Privacy Policy

PRIVACY POLICY

This privacy policy (“Policy“) summarizes the terms and conditions under which the Fashion in Progress association (C.F.  97981380153) with registered office in Milan, Corso Monforte 16 (the “Association“) processes and manages – on its website www.fashioninprogress.org (the “Site“) – the personal data of users who consult it and which may be collected, recorded and used, in accordance with the purposes and legal basis represented below.

The Site is managed by the Association, as the data controller of the personal data collected.

In order to allow the identification of the Association, the relevant details are given below:

  • Milan (Italy)
  • Corso Monforte n. 16
  • tax code 97981380153
  • e-mail info@fashioninprogress.org

Please note that the Policy refers exclusively to the Site and not to other websites consulted by the user through links, articles and material that may be present in the sections of the Site.

PURPOSE. LEGAL BASIS OF THE PROCESSING 

The Policy is aimed at users who interact, or request to interact with the Association through the appropriate sections on the Site, in accordance with the provisions of the legislation in force from time to time, Legislative Decree no. 196/2003, Code regarding the protection of personal data (the “Privacy Code“) and EU regulation 679/2016 applicable from 25 May 2018,  General Data Protection Regulation (the “Regulation“) (together also the “Applicable Regulation“) regarding the collection of personal data, and, in particular, the methods, times and nature of the information that the data controller must provide to users when they connect to web pages of the Site, regardless of the purposes of the connection.

The processing of personal data transmitted through the Site may take place to satisfy a request of the interested party.

The data may also be used, and communicated to the competent authorities, for the fulfilment of legal obligations and the ascertainment of any liability in the event of hypothetical computer crimes committed through the Website, as well as for the pursuit of the legitimate interest of the data controller.

Pursuant to Article 6 of the Regulation, the processing of data will be considered lawful, among others, to the extent that such processing takes place with the express consent of the data subject, with specific reference to one or more purposes (for example, for the processing of personal data contained within a generic request by the user of the Site, forwarded through the appropriate contact section).

PLACE OF DATA PROCESSING 

The processing of data related to the web services of this Site takes place at the headquarters of the Association.

BROWSING DATA

During the normal operation of the Site, the computer systems and software used to use it automatically collect some personal data. This collection takes place implicitly through internet communication protocols.

This information is not collected with the intent to identify specific users, but, when combined with other data, it may be possible to identify them. This data includes IP addresses, the domain names of the devices used to access the Site, the addresses of the resources requested (URI), the time and method of the request, the size of the files obtained, the status code of the server’s response (successful, error, etc.) and other information relating to the user’s operating system and IT environment.

These browsing data are used exclusively for anonymous statistical analysis of the use of the Site and to verify its correct functioning. For this reason, they are deleted immediately after processing.

The Site does not collect any personal data from users.

OPTIONAL NATURE OF THE PROVISION OF DATA 

The user is free to provide his/her personal data by filling in the request forms on the Site, by sending e-mails for information purposes or for other communications.

However, failure to provide personal data could make it objectively impossible for the Association to provide a response to the request made.

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this Site for the transmission of requests, requires the express consent of the interested party in order to subsequently acquire, by the Association, personal data, including the name and address of the sender, necessary to respond to any requests transmitted, as well as any additional personal data communicated through this message,  for the purposes of processing in accordance with this Policy. 

COMMUNICATION OF DATA

The processing of personal data will be carried out exclusively by the staff of the Association and, if necessary in consideration of the request made, by the individual members of the bodies of the same. 

The information provided by users through the Site, however, will be communicated to third parties only in cases where this is indispensable to provide a response to the request made, in any case in compliance with the Applicable Regulation.

No data deriving from the use of the web service will be disseminated.

METHODS AND TIMES OF TREATMENT 

Personal data are processed for the time strictly necessary to achieve the purposes for which they were collected. 

The maximum retention period is 10 (ten) years. 

In the case of personal data not collected directly from the data subject, the information will be provided within a reasonable time, in any case not exceeding one month from the collection, or at the time of communication of the data to the data subject or to third parties.

In accordance with the provisions of Article 32 of the Regulation, specific technical and organisational measures are adopted to protect the rights of data subjects, which aim to prevent the destruction, loss or modification of data, unauthorised access or disclosure, as well as illicit or improper use, ensuring a level of security appropriate to the risks.

Pursuant to Article 33 of the Regulation, if the Association becomes aware of a personal data breach, it may report it to the Privacy Guarantor, considering the level of risk that such a breach entails for the rights of the data subjects.

RIGHTS OF THE DATA SUBJECT

Article 7 of the Privacy Code and Articles 15 to 22 of the Regulation grant specific rights on the data subject.

In particular, at any time, the data subject may obtain:

  • confirmation of the existence or otherwise of personal data concerning him/her, even if not yet recorded, and their communication in intelligible form and portability, also to another data controller;
  • the indication of the origin and categories of personal data, the purposes and methods of processing;
  • the indication of the identification details of the data controller and of the data processors, possibly designated, as well as of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them and, in the case of data collected from third parties, information about their origin;
  • the specific retention period envisaged;
  • the updating, rectification, integration, as well as the deletion of personal data concerning him/her and the limitation of the related processing, the transformation into anonymous form or the blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed.

The data subject also has the right to object, in whole or in part:

  • for legitimate reasons, to the processing of personal data concerning him/her, even if pertinent to the purpose of the collection;
  • where applicable, to the processing of personal data concerning him/her for the purpose of sending advertising material or for carrying out market research or communication.

All these rights can be exercised by writing to info@fashioninprogress.org or by registered letter with return receipt addressed to the headquarters of the Association, as indicated above.

The Association will provide feedback to the data subject who exercises his or her rights in the terms and forms provided for in Article 12 of the Regulation. The Association, however, taking into account the requested feedback and if this is unfounded or excessive, may charge the interested party a fee equal to the administrative costs incurred for the response itself or refuse to provide feedback.

Pursuant to Article 13 of the Regulation, if the data subject believes that there has been a violation of the regulations on the protection of personal data, he or she will have the right to lodge a complaint with the Privacy Guarantor.

CHANGES TO THIS PRIVACY POLICY

The content of this Policy is subject to periodic verification, also in consideration of regulatory and organisational updates or in any case dictated by technological evolution.

In the event of changes to the policies on the Policy, the new version will be published in this section of the Site.