Privacy privacy

Information Notice pursuant to Article 13 of the European Regulation 679/2016 (commonly referred to as “GDPR”)

a. Data Controller and Methods of Data Processing

The personal data provided by the data subject are processed by Save the Children Italia ETS, located at Piazza S. Francesco di Paola, 9 - 00184 Rome – as the Data Controller – primarily by electronic means and with analytical tools, including statistical analysis, in accordance with data protection legislation (GDPR and the Italian Privacy Code, Legislative Decree no. 196/2003 as amended), and in compliance with the principles of transparency, lawfulness, and fairness.

b. Data Covered by this Information Notice

The data provided by the data subject during their interaction with our Organization. Such data include: personal and contact information, as well as profiling information as described in section c. (ii).

c. Purpose and Legal Basis of Data Processing

(i) Sending of Requested Information
The processing is aimed at enabling the Data Controller to carry out all activities related to the sending of information requested by the data subject regarding the initiative and/or project in which they expressed interest by filling out the appropriate form to receive more details. The processing for this purpose is based on the relationship established between the Data Controller and the data subject concerning the provision of such information. The provision of all necessary data is mandatory; failure to provide such data will make it impossible to handle the data subject’s request. Contact activities for this purpose may be carried out through traditional means (postal mail and phone calls via landline or mobile operator) as well as via email and SMS.

(ii) Marketing and Profiling
Save the Children may also process the data provided by the data subject to send promotional, informational, and institutional communications about its projects, activities, and fundraising initiatives, as well as surveys and research, to all individuals who have shown interest in Save the Children’s work. These actions may be carried out in a personalized manner, based on behavioral characteristics, interests, and preferences expressed by the data subject during participation in various initiatives promoted by the Data Controller, in order to avoid unwanted contact ("targeted marketing").

Given the structural and inseparable link between the described profiling and any promotional activity undertaken by Save the Children, a single legal basis must be attributed to both marketing and profiling purposes: processing for these purposes is therefore based on the legitimate interest of Save the Children – a non-profit organization devoted to a humanitarian and charitable mission, which it funds through public fundraising activities– to strengthen and maintain an ongoing relationship with those who demonstrate, by participating in specific initiatives promoted by the Controller, that they share its goals, with the aim of encouraging continued support.

Contact activities may be carried out through traditional means (postal mail and operator-assisted phone calls via landline or mobile) as well as via email.

d. Data Retention Periods

All data processed for the purposes under section c. (i) will be retained until the conclusion of the relationship established and in accordance with the applicable legal requirements, particularly administrative and civil regulations.

For the purposes outlined in section c. (ii), the data (including profiling data) will be retained until the data subject exercises their right to object; in the absence of such objection, the data will be retained for as long as Save the Children continues its mission through projects, initiatives, actions, and activities that require financial support or aim to raise awareness (e.g., petitions, participation in emergency projects), in line with the data subject’s profile.

All data processed by Save the Children, at the end of the retention periods defined above, will be anonymized for statistical purposes.

e. Categories of Data Recipients and Persons who may access data during processing

The data may also be processed by external processors assigned to services related to the above-mentioned purposes (e.g., call centers, marketing service providers).

Individuals authorized to process the data for the purposes indicated include personnel involved in managing institutional activities, legacy projects, the organization of projects and initiatives, events and fundraising, awareness campaigns via call centers, web services, information systems, and data security.

By writing to the Data Controller’s postal address or by sending an email to [email protected], it is possible to request a complete and updated list of data processors.

f. Data Subject Rights

Pursuant to Articles 15–22 of the GDPR, by writing to the Data Controller at the above-mentioned postal address or by emailing [email protected], data subjects may exercise their rights of access, review, rectification, erasure and the right to be forgotten, restriction of processing, and—where applicable—data portability, as well as object to the processing of their personal data on legitimate grounds.

Furthermore, data subjects have the right to lodge a complaint with the Italian Data Protection Authority ("Garante per la Protezione dei Dati Personali") to assert their rights.

With specific regard to data processing for the purposes of targeted marketing as described in section c. (ii), the data subject has the right to object at any time, free of charge and without providing any reason, to the processing of their data for such purposes. This right of objection may also be exercised separately for traditional contact methods and for automated ones. If the data subject does not specify which contact methods the objection refers to, the objection to processing for targeted marketing will be understood as applying to all contact methods. This right may also be exercised by writing to the Data Controller’s postal address or by sending an email to [email protected].

g. Contacts

To exercise your rights, request the complete list of data processors and entities to whom data may be disclosed and who may process them for their own purposes in connection with the objectives outlined in section c., or to obtain any information regarding the Data Controller’s privacy policy, you may write:

- by email to: [email protected]
- by postal mail to: Save the Children Italia ETS, Piazza S. Francesco di Paola, 9 - 00184 Roma.

The Data Protection Officer (DPO) can be contacted at [email protected] for information regarding data processing.
To learn more about our personal data protection policy, please read the privacy policy available at: www.savethechildren.it/informativa-privacy.