If you are reading this policy, it means that you have landed on our website. We have provided these indications so that you can understand how we process your personal data when you browse our website or when you interact with us through it: for example, when you write to us, when you make a donation, when you subscribe to our newsletter, etc. On all these occasions, as well as others, we process some of your personal data. We do so in accordance with EU Regulation 679/2016 (GDPR) and in accordance with the Privacy Code as amended by Legislative Decree 101/2018.
Who is the controller of your data?
The Joint Controllers for the processing of data collected through this website are the MONASTERY OF SAINT RITA and the SAINT RITA FOUNDATION ETS, both with registered office at Viale Santa Rita, 13, 06043 Cascia (PG) Italy, (hereinafter also referred to as “Joint Controllers“). You can contact the Joint Controllers at the following email address [email protected], by calling us on +39 0743 76221 or by writing to us at our address.
Why do we process your data and when do we collect them?
BROWSING DATA
As Joint Controllers, while you browse our website we collect some of your data for the purposes of analysing and processing information, your preferences and browsing experiences. To carry out this activity, we use technologies such as cookies (our own or those of third parties). Data collection through the use of cookies only takes place with your express consent (art. 6, letter a, GDPR). We inform you of this by means of a banner at the bottom of the website when you connect for the first time. Here you can analytically choose which cookies you want to install (the necessary ones are always installed, otherwise the website would not work correctly). For more information on what cookies are, their function, etc. you can read our cookie policy. The retention period for these data is defined in the cookie banner, and you can choose to display them analytically or in the settings menu at the bottom left of each page of the website. Look for this symbol: .
REQUEST THE MAGAZINE
If you decide to request our magazine “From the Bees to the Roses“, we will process your personal data and those relating to your address.
Can we do it without your consent? Yes, because we are following up on your request (art. 6, letter b, GDPR).
How long do we keep these data? We keep these data for 5 years from the last time the magazine is sent. You can choose not to receive it anymore at any time, in which case you just have to write to us and we will remove you from our list of recipients.
PILGRIMAGE
In this section you can organise a group pilgrimage by sending us information about the number of participants and your intended arrival date in Cascia. In order to be able to contact you and inform you about the details of your trip, we process your personal and contact data, which you can find in the request form.
Can we do it without your consent? Yes, we can process these data to follow up on a request (art. 6, letter b, GDPR) and we do not need your express consent.
How long do we keep these data? We process these data for 5 years from your last interaction with us (in this case the last occasion could also be your pilgrimage, or you might read our newsletter – which we send to stay in touch with you after your trip – and thereby remain in our databases until you stop doing so, for at least 5 years).
PRAYER INTENTIONS
On our website you can also send us a prayer intention and we nuns will pray for you. In this case, we process your personal and contact data but also some of your more sensitive data. These data are carefully stored and absolutely never shared.
Can we process these data without your consent? Yes, both your general data (such as your name, surname, address) and the more sensitive information (i.e. your health condition, that of your loved ones, etc.). We can do this because we are following up on your request (art. 6, letter b, GDPR) and because we are a non-profit entity and we treat your data with the utmost care, guaranteeing their full security (art. 9, letter f, GDP
How long do we keep these data? When you decide to write a prayer intention to Saint Rita, for us, it is the beginning of a journey with you. That is why we will carefully store your personal data within your “Diary“ on our internal management system. We will keep your diary updated for 5 years from your last interaction with us, after which we will delete all your data permanently.
On some occasions you may issue a prayer intention for a loved one and, if you give us their contact details, we will send them a card informing them that you have prayed for them. We will also ask them to stay in touch with us at the Foundation and Monastery. They will obviously be free to join or not, and if they choose not to, we will delete their personal data that you gave us.
SUPPORT US AREA
Within our “support us” area, you can decide to allocate your 5×1000 to the Saint Rita Foundation. In this case we will collect your phone number, your email address or the details of your accountant. We will use these data to send you a reminder during your tax reporting period.
Can we do it without your consent? Yes, we send you these communications to carry out a request made by you, so we do not need any express consent (art. 6, letter b, GDPR).
How long do we keep these data? These data are kept for 5 years. If you don’t want to receive the reminder any more, just contact us and we will no longer send you any further notifications.
DONATE NOW AREA
If you decide to donate, we will process your personal data and the data relating to your chosen payment method.
Can we do it without your consent? Yes, these data can be processed without express consent because they are necessary to carry out the donation contract (art. 6, letter b, GDPR).
How long do we keep these data? These data are kept for 10 years as required by law (art. 2220 of the Italian Civil Code).
When you decide to become our donor, for us, it is the beginning of a journey with you. That is why we will carefully store your personal data within your “Diary“ on our internal management system. We will keep your diary updated for 5 years from the last interaction with us, after which we will delete all your data permanently, except those we need to comply with legal obligations.
BECOME A VOLUNTEER
If you decide to donate your time to help us carry out our projects, you can send your personal and contact data through our website www.sostieni.santaritadacascia.org.
Can we do it without your consent? Yes, you don’t need to give us your consent if you want to become a volunteer. We will process these data to follow up on your request (art. 6, letter b GDPR).
How long do we keep these data? Your data are stored within a digital “Diary“ that we carefully protect. The data are kept for 5 years from your last interaction with us, i.e. from your last volunteering experience, from your last donation, from the last time you read our newsletter and/or interacted with us. After this time, your data will be permanently deleted.
NEWSLETTER
On the website you can also subscribe to our newsletter and in this case, we will process your name, surname and email address.
Can we do it without your consent? Yes, because we are carrying out a request made by you (art. 6, letter b GDPR).
How long do we keep these data? We will keep these data for 5 years from the time of your last interaction with us. You can still request the deletion of your data at any time and we will see to it immediately.
“FATTO PER AMORE” SHOP
On our website you can also buy handmade products crafted by the Nuns and our Little Bees. In this case, we will process your personal and contact data in order to send you your purchase.
Can we process these data without your consent? Yes, because we need them to carry out a contract (art. 6, letter b, GDPR).
How long do we keep these data? We keep these data for 10 years (art. 2220 of the Italian Civil Code). In addition, when you choose to support us by buying what we make with love, we create a “Diary” for you on our internal management system that allows us to nurture the relationship we have established. The data entered into the Diary are kept for 5 years from the time of your last interaction with us (for example, from the last time you made a purchase, from the last time you wrote to us, etc.).
BEQUESTS
It is possible, if you so desire, to make bequests in favour of the Monastery of Saint Rita. In this case, we will process your personal, contact, and any other data related to the bequest that you want to leave. In this case, we will send you the information brochure on bequests and contact you to explain how a bequest works.
Can we process these data without your consent? Yes, because we need them to carry out a contract (art. 6, letter b, GDPR).
How long do we keep these data? The data relating to bequests are retained in accordance with the applicable laws, sometimes even indefinitely. The personal data that you provide to us by filling in the bequests brochure will be entered into our management system, thus creating your “Diary”. The “Diary” allows us to foster the relationship we have established with you. The data entered into the Diary are kept for 5 years from the time of your last interaction with us (for example, from the last time you wrote to us, etc.).
How do we process your data?
Your data will be processed using tools and procedures which are suitable to guarantee their security and confidentiality. Processing may be carried out either through our website or through other electronic tools (for example, internal management systems), and sometimes also with the support of paper-based media. In addition to the Controller, other subjects involved in the organisation of this website may in some cases have access to the data (administrative and commercial personnel, system administrators, etc.), as may external parties (such as third-party technical service providers, hosting providers, IT companies, communications agencies, data entry agencies) appointed as Data Processors by us in the cases provided for by the legislation. You can obtain the complete list of data processors by writing to us at the email address [email protected]
Where are your data?
The processing we carry out with your personal data takes place within the European Union. We have chosen partners who allow us to keep the data within the EU, in compliance with the requirements of the Regulation. However, by installing cookies, your browsing data (IP address) may be transferred outside the European Union and in particular to the United States (by way of a non-limiting example, to Google).
Who has access to your data?
Your data may be made accessible to the employees and collaborators of the Foundation and Monastery in their roles as data processors and/or system administrators, and/or to other third parties (for instance: professional offices, consultants, software houses which provide our management systems, etc.) which perform activities on our behalf on an outsourcing basis, in their roles as external processors.
We do not disclose your data in any way.
What are your rights?
As a data subject you have multiple rights. For example, in the cases provided for, the right to obtain access to your personal data and the rectification or cancellation thereof, or limitation of or opposition to their processing (to find out what your rights are, you can consult the Regulation under Articles 15 et seq.). To exercise your rights, you can write to us or call us at the contact details at the beginning of this policy.
Right to lodge a complaint
If you believe that the processing violates your rights in any way, you can lodge a complaint with the Italian Data Protection Authority, verifying the procedures on the website www.garanteprivacy.it. You can view the complaint form on the following page https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/4535524 .
Protecting the privacy of minors
This website is aimed at a general audience, however its services are intended for people aged 18 years and over. We do not request, collect, use or disclose personal data from persons under the age of 18 online. If we discover that we have collected personal data from a minor, we will delete it immediately.