PRIVACY POLICY, COOKIE POLICY AND INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF REGULATION 2016/679/EU

Dear User,
in compliance with the provisions of the General Data Protection Regulation – EU Regulation 2016/679 (hereafter “GDPR”), ISTITUTO OIKOS (hereafter "Oikos") provides you with the following information concerning how this website is managed in relation to the processing of the personal data of users who consult it.

This information is provided pursuant to art. 13 of the GDPR.

This information concerns only the website www.istituto-oikos.org and not any other websites that may be consulted by the user through any links.

Oikos furthermore informs users that no registration is required to access the website www.istituto-oikos.org or any of its contents. Any contact data (e.g. spontaneous emails) will be processed in compliance with the provisions of the Code regarding the protection of personal data pursuant to Legislative Decree 196/2003 and subsequent modifications (hereafter the "Code") and Regulation 2016/679 / EU, and a database will not be created from them.

We also wish to inform you of the following:

1. Data controller

The Data Controller is the undersigned ISTITUTO OIKOS, in the person of its legal representative, Ms Rossella Rossi, with registered office in Varese via Magatti 2 and operational headquarters in Milan, via Crescenzago 1, Tel. +39 02/21597581 Email: privacy@istituto-oikos.org.

2. Data processed

Navigation data which are processed automatically
The IT systems and software procedures used to operate the www.istituto-oikos.org website, during normal operation, acquire some personal data the transmission of which is implicit in the use of Internet communication protocols. This information is not collected for the purpose of being associated with identified interested parties, but by its very nature it could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers of users who connect to the website, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user's computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the website and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the website: with the exception of this eventuality, the data on web contacts do not currently remain for more than seven days.

Data provided voluntarily by the user
The optional, explicit and voluntary sending of emails to the addresses indicated on this website entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.
Other common personal data are requested to obtain Oikos materials and publications uploaded on the website or shared through our social channels.
These common data may be used by us to send communications and information regarding initiatives, events and projects undertaken by our organization.

Cookies
The only data processed are those relating to user navigation on our website in aggregated form: when the user gains access, in fact, Oikos can send the user a "cookie" of an exclusively technical nature, a small text file that our website automatically sends to a user's computer when they access our pages. Technical cookies facilitate a user’s navigation on our website, and provide information on navigation in aggregated form for purely statistical purposes within the website www.istituto-oikos.org . They allow the functioning of the statistical services that follow the path taken by a user through the various pages of the website. For any access to the website, regardless of the presence of a cookie, Oikos registers the type of browser (e.g. Internet Explorer, Chrome, Firefox), the operating system (e.g. Windows, Macintosh) and the host and URL of origin of the user-navigator, in addition to the data on the requested page. These data are used in aggregated and anonymous form for statistical analysis of the use of the website. There are two main types of cookies: session cookies and persistent cookies. Session cookies are automatically deleted from the computer when the user closes the browser, while persistent cookies remain stored on the user's computer unless they are deleted or reach their expiration date.
Cookies consist of portions of code installed within the browser that assist the Data Controller in providing the Service according to the purposes described. Some of the purposes for installing Cookies may also require the user's consent. When the installation of Cookies takes place with consent, this consent can be freely revoked at any time by following the instructions contained in this document.
The Oikos website uses the following cookies:
Technical and statistical aggregated cookies
Activities strictly necessary for operation
The www.istituto-oikos.org website uses cookies to save the user's session and to carry out other activities that are strictly necessary for the operation of www.istituto-oikos.org, for example to analyse our traffic.
Activities for saving preferences, optimization and statistics
The website www.istituto-oikos.org uses cookies to save browsing preferences and optimize the user's browsing experience. These cookies include, for example, those for setting the language or for the management of statistics by the Data Controller of the website.
Third-party and other types of cookies
Some of the services listed below collect statistics in aggregated and anonymous form and may not require the user's consent or they could be managed directly by the Data Controller – as described here – without the involvement of third parties. Should there be services managed by third party entities (most commonly advertisers, marketers, and social media platforms) among the tools indicated below these could – in addition to what is specified here and without the knowledge of the Data Controller – perform user tracking activities. For detailed information, we recommend that you consult the privacy policies of the services listed.
Interaction with external social networks and platforms
This type of service allows interaction with social networks, or with other external platforms, directly from the pages of www.istituto-oikos.org. The interaction and information acquired by www.istituto-oikos.org are in any case subject to the user's privacy settings relating to each social network. In the event that a user interaction cookie is loaded on the user's browser, it is possible that this will continue to collect traffic data relating to the pages in which it is installed even if the user does not use the service.
“Like” button and Facebook social widgets (Facebook Inc.)
The "Like" button and Facebook social widgets are services interacting with the social network provided by Facebook, Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.
LinkedIn button and social widgets (LinkedIn Corporation)
The LinkedIn button and social widgets are services interacting with the LinkedIn social network, provided by LinkedIn Corporation.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.
Twitter Tweet button and social widgets (Twitter, Inc.)
The Tweet button and Twitter social widgets are services interacting with the Twitter social network, provided by Twitter, Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.
Instagram button and social widgets
The Instagram button and social widgets are services interacting with the Instagram social network, provided by Instagram Corporation.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.
YouTube button and social widgets (Google Inc.)
The YouTube button and social widgets are services interacting with the YouTube social network, provided by Google Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.

Statistics
The services contained in this section allow the Data Controller to monitor and analyse traffic data and are used to keep track of user behavior.
Google Analytics (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. (hereafter "Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of www.istituto-oikos.org, compiling reports and sharing them with other services developed by Google.
Google could use Personal Data to contextualize and personalize the advertisements of its own advertising network.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
Google Analytics with anonymized IP (Google Inc.)
Google Analytics is a web analysis service provided by Google. Google uses the Personal Data collected for the purpose of tracking and examining the use of www.istituto-oikos.org, compiling reports and sharing them with other services developed by Google.
Google could use Personal Data to contextualize and personalize the advertisements of its own advertising network.
This integration of Google Analytics makes your IP address anonymous. Data anonymization works by deleting the last digits of users’ IP addresses, and this takes place within the borders of the member states of the European Union or in other countries adhering to the agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google's servers and abbreviated within the United States.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.

How to disable cookies
Should you decide to block cookies, we remind you that this could have a negative impact on the usability of some websites.
Most browsers allow you to refuse / accept cookies. Here is some practical information on how to disable cookies on the browser you are using.

Internet Explorer 9
• Open the Internet explorer window.
• Click on "Tools".
• Go to "Security" and then click "Clear history".
• The "cookies" box will appear; click on "delete".
• Click "Security " on the bar.
• Select "Clear history".
• Select the option for cookies and then click on "delete".

Internet Explorer 8
Alternatively, the new Internet Explorer 8 InPrivate browsing function allows the user to surf the net without leaving a trace of the websites visited (including cookies). To use InPrivate mode:
• Click "Security" on the bar.
• Select "InPrivate Browsing".
• Exit Internet Explorer 7 and close all Windows Explorer windows.
• Click on "Start", "Run", and enter inetcpl.cpl and then click on "OK".
• On the "General" tab, click "Cancel" under "Browsing history" in the "Internet properties" box.
• In the "Clear browsing history" box click on "Clear Cookies".
• In the "Delete Cookies" box click "yes".

Internet Explorer 7.x
• Exit Internet Explorer 7 and close all Windows Explorer windows.
• Click on "Start", "Run" and enter inetcpl.cpl, and then click on "OK".
• On the "General" tab, click "Cancel" under "Browsing history" in the "Internet properties" box.
• In the "Clear browsing history" box click on "Clear Cookies".
• In the "Delete Cookies" box click "yes".

Internet Explorer (all other versions)
Internet Explorer saves cookies in several places depending on the version of the browser and on the Microsoft Windows system used.
The best way to find and delete cookies is to close Internet Explorer and use the resource explorer tool (for example Windows Explorer) to search for a folder called "cookies".

Google Chrome
• Click on the "Settings" icon at the top right of the menu.
• Select "Settings".
• At the bottom of the page, click “Show advanced settings”.
• In the "Privacy" section click on “Content settings”.
• To disable cookies, select “Prevent websites from setting data” (alternatively you can remove all cookies created in a specific time interval by selecting it from the drop-down list).
• Select "Clear browsing data" to clear all trace of the websites you've visited.
• Select "Clear download history" to clear the archive of the files and programs you have downloaded.
• Select "Empty the cache" to delete the pages of the websites inserted in the cache memory.
• You can also delete saved passwords (the ones you use to access the websites) and the data used to fill in forms (for example name and surname).
• Then click on the "Clear browsing data" button.
• Click on the "Close" button.

Mozilla Firefox
• At the top of the Firefox window, click on the Firefox button and select "Options" then go to the "Privacy" panel.
• In the "Cookies" panel click on "show Cookies".
• To remove a single cookie, click on the single item in the list and then click on the remove cookie button.
• To remove all cookies click on the button “Remove all cookies”.
• From the drop-down menu click on "Preferences".
• Select the "Security" tab.
• Click on the "Show cookies" button.
• Select the cookies you want to remove from the list.
• Click on the "Cancel" button.

Safari 1.0 (MacOS X)
• From the drop-down menu click on "Preferences".
• Select the "Security" tab.
• Click on the "Show cookies" button.
• Select the cookies you want to remove from the list.
• Click on the "Cancel" button.

Processing methods
By means of IT tools, these data are processed for the time strictly necessary according to the purposes for which they were collected.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

Purposes and legal basis
Navigation data is collected, stored and processed to allow anonymous and aggregated statistical analysis of the website to be carried out; the legal basis for this is the pursuit of Oikos’ legitimate interests relating to our operations.
Processing, in the case of spontaneous emails, is necessary to enable Oikos to respond to requests made by the user and the legality of this processing is based on the user’s consent and interest in receiving the requested information.

Optional provision of data
The provision of data for the purposes of the user being contacted by Oikos is optional and therefore the user is not obliged to provide the Data Controller with any type of data as a prerequisite for being able to use the website. Failure to provide data has zero consequences. Aside from as specified above regarding navigation data, the user is free to provide personal data in spontaneous emails to solicit a response, informative material or other communications; failure to provide data in this case, however, will make it impossible for Oikos to fulfill the user’s request.

Recipients of the data
The data resulting from the statistical analysis in aggregated and therefore anonymous form above may be communicated to:
a. subjects delegated and / or appointed by the Data Controller to carry out the activities related to the technical management of the website who are appointed as Data Processors, a list of which is available from the Data Controller's headquarters;
b. subjects whose right to access the data is recognized by legal provisions or by orders of the authorities.
The Data Controller, and / or third party companies duly appointed as Data Processors, manages and stores personal data on servers located within the European Union. The servers are currently located in France. The data will not be transferred outside the European Union, unless considered necessary by the Data Controller in which case it is understood that the Data Controller has the right to move the location of the servers to Italy and / or the European Union and / or non-EU countries. In this case, the Data Controller undertakes to ensure that the transfer of data outside the European Union will take place in accordance with the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection and / or by adopting the standard contractual clauses provided by the European Commission.

Transfer to a third country
The Data Controller does not intend to transfer personal data to a third country or to an international organization. Should this happen, it will only be done on the basis of an adequacy decision by the EU Commission or on the basis of standard data protection clauses of EU GDPR (see Article 46 or 47, or the second subparagraph of Article 49(1), with reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available).

Retention period of personal data
Only the technical cookies will be kept for 6 months, after which they will be deleted from the servers where they are located.

Rights of the interested party (the user)
As an interested party, you have the right to ask the Data Controller, at the addresses indicated above, for access to your personal data and for the modification or cancellation of the same, for the limits on the processing that concerns that data or to restrict processing where this is possible, in addition to the right to data portability. Furthermore, you have the right to withdraw your consent at any time without compromising the lawfulness of the data processing based on the consent given before the withdrawal, in the event that permission was given for specific purposes or that consent was given concerning the processing of particular data such as those relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, union membership, as well as processing genetic data, biometric data intended to uniquely identify a natural person, health-related data or data on sexual life or sexual orientation, except in cases where Union or Member State law provides that the person concerned cannot withdraw this consent. You have the right to lodge a complaint with a supervisory authority, which for Italy is the Guarantor for the protection of personal data, by email, at: garante@gpdp.it, by fax: 06 696773785, or via mail, at the headquarters located in Piazza di Monte Citorio 121, 00186 Rome (Italy).

Automated decision-making processes
Automated decision-making processes are not carried out on users' personal identification data. Automated assessments (e.g. Google Analytics) are carried out on the aggregated data collected anonymously for the better management of the website.

DISCLOSURE
for processing of personal data of the supporters of ISTITUTO OIKOS pursuant to articles 13 and 14 of EU Regulation 679/2016

In relation to the personal data, communicated by you or by third parties delegated for this purpose, with the aim of collaborating and also contributing financially to the achievement of the mutual purposes pursued by the ISTITUTO OIKOS, we provide you with the following information.

1) Who is the Data Controller?
The Data Controller in question is the ISTITUTO OIKOS, C.F. 97182800157, with registered office in 21100 Varese, Via Magatti 2, in the person of its pro tempore Legal Representative, Tel. +39 02/21597581, Email: privacy@istituto-oikos.org.

2) What personal data do we process?
We only process general personal data and bank data, spontaneously provided, directly through our website or through our social channels, and we only ask for the minimum data sufficient for the services offered (donations, newsletter subscription, request for information and registration for any initiatives through contact forms, etc.).

3) Why do we collect data?
Your data are processed for the purpose of promoting the social utility objectives provided for by our statute (for more information see the following link: www.istituto-oikos.org), aimed at:
• the promotion and implementation of programs for the protection and sustainable management of environmental and historical-cultural heritage and activities for the recovery, restoration and enhancement of natural landscapes;
• the promotion of innovation in the protection and enhancement of environmental resources, through scientific research, studies, planning, education and training activities;
• the creation of programs, initiatives and projects aimed at reconciling the objectives of socio-economic development with the protection of environmental and cultural resources, with a view to sustainable development and the fight against climate change;
• the promotion and implementation of awareness-raising and information initiatives on the issues of interdependence and relations between the environment and development, on the principles of peace, international solidarity and cooperation between peoples.
Your personal data will also be processed so that we can keep you updated on the projects, initiatives and events that we organize and for which your contribution may be needed, through institutional communications and by way of newsletters.

4) On what basis do we process the data?
Data processing is based on your voluntary and spontaneous provision of the same, and therefore on our legitimate interest in sending subsequent communications regarding new activities and initiatives, so that you can participate. You can change your mind at any time, if you wish, in which case it will no longer be possible to process your requests to support our statutory purposes.

5) Who processes the data?
The personal data relating to the processing in question may be disclosed to third parties for purposes related to the provision of the Data Controller 's services, and in particular:
- to collaborators and volunteers of the Data Controller for the execution of the statutory corporate purpose;
- to credit institutions for the endorsement of payments;
- to professionals appointed by the Data Controller;
- if requested, to the competent Authorities for investigations and / or for the suppression of crimes.

6) How do we process and store data?
The data provided are processed with automated tools, for the time strictly necessary to achieve the purposes for which they were collected; they will be kept for the entire duration of the project or initiative in which you are interested or to which you are contributing to keep you updated regarding progress. Subsequently, we reserve the right to send you communications and information on new initiatives, projects or events undertaken by our organization, from which you can unsubscribe at any time.
In particular:
- if you subscribe to our newsletter through the form on our website www.istituto-oikos.org, your data will be kept until you unsubscribe by simply clicking on the link as indicated (opt-out);
- if you make a request to obtain a copy of the materials published on our website, your data will be kept for the time strictly necessary to execute your request and subsequently to inform you of our initiatives, events and projects, by telephone or email communications, including newsletters;
- if you support our projects, as published on our website and / or on our social channels, by completing the forms with the data requested , your data will be kept for the entire duration of the project or initiative, and for as long as you have authorized periodic donations; you will also be kept updated on the progress of the project or initiative. Subsequent to the termination of the project or initiative, and therefore to the achievement of the pre-established purpose for which the data was provided, or following a single donation, your bank data will be deleted, while your other basic data will be kept for the sole purpose of updating you. on subsequent initiatives, projects and events organized by Oikos, by telephone or email, or through newsletters.

7) What are your rights?
You always have the right to:
- obtain confirmation of the existence of personal data concerning you, even if not yet registered, and receive communication in intelligible form of the same data and their origin, as well as the purposes and methods of processing and the logic applied in case of processing carried out with electronic instruments;
- obtain the cancellation, transformation into anonymous form or blocking of data whose conservation is not necessary in relation to the purposes for which the data were collected and processed;
- update or modify your data;
- object, in whole or in part, for legitimate reasons, to the processing of data concerning you, even if this data is pertinent to the purpose of its collection;
- obtain from the Data Controller – on the assumption that the legal basis of the processing is the contract or consent, and the same is carried out by automated means – your personal data in a structured and readable format by automatic device, also for the purpose of communicating this data to another data controller (so-called right to the portability of personal data);
- withdraw consent at any time, limited to the cases in which the processing is based on your consent for one or more specific purposes and regarding common personal data (for example date and place of birth or place of residence), or particular categories of data (e.g. data revealing your racial origin, your political views, your religious beliefs, your health or sexual life). The processing based on consent and carried out prior to the revocation of the same, however, retains its lawfulness;
- complain to a supervisory authority (Guarantor for the protection of personal data: www.garanteprivacy.it)
01/04/2020
Istituto Oikos