PRIVACY & COOKIE POLICY

Introduction

The processing of personal data carried out by ASSOCIAZIONE CASA ANDREA CRISTOFORO complies with the Federal Law on data protection (LPD) and the EU Regulation 679/2016, following the principles of fairness, lawfulness, transparency, purpose limitation, data minimization, accuracy, integrity, and confidentiality

This Privacy Policy applies to the website www.casa-ac.ch (hereinafter referred to as “Website”).

The Data Controller is ASSOCIAZIONE CASA ANDREA CRISTOFORO (CASA ANDREA CRISTOFORO)

In order to ask for further information about the processing of personal data or to exercise your rights, you can contact us:

1      What are personal data and what is processing

Personal data are pieces of information that directly or indirectly identify a natural person and can provide information about their characteristics, habits, personal relationships, etc. Examples of personal data include, but are not limited to: name, surname, address or other contact details, identification number or online identifier.

Processing refers to any operation carried out, with or without automated means, on personal data. Examples of processing include, but are not limited to: collection, recording, organization, storage, alteration, consultation, erasure, or destruction of data.

2      Which personal data are processed

1. Browsing data

The computer systems responsible for the operation of the website acquire some personal data as part of their normal operation, whose transmission is implicit in the use of Internet communication protocols. These are pieces of information not collected to be associated with identified interested parties but which, by their very nature, could, by means of processing and association with data held by third parties, allow the identification of the User. This data includes IP addresses or computer domain names used by Users connecting to the Website; URI addresses of the requested resources (Uniform Resource Identifier); the time of the request, and other parameters relating to the User’s operating system and IT environment. This data is used solely to obtain anonymous statistical information about the use of the website, to check its correct functioning, to identify anomalies and/or abuses, and is deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the Data Controller or third parties.

1. Data provided by the User

• The optional, explicit, and voluntary sending of emails to the addresses indicated on this Website involves the subsequent acquisition of the sender’s address, as well as any other personal data entered in the message, necessary to respond to requests. If the User send information regarding themselves falling within the scope of special or particularly protected data, such data will be processed as indicated in the Privacy Notice for the processing of Customers’ personal data, available at the following link: https://casa-andrea-cristoforo.ch/privacy-cookie-policy/?lang=en
• In case of interest in one of the job positions indicated in the Job Offers section, if the User send their CV via email as an attached file, CASA ANDREA CRISTOFORO reminds the User that if they intend to share information regarding themselves falling within the scope of special or particularly protected data, such data can only be processed if the User has explicitly consented it in the attached CV sent via email. CASA ANDREA CRISTOFORO, in any case, advises the User not to provide special or particularly protected data, except for those deemed absolutely essential by the User to allow an adequate evaluation of their application.
• In case of interest from the User in supporting CASA ANDREA CRISTOFORO as indicated in the Casa Promotion section (donations, loans, obligations, legacies), CASA ANDREA CRISTOFORO will process the following personal data: name, surname, contact details, address, IBAN.
• In case of interest from the User in receiving the newsletter “Corriere della Casa” via email or by post, CASA ANDREA CRISTOFORO will process the following personal data: name, surname, address, email.

3      Purpose of processing

User’s personal data will be processed for the following purposes:

• To respond to User’s requests by providing general information about the services offered by CASA ANDREA CRISTOFORO;
• To respond to potential candidates regarding job positions opened in the Job Offers section;
• To send the User communications related to the chosen service;
• To manage Casa Promotion activities in case of donations, loans, obligations, legacies;
• To send the Newsletter “Corriere della Casa” via email or post;
• To fulfil legal obligations, regulations, and to satisfy requests coming from competent Authorities;

4      Legal basis for User Data Processing

Each processing is justified by one of the following legal bases:

• The processing is necessary to fulfil User’s requests (predominant interest).
• The processing is necessary to comply with a legal obligation.
• If the User subscribes to one of Casa’s services, the legal basis for processing is the predominant interest of both parties, and regarding the processing of special data, the User’s consent.
• Regarding the purposes stated in point 3.5, the Newsletter will only be sent with the User’s consent, which can be revoked at any time by writing to the following email: direzione [@] casa-ac.ch.

5      Recipients of Data

Within the scope of CASA ANDREA CRISTOFORO’s activities and for the specified purposes, User’s personal data may be shared with:

• Data processors duly appointed to provide specific processing services on behalf of the data controller; the User can request an updated list of Data processors at any time;
• The Studio Medico which provides services within Casa;
• Independent Data Controllers to whom data may be communicated due to legal provisions or orders from authorities;
• Individuals authorized by the Data Controller to process personal data necessary for activities strictly related to service provision, with an appropriate legal and contractual obligation of confidentiality (e.g., employees and/or collaborators of the Data Controller).

6      Data Storage Location

All personal data are stored electronically on servers located in Switzerland.

7      Data Retention Period

User’s personal data are stored in compliance with current regulations for the period necessary to achieve the purpose for which they were collected; specifically, in case of service acquisition, data are kept for 10 years from the User’s last contact.

CVs and any personal data of Candidates are stored for a period not exceeding 24 months from CV receipt for advertised positions and not exceeding 12 months for spontaneous applications if the selection is unsuccessful.

When processing is based on the User’s consent, personal data are kept until the consent is revoked, but, in any case, not beyond 10 years from the Customer’s last contact in case of service purchase.

8 User’s Rights

The User can, at any time, request confirmation of whether their personal data is being processed or not. In relation to their data, the User has the right to:

• Request access to the data to obtain information on the purposes for the processing, the recipients to whom the data may be communicated, the duration of the processing (where possible), and the potential consequences of processing based on profiling;
• Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
• Request rectification of personal data if inaccurate or incomplete;
• Request the erasure of data if they are no longer necessary to the Data Controller for the purposes of the processing or inadequate for the purposes unlawfully, if the User has withdrawn their consent, or if the data has been processed unlawfully;
• Request restriction of data processing in the cases provided by law;
• Request the transfer of data to another Data controller in a common and machine-readable format, without any hindrance from the current Data controller;
• Object to the processing of their data, specifically the right to object to decisions concerning them if based solely on automated processing of their data, including profiling;

To exercise these rights, the User can use the contact details provided in the INTRODUCTION.

9   Automated Decision-Making

The User is not subjected to decisions based on automated processing.

10 Cookie Policy

The Cookie Policy provides information on how data is collected during user’s browsing on the Website and how this data is used.

Cookies are text strings that act as computer markers sent by a server (in this case, the Website’s server) to a user’s device (usually the internet browser) when they access a specific page of a website; cookies are automatically stored by the user’s browser and transmitted to the server that generated them each time the user accesses the same internet page. Cookies allow or facilitate access to certain internet pages to improve user navigation (e.g., by storing visited pages and other specific information) or, in some cases, enable profiling activities.

Characteristics and purposes of cookies

Our Website uses the following categories of cookies:

“Necessary Cookies” (Technical Cookies): Necessary for your navigation on the Website and the use of its features. In particular, they enable functions without which it would not be possible to fully use the Website, since their presence enables basic functions such as webpage browsing and access to website’s protected areas.

“Google Analytics”: This Site uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how you use the Site. The information generated by the cookie about your use of the Site will be transmitted to and stored on a Google server. Google will use this information for the purpose of evaluating your use of the Site, compiling reports on website activity for website operators and providing them other services relating to website activity and internet usage. Google will not associate the IP address transmitted by your browser as part of Google Analytics with any other data held by Google. You can prevent the storage of cookies by adjusting the settings on your web browser, but this may make the functions of the Site less personalised to your preferences. You can obtain information about the data processing activities of Google Analytics at the following address: https://support.google.com/analytics/answer/6004245; you can also prevent the recording of the data generated by the cookies and related to your use of the Site (including your IP address) as well as the processing of these data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=it.Utilizzando. You agree to the processing of your data by Google as the independent data controller in the manner and for the purposes set out in Google’s privacy policy in relation to the use of Google Analytics, which can be accessed at the following link: https://www.google.com/intl/it/policies/privacy/partners/.

Transparency towards the User

‍Through the use of Google cookies, we may transfer certain personal information (such as the IP address of the User’s device, the web browser being used, the operating system, the screen resolution, the language selected, the date and time of the website visit) to countries which, according to the Federal Data Protection and Information Commissioner (FDPIC), do not provide adequate data protection; these countries include the United States of America. Moreover, Google, as a ‘provider of electronic communication services’, pursuant to Section 1881(4)(b), Title50 of the U.S. Code (the so-called ‘Foreign Intelligence Surveillance Act’ – FISA 702) is subject to surveillance by the U.S. intelligence agencies, which can, therefore, collect online identifiers, such as IP addresses and ‘Unique Identification Numbers’; surveillance that is further strengthened by the federal measure known as the The Clarifying Lawful Overseas Use of Data Act (CLOUD Act). The CLOUD Act, introduced in March 2018, allows such agencies to acquire computer data from cloud computing service operators, even where the servers are located in Europe. Therefore, by giving consent for the use of such cookies, you agree to assume the risks you may incur, based on the information provided above.

Cookie Duration Criteria

• “Session Cookies”: active only for a specific session, allowing the temporary storage of information necessary for navigating from one page to another without having to re-enter them.
• “Persistent Cookies”: they expire on a specific date or after a certain period.

How to enable or disable cookies manually on your browsers

You can block the acceptance of cookies on the website or certain categories of them through your browser, even manually. However, this could make some functions or pages of the Website less efficient or prevent access to some of the functions or pages. Below are the methods offered by the main browsers to manually block the acceptance of cookies:

• Internet Explorer
• Firefox
• Chrome
• Safari
• Tor
• Srware

Description of consent methods for cookie installation

For the use of technical cookies (“Necessary”), your consent is not required.

11   Changes

CASA ANDREA CRISTOFORO reserves the right to modify or simply update the content of this Privacy & Cookie Policy, in part or in full, also due to changes in applicable regulations. Such changes will be binding as soon as they are published on the Website. If the User continues to access or use the service after such publication, it is presumed that they have expressly accepted these changes. Therefore, CASA ANDREA CRISTOFORO invites the User to regularly visit this section in order to be aware of the most recent and updated version of the Privacy & Cookie Policy and to keep themselves informed about the data collected and how CASA ANDREA CRISTOFORO uses it.