We respect your privacy and are aware of your rights. We use your data only and exclusively for the purposes for which you gave them to us.
On a regular basis we write a newsletter to send useful materials, reports, stories and other information on the themes of the site. To subscribe you can use the form that you find at the bottom of each page. The newsletter is managed with Brevo (SENDINBLUE), your e-mail address is stored on SENDINBLUE’s servers, and periodically SENDINBLUE, like any platform that manages newsletters, provides us with information about newsletter openings and who clicks on the links. You can decide to stop receiving the newsletter at any time, through the link at the bottom of each message. You can choose to update, modify or delete your data by accessing your profile page.
Personal data will be processed, mainly electronically and with analysis tools, including statistical ones, by the ENIGMAP Association – data controller – Corso Giolitti n.2 – Cuneo (CN) (hereinafter: “ENIGMAP”), for the fulfillment of all phases related to the donation and instrumental activities (e.g., game management, information and messages about site activities). In addition, they will be processed to comply with administrative and other mandatory rules under the law in force in our country or by virtue of EU decisions and kept for the time imposed by these disciplines. Data will be processed for purposes of promotional, informational and institutional contacts about our projects, activities and initiatives, surveys and research reserved for users of the site and other individuals who have expressed interest in ENIGMAP actions (ex: adherents to our initiatives), based on “legitimate interest” (art. 6, paragraph 1, letter f, GDPR and recital C47, GDPR) of ENIGMAP in keeping active the relationship voluntarily established by the data subject and informing him/her about its activities or actions that ENIGMAP deems useful to make known to demonstrate its continued commitment to the realization of its goals and objectives. The data will be kept in our archives for the period necessary to maintain the relationship established with the person concerned and inform him/her of the above, allowing ENIGMAP to continue, legitimately, its institutional activity as long as the person is deemed to be interested in our goals and objectives. This retention period may be reduced if the data subject no longer has an interest in receiving proposals and information from ENIGMAP by communicating this in the manner explained below, and ENIGMAP will take appropriate technical and organizational measures to no longer contact the person. Subsequently, the data will be anonymized for statistical purposes and then destroyed, unless otherwise ordered by the supervisory authorities, law enforcement agencies and the judiciary. If desired, data will be processed for contacts having the purposes just stated and executed in a personalized manner based on behavior characteristics (e.g., amount donated, frequency of donation, country and area of residence, content viewed on the website), interests and preferences with respect to our actions (“profiling”). This will involve the selection of the information stored with respect to the person, so that this receives communications of interest to him and in line with his preferences. The data will be retained as long as your profile is in line with the personalized communications created through the cross-referencing of the information available to us and, therefore, as long as ENIGMAP pursues its goals and objectives with activities that require economic contributions or that are in the person’s interest because they reflect the person’s characteristics and behaviors and are, therefore, of his/her specific interest and not disruptive. The retention will cease if the interested party expresses opposition at any time to the processing of personal data concerning him carried out for profiling to the extent that it is connected to direct marketing. All the aforementioned activities can be performed through traditional and electronic communication tools.
The data processors are: ENIGMAP and BREVO – www.brevo.com. Persons authorized to process for the aforementioned purposes are those involved in managing relations with actual and potential data subjects, administration, institutional and statutory activities, call center, Web services, information and data security systems. The data will also be processed by other external managers responsible for services connected to the above, as well as by third parties, independent data controllers, for purposes instrumental to the management of donations or administrative activities, and, for what is not indicated here, required to return information to be provided pursuant to art. 13, GDPR. Authorized persons are the processors to institutional activities, administration, organization of projects and initiatives, events and fundraising, call center, information and data security systems. Pursuant to Articles 15-22, GDPR, by writing to the owner at the above postal address or e-mail info@enigmap.net, you can exercise your rights to consult, modify, delete and forget, limit the processing of your data or oppose their processing for legitimate reasons or for informational, institutional and promotional purposes, including limited to one or more contact tools (e.g., via e-mail and/or mail and/or phone and/or Sms). If not specified, the opposition to the processing of data for information and promotional purposes will be understood as extended to all contact tools. In case of revocation of the consent given, which can be presented at any time, it is understood that this does not affect the lawfulness of the treatment based on the consent previously expressed or on alternative mechanisms to consent permitted by law. You can request a complete and updated list of data processors and third parties to whom the data may be disclosed. Finally, you have the right to request a list of managers and data portability, i.e. to receive your data in a structured format, commonly used and readable by common electronic devices, to transmit them directly to another subject, independent data controller, so that it can process them within the limits established by the person concerned. You have the right to lodge a complaint with the supervisory authority to assert your rights.
