Contents
This notice explains how personal data is processed when you visit www.evoliafoundation.org or contact us using the details published on it. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (the “GDPR”) and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended).
1. Who is responsible for your data
Evolia Foundation is in the process of being established. Until it is formally constituted, the data controller for this website is its founder and promoter, Fabio Minazzi (“we”).
- Privacy contact: info@evoliafoundation.org
- Telephone: +39 348 4409877
Once the Foundation has been constituted and registered, it will take over as data controller and this notice will be updated with its registered office, tax code and registration details. No data protection officer has been appointed at this stage; any appointment will be indicated here.
2. What data we process, why and on what legal basis
This is an information website. It has no registration, no contact forms, no newsletter sign-up, no analytics and no advertising. The processing is therefore limited to the following.
2.1 Browsing data (server logs)
The servers that host the site automatically record technical data that internet protocols transmit with every request: IP address, date and time, the page or file requested, the response code, the size of the response, the referring page, and the browser and operating system you use.
- Purpose: delivering the pages, keeping the site secure, diagnosing faults and detecting abuse or attacks.
- Legal basis: our legitimate interest in running a working and secure website (Art. 6(1)(f) GDPR).
- Retention: only for the short period set by the hosting provider’s standard log rotation, after which they are automatically overwritten or deleted, unless they are needed for longer to investigate a security incident or a criminal offence.
We do not use this data to identify visitors or to build profiles.
2.2 Data you send us by email or phone
If you write to one of the email addresses published on this site or call us, we process your name, your contact details and whatever you choose to tell us.
- Purpose: answering your enquiry and following up on it (for example partnership, philanthropy or project-related requests).
- Legal basis: steps taken at your request before entering into a relationship with us (Art. 6(1)(b) GDPR) or, for general enquiries, our legitimate interest in replying to people who contact us (Art. 6(1)(f) GDPR).
- Retention: for as long as it takes to handle your request and for up to 24 months afterwards, unless a continuing relationship or a legal obligation requires us to keep it for longer.
Please do not email us health information or other sensitive data about yourself or other people unless we have asked for it through a dedicated and secure channel. Our work concerns people with medical conditions, but this website and its mailboxes are not meant to collect clinical data. Any such data sent on your own initiative will be used only as far as strictly needed to reply, and then deleted.
Providing this data is optional; without it we simply cannot reply to you.
2.3 Your cookie choices (proof of consent)
When you make a choice in the cookie notice, we store it in a technical cookie on your device and we record on our server: the date and time, a random consent identifier, the version of the policy shown to you, the choice made for each category, the page you were on and the browser family (for example “Safari, mobile”). We do not record your IP address in this log.
- Purpose: remembering your choice and being able to demonstrate that it was requested and respected.
- Legal basis: compliance with a legal obligation, namely the accountability duty under Articles 5(2) and 7(1) GDPR and Section 122 of the Italian Privacy Code (Art. 6(1)(c) GDPR).
- Retention: the cookie lasts 6 months; server records are deleted after 24 months.
Details are in the Cookie Policy.
3. What this site does not do
- No profiling and no automated decision-making (Art. 22 GDPR).
- No analytics, advertising, social media or other third-party tracking tools. If any are introduced, they will stay switched off until you consent and this notice will be updated first.
- No third-party resources loaded by your browser: fonts, images and scripts are all served from our own domain, so visiting the site does not disclose your IP address to anyone other than our hosting provider.
- No sale or rental of personal data.
The site is not directed at children and we do not knowingly collect data from them.
4. Who receives your data
Data is handled by people authorised by the controller and bound by confidentiality. It may also be accessed, only as far as technically necessary, by the suppliers of the services the site relies on:
- the website hosting and email service provider (Artera, servers located in the European Union);
- IT maintenance and web development suppliers.
Where these suppliers process personal data on our behalf, they do so under an agreement that meets the requirements of Art. 28 GDPR.
Data may be disclosed to public authorities or courts where the law requires it. It is never published or disseminated.
5. Transfers outside the EEA
The website, the proof-of-consent records and our mailboxes are hosted on servers located in the European Union, and we do not intend to transfer personal data outside the European Economic Area. If one of our suppliers processes data in a third country, the transfer takes place only on the basis of an adequacy decision of the European Commission (Art. 45 GDPR) or of the Commission’s standard contractual clauses with any supplementary measures needed (Art. 46 GDPR). You can ask us for a copy of the safeguards in place.
6. How long we keep data
| Data | Retention |
|---|---|
| Server logs | Hosting provider’s standard log rotation (see section 2.1) |
| Emails and enquiries | Time needed to handle the request, then up to 24 months |
| Cookie choice on your device | 6 months, then you are asked again |
| Proof-of-consent records on our server | 24 months, then automatically deleted |
After these periods data is deleted or made anonymous.
7. Your rights
At any time, free of charge, you can ask us to:
- confirm whether we hold data about you and give you a copy (access, Art. 15);
- correct inaccurate data or complete it (rectification, Art. 16);
- erase it (Art. 17) or restrict its processing (Art. 18);
- give you the data you provided in a portable format, where processing is automated and based on consent or contract (portability, Art. 20);
- stop processing based on our legitimate interest, on grounds relating to your situation (objection, Art. 21).
Where processing is based on consent, you can withdraw it at any time without affecting what was done before. For cookies, use the . If your request concerns consent records, tell us the consent ID shown in that panel, because we cannot otherwise link a record to you.
Write to info@evoliafoundation.org. We reply within one month, which can be extended by two further months for complex requests (Art. 12 GDPR).
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work or where the alleged infringement took place. In Italy this is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome. You may also bring the matter before the courts.
8. Links to other websites
This site links to external sites such as voiceforpurpose.com. Once you follow a link, the privacy policy of that site applies; no data is sent to it until you click.
9. Changes to this policy
We update this notice whenever the site, the tools it uses or the law change. The date and version at the top of the page show the text in force. If a change affects the cookie categories, you will be asked for your choice again.