as to whether or not the donation has been completed. During this phase, only a check on the credit card is carried out: the transaction will be financially completed within 20 days of the date of the donation.