ROTARY INTERNATIONALMY ROTARYROTARY BRAND CENTERROTARY DISTRETTO 2050PROMETEO 2050
ITEN

PRIVACY POLICY FOR THE PROCESSING OF PERSONAL DATA COLLECTED FROM THE DATA SUBJECT

In relation to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter "EU Reg. 2016/679"), we hereby provide, pursuant to art. 13, the necessary information regarding the processing of personal data provided by the data subject.

1. DATA CONTROLLER

Pursuant to art. 4 of EU Reg. 2016/679, the Data Controller (hereinafter also "Controller") is identifiable in the unrecognized association named Rotaract District 2050 (hereinafter "District"), Tax Code 96032330183, based in Via Egidio Gorra 55, Piacenza (PC) and with email address segreteria@rotaract2050.org. Legal representation is entrusted to the pro tempore District Representative, reachable by email at rd@rotaract2050.org.

2. DATA PROCESSORS

The Controller uses technical and organizational service providers appointed, where necessary, as data processors pursuant to articles 4 and 28 of EU Reg. 2016/679. The updated list of data processors can be requested from the Controller. Among the aforementioned providers, autonomous controllers or joint controllers (art. 26 EU Reg. 2016/679) for specific activities may include the following subjects:

  • Google Ireland Limited, based in Dublin, Ireland;
  • Cloudflare Inc., based in San Francisco, California (USA);
  • Zimma Ltd operating under the name Ticket Tailor, based in London, United Kingdom;
  • Stripe Technology Company Limited, based in Dublin, Ireland;
  • Stripe Technology Europe Limited, based in Dublin, Ireland.

Members of the District apparatus who process data are persons authorized to process.

3. DATA SUBJECT TO PROCESSING

The Data Controller – through its own services or those of the data processors – processes identifying personal data (for example, name, surname, company name, address, telephone, email, bank and payment references), communicated by the data subject when using this website.

4. PURPOSES AND LAWFULNESS OF PROCESSING

Personal data provided will be processed in compliance with the conditions of lawfulness under art. 6 of EU Reg. 2016/679, specifically for the use of this website and related services, including:

  1. site navigation and operation pursuant to art. 6, par. 1, letter f EU Reg. 2016/679;
  2. event registration and management pursuant to art. 6, par. 1, letter b EU Reg. 2016/679;
  3. tax and regulatory compliance pursuant to art. 6, par. 1, letter c EU Reg. 2016/679;
  4. exercising the Controller's rights, for example the right of defense in court, pursuant to art. 6, par. 1, letter f EU Reg. 2016/679;
  5. statistical analysis on the use of the site by the data subject pursuant to art. 6, par. 1, letter f EU Reg. 2016/679, through the use of analytical tools that adopt measures aimed at minimizing the direct identification of users (user consent required).

5. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF DATA

The personal data provided may be communicated to recipients, appointed under art. 28 of EU Reg. 2016/679, who will process the data as processors and/or as natural persons acting under the authority of the Controller and the Data Processor, in order to comply with contracts or related purposes. Specifically, data may be communicated to recipients belonging to the following categories:

  • subjects providing IT system and communication network management services;
  • firms or companies in the context of assistance and consulting relationships;
  • competent authorities for compliance with legal obligations and/or provisions of public bodies, upon request.

Subjects belonging to the above categories perform the function of Data Processor, or are autonomous controllers or joint controllers (art. 26 EU Reg. 2016/679) for specific activities.

6. DATA TRANSFER TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANIZATION

If data is transferred to third countries, the transfer will take place based on an adequacy decision by the European Commission or through standard clauses adopted by the Commission pursuant to art. 46 EU Reg. 2016/679.

7. PROCESSING METHODS

The processing of the data subject's personal data is carried out through the operations indicated in art. 4 no. 2) of EU Reg. 2016/679 and precisely: collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of data. The Controller referred to in point 1 does not adopt automated decision-making processes that produce legal effects or significantly affect the data subject. Automated decision-making processes used by the providers referred to in point 2 to ensure service security are excluded.

8. DATA RETENTION PERIOD

Processing will be carried out in automated and/or manual form, with methods and tools aimed at ensuring maximum security and confidentiality, by specifically authorized subjects. In compliance with the provisions of art. 5 paragraph 1 letter e) of EU Reg. 2016/679, personal data collected will be stored in a form that allows the identification of data subjects, where provided, for a period not exceeding:

  • 14 months for navigation statistics;
  • 24 months for contact requests;
  • 10 years for event registrations (tax/administrative obligations);
  • the statutory time for payment data.

9. NATURE OF PROVISION AND REFUSAL

The provision of data marked as mandatory is necessary to allow registration for events and the performance of the requested social functions. Failure to provide them may make it impossible to fulfill the request.

10. DATA SUBJECTS' RIGHTS

The data subject may assert their rights as expressed by articles 15, 16, 17, 18, 19, 20, 21, 22 of EU Reg. 2016/679, where applicable, by contacting the Data Controller. The data subject has the right, at any time, to:

  1. obtain confirmation of the existence or otherwise of personal data concerning them, even if not yet recorded, and their communication in an intelligible form;
  2. obtain indication of: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in case of processing carried out with the aid of electronic instruments; d) the identification details of the Controller, processors and designated representative pursuant to art. 3, paragraph 1, EU Reg. 2016/679; e) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as designated representative in the State's territory, processors or persons in charge;
  3. obtain: a) updating, rectification or, when interested, integration of data; b) the erasure, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
  4. object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning them, even though they are relevant to the purpose of the collection; b) to the processing of personal data concerning them, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.

Without prejudice to any other administrative or judicial remedy, if the data subject considers that the processing of data relating to them infringes EU Reg. 2016/679, they have the right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it) under art. 77 EU Reg. 2016/679 and, with reference to art. 6 paragraph 1, letter a) and art. 9, paragraph 2, letter a), they have the right to withdraw the consent given at any time.

In the case of a data portability request by the data subject, the Data Controller will provide the personal data concerning them in a structured, commonly used and machine-readable format, subject to paragraphs 3 and 4 of art. 20 of EU Reg. 2016/679. To exercise the rights provided for by articles 15-22 EU Reg. 2016/679, where applicable, you can write to segreteria@rotaract2050.org or rd@rotaract2050.org.

Updated on 21/08/2026

COOKIE POLICY

Last update: 21/08/2026

This Cookie Policy describes the use of cookies and similar technologies by the rotaract2050.org website (hereinafter "Site"), managed by Rotaract District 2050, based in Via Egidio Gorra 55, Piacenza (PC), Tax Code 96032330183. This Cookie Policy should be read in conjunction with the Site's Privacy Policy.

1. What cookies are

Cookies are small text files that the websites visited send to the user's device (computer, smartphone or tablet), where they are stored to be then re-transmitted to the same sites on subsequent visits. Cookies allow, for example, to:

  • ensure the proper functioning of the site;
  • store user preferences;
  • improve the browsing experience;
  • collect statistical information on the use of the site;
  • protect the site from fraudulent or abusive use.

2. Types of cookies used

Technical cookies The Site uses technical cookies strictly necessary for the functioning of the platform and the provision of services requested by the user. These cookies do not require the user's consent under art. 122 of Legislative Decree 30/06/2003 n. 196 (hereinafter "Privacy Code"). They can be used for: session management, site security, network traffic distribution, prevention of cyber attacks, and storing technical preferences.

Security cookies The Site uses protection and security services provided by Cloudflare Inc. which may install cookies necessary to identify malicious traffic and protect the IT infrastructure. These cookies are strictly necessary for the site to function properly and do not require consent.

Analytical cookies The Site may use web traffic statistical analysis tools provided by third parties, including services attributable to Google Ireland Limited. If the collected data is adequately minimized and used exclusively for aggregate statistical purposes, these cookies are equated to technical cookies. If instead they allow user identification or the cross-referencing of collected information with other data held by the service provider, their installation will occur only with the user's prior consent.

Event and payment cookies The Site may integrate services managed by Ticket Tailor (Zimma Ltd), Stripe Technology Europe Limited, and Stripe Technology Company Limited. These services may install technical cookies necessary for managing event registrations, payments, and related security measures.

Third-party cookies The Site may contain links or integrations with external platforms such as Instagram, LinkedIn, Google, and Rotary International. Interaction with these services may result in the installation of cookies directly by the respective platforms, according to the privacy and cookie policies prepared by the respective managers.

3. Legal basis for processing

The use of technical and security cookies is based on the Controller's legitimate interest in ensuring the proper functioning and security of the Site. The use of any analytical cookies not equivalent to technical cookies and other optional tracking tools is instead based on the user's consent, freely given through the appropriate banner.

4. Provision of data

The installation of technical cookies is necessary for the proper use of the Site. The user can freely accept or reject the installation of unnecessary cookies without prejudicing the normal consultation of the Site's pages.

5. Consent management

Upon first access to the Site, the user can accept all cookies or reject all unnecessary cookies. The preferences expressed can be modified at any time through the specific consent management tool available on the Site pursuant to art. 7 EU Reg. 2016/679.

6. Disabling cookies via browser

The user can configure their browser to automatically reject cookies or request specific consent before their installation. Disabling technical cookies may, however, compromise the proper functioning of some features of the Site.

7. Transfer of data to third countries

Some service providers used by the Site may process personal data in countries located outside the European Economic Area. In such cases, the transfer occurs in compliance with articles 44 et seq. of Regulation (EU) 2016/679 through adequacy decisions of the European Commission, standard contractual clauses, or other safeguards required by applicable law.

8. Data Controller

See point 1 of the Privacy Policy on this website.

9. Changes to Cookie Policy

The Controller reserves the right to update or modify this Cookie Policy at any time, also as a result of regulatory, technological or organizational changes.

👋 Hi! I'm the District AI. Doubts about history, protocol, or roles? Ask me anything a true Rotaractor should know! ✨