Last updated on July 09, 2018
We are committed to the lawful, fair, and transparent collection and use of personal data. This notice is intended to help you understand how our Foundation collects and uses your personal data, as well as how we share, store, and protect that data. If at any time you have questions about this notice, please let us know.
We may update this notice and any supplemental privacy notices to reflect changes in our practices and applicable law. We will post a notice of any material updates on our sites.
When this notice applies
This notice applies to personal data we collect, including through our website.
This notice does not apply to any third-party sites that may link to, or be accessible from, our site. The third parties’ applicable privacy notices, statements, or policies govern your interactions with these sites. We encourage you to read them.
What data we collect about you
We collect your personal data when you voluntarily provide it to us. For example, you may give us: your email address, country of residence, or other information from us; your contact information, and any other personal data you choose to include, if you email, text, or instant message us, or contact us through our sites; and any personal data contained in, or included with, any proposal documents, feedback, comments, photos, videos, or other information you submit via mail or through the interactive portions of our website.
It is always your choice whether to provide the above-mentioned personal data. However, some personal data must be provided to receive more information, so the decision not to provide information might limit or eliminate certain functions of our website. Please do not disclose more personal data than is requested.
Do not provide personal data about others unless you are authorized or required to do so by contract or applicable law. You may provide personal data on behalf of another person if you have provided them with a copy of this notice and any applicable supplemental privacy notice, and obtained their explicit consent. We may ask you to provide evidence of that notice and consent.
We may receive personal data about you from other sources, including your company/organization, professional references, publicly available sources, third-party analytics providers, and other third parties. For example, we may receive your personal data if: someone at your company/organization designates you as a contact person for that company/organization or includes information about you in proposal documents; another visitor includes it in any feedback, comments, photos, videos, or other information submitted via mail or through the interactive portions of our website; or one of our employees or service providers provides or a third party acting on apparent authority provides it to us when registering you to access our website or to participate in one of our events.
We may collect some personal data automatically. For example, when you visit a foundation site, we may collect your Internet Protocol (IP) address, Internet service provider (ISP), and browser type and language. We also may use cookies and similar technologies to collect data about your interaction with our sites, including referring webpage, pages visited on our sites, and crash data.
We will not intentionally collect any “special categories of data” under the EU General Data Protection Regulation (GDPR) without your explicit consent for one or more specified purposes or as otherwise permitted or required by applicable law. Special categories of data include personal data (a) revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; or (b) concerning health or data concerning a natural person’s sex life or sexual orientation.
How we use your data
If you are in the European Union, we will collect and use your personal data only if we have one or more legal bases for doing so under the GDPR. The legal bases depend on your interaction with us. This means we collect and use your personal data only where: you have given your consent for one or more specific purposes; it is necessary to perform a contract we are about to enter into or have entered into with you; it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; it is necessary to protect the vital interests of you or another natural person; or it is necessary to comply with a legal obligation. We will indicate in brackets the legal basis or bases on which we are relying following each purpose. Where we are relying on consent as the legal basis, we will notify you and seek additional consent before using your personal data for a new purpose that is inconsistent with the original purpose for which we collected it.
When we share your data
We may share your personal data with our employees and affiliates who have a business need to know, our services providers (including contingent workers, consultants, contractors, vendors, and out-sourced service providers) to process it for us based on our instructions and for no other purpose, and with partners that are collaborating with us to fund projects or host events. We do not share your personal data with any third party (including our service providers) for marketing purposes. If you believe a third party is misusing personal data you provided to us, please contact us right away.
We may share your personal data with law enforcement, other government agencies or authorities, or third parties as required by applicable law, court order, subpoena, or legal process served on us.
How we store and protect your data
Your personal data may be stored in your region or in any other country where we or our service providers have facilities. We may also allow employees and service providers located around the world to access personal data as provided in this notice. If you are in the European Union, we will ensure your legal rights and protections travel with any such “transfer” of your personal data outside the European Economic Area, Switzerland, or Canada. We do this by signing “standard contractual clauses” approved by the European Commission that give personal data the same protection it has in the European Union, and/or requiring that our service providers be certified under the EU-US Privacy Shield Framework or the Swiss-US Privacy Shield Framework.
We will store your personal data until it is no longer needed to fulfil the purpose(s) for which it was collected or as otherwise required or permitted by the applicable law. After such time, we will either delete or anonymize your personal data or, if this is not possible, we will securely store your personal data and isolate it from any further use until deletion is possible. We may dispose of any data in our discretion without notice, subject to the applicable law. Please contact us if you would like more details regarding our retention periods for different categories of personal data.
As the transmission of data via the internet is not completely secure, we cannot guarantee the security of your information transmitted to our sites and any such transmission is done completely at your own risk. However, we maintain appropriate technical and organizational measures, including performing regular self-assessments, to prevent unauthorized disclosure of, or access to, personal data. We limit access to personal data and require that employees authorized to access personal data maintain the confidentiality of that data.
How you can access and control your data
Generally, newsletters, auto-generated emails, and updates from us will include links to access, correct, or delete your personal data. If you wish to obtain confirmation that we hold personal data about you, access, correct, or delete your personal data, withdraw any consent you previously provided to us, or object to or restrict our processing of it in any other context, please contact us in writing at the address stated below. We will respond to all legitimate requests within 60 days.
To the extent provided by applicable laws (including the GDPR), you also may have the right to have the data or content deactivated, blocked, anonymized, or deleted, as appropriate, request and receive a copy of the personal data you have provided us and to transmit this data to a third party, and lodge a complaint with the applicable data protection authority. Should you wish to exercise any of these rights, please contact us in writing at the address below.
How to contact us
Mail: Fondazione Giammaria e Sabrina Giuliani
Contrada di Sassello, 2 – 6900 Lugano (CH)
Email: info@giulianifoundation.com