Privacy Policy
This note is provided in accordance with art. 13 of EU-Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, Directive 95/46/EC, General Data Protection Regulation (the “GDPR”).
Controller
The Controller is the non-profit association „ASSOCIAҪÃO VOZ DA CRIANҪA DO PORTO NOVO„, with office in Galè- Alto S. Tomé – CP 50 1310 Porto Novo / Santo Antao – Cape Verde Islands (the “Controller„), currently managed and represented by Mrs. Albertina Rodrigues Pinto. The Controller may be contacted at the e-mail address: associacaovcrianca@gmail.com
Purpose of the processing
The Controller does not pro-actively collect personal data of any kind from the User. Personal data may be transferred from Users to the Controller on a voluntary basis and will be processed by the Controller only and exclusively for the purposes of: a) performing the Users’ requests for information about the Controller’s non-profit activity and possible donations or support; b) complying with the Controller’s duties provided by mandatory provisions of law. Personal data may be stored in analogical or digital archives (including mobile devices) and processed on a strict need-to-know basis for the purposes mentioned above.
Legal basis for the processing
The Controller lawfully processes the personal data to the extent the data processing: a) is necessary for answering Users’ requests for information about the Controller’s non-profit activity and to receive possible donations or support, issuing the relevant fiscal documents to be provided to the Users; b) is necessary for complying with a legal obligation to which the Controller is subject.
Consequences of failure to provide the personal data
Should the provision of personal data be a statutory or contractual requirement, or a requirement necessary to enter into a contract (e.g. for fiscal and accounting purposes), then the failure to provide the personal data may prevent the conclusion of the relevant contract, the providing of information about the Controller’s non-profit activity and/or the acceptance of the User’s relevant donation or support.
Data storage
Any personal data shall be processed in compliance with the provisions above and stored by the Controller for a period equal to the duration provided for by the mandatory provisions of tax and fiscal laws with reference to donations and, after expiry or termination, for a period equal to the duties of the Controller to store and keep records of those personal data (e.g. for fiscal purposes).
Further data processing
Personal data may be further processed by: a) advisors and accountants or other lawyers providing ancillary professional advisory services to the Controller’s activity; b) banks or insurance companies providing services in connection with the Controller’s activity; c) entities processing the personal data for compliance with a specific legal obligation; d) judicial or administrative authorities in connection with their legal obligations.
Profiling and further data processing
Personal data is neither subject to further data processing nor to any automated decision-making mechanism, including profiling.
Rights of the data subject
The GDPR grants to the individual the following rights vis-à-vis the Controller:
- to obtain access to his or her personal data and to any relevant information, to rectify any inaccurate of the personal data or to have incomplete personal data completed, to eliminate personal data concerning him or her (should one of the grounds listed under art. 17, paragraph 1 of the GDPR occur and notwithstanding the exemptions under paragraph 3 of article 17), to obtain restriction of processing (where one of the situations under art. 18, paragraph 1 of the GDPR occurs);
- to obtain – in those cases in which the processing is based on consent or on a contract and such processing is carried out by automated means – his or her personal data in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller (right to data portability);
- to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her;
- to withdraw his or her consent at any time with reference to the processing based on the individual consent, based on his or her particular situation and refers to general data (e.g. date and place of birth or of residence) or on particular data (e.g. data revealing racial or ethnic origin, political opinions, religious of philosophical beliefs, health and sex life or sexual orientation of the data subject) and provided the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;
- to notify a breach of a personal data protection to the supervisory.