Privacy Policy of Cefa

This Website collects some Personal Data from its Users.

Personal Data processed for the following purposes and using the following services:

    • Advertising

      • Facebook Audience Network

        Personal Data: Cookies; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data

      • Meta ads conversion tracking (Meta pixel)

        Personal Data: Trackers; Usage Data

      • Facebook Lookalike Audience

        Personal Data: Cookies; Usage Data

    • Analytics

      • Google Analytics with anonymized IP

        Personal Data: Cookies; Usage Data

      • Google Analytics 4

        Personal Data: Trackers

      • Meta Events Manager

        Personal Data: Trackers; Usage Data

    • Collection of privacy-related preferences

      • iubenda Consent Solution

        Personal Data: Data communicated while using the service; Tracker

      • iubenda Cookie Solution

        Personal Data: Tracker

    • Contacting the User

      • Contact form

        Personal Data: address; city; email address; field of activity; first name; last name; phone number; various types of Data; ZIP/Postal code

      • Mailing list or newsletter

        Personal Data: email address; first name; last name

    • Content performance and features testing (A/B testing)

      • Google Optimize

        Personal Data: Cookies; Usage Data

    • Displaying content from external platforms

      • Google Fonts

        Personal Data: Usage Data; various types of Data as specified in the privacy policy of the service

      • YouTube video widget and Google Maps widget

        Personal Data: Cookies; Usage Data

    • Remarketing and behavioral targeting

      • Facebook Remarketing

        Personal Data: Cookies; Usage Data

      • Facebook Custom Audience

        Personal Data: Cookies; email address

    • SPAM protection

      • Google reCAPTCHA

        Personal Data: answers to questions; clicks; keypress events; motion sensor events; mouse movements; scroll position; touch events; Trackers; Usage Data

    • Tag Management

      • Google Tag Manager

        Personal Data: Usage Data

Information on opting out of interest-based advertising

In addition to any opt-out feature provided by any of the services listed in this document, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section of the Cookie Policy.

Further information about the processing of Personal Data

    • Recipients and transfer of personal data

      Your personal data may be shared with:
      1. persons, companies or professional firms that provide assistance and advice to CEFA ETS in accounting, administrative, legal, tax and financial matters relating to the provision of services;
      2. persons, entities or authorities to whom the communication of your personal data is mandatory by virtue of provisions of the law or regulations or orders of the authorities;
      3. parent, subsidiary and associated companies of CEFA ETS limited to the pursuit of administrative-accounting purposes related to the performance of activities of an organizational, administrative, financial and accounting nature.

      In addition, your personal data may be processed by individuals or categories of individuals who act as Data Processors pursuant to Article 28 of the Regulations or who are authorized to process the data pursuant to Article 29 of the Regulations.

      Finally, CEFA ETS reserves the right to publish images related to its events/manifestations or simply related to the normal activities carried out within CEFA ETS, in order to give visibility to its activities, as well as for purposes of a commercial nature. Therefore, upon your specific consent, your image, collected within CEFA ETS and/or collected on the occasion of your participation in CEFA ETS events/manifestations, could be disseminated on the communication channels available to CEFA ETS, such as but not limited to: electronic newsletters, official CEFA ETS pages on social networks, website of the Data Controller (infra: Site). Outside of the aforementioned hypotheses, your data will not be communicated except to parties, entities or Authorities to which communication is obligatory under provisions of law or regulation.

      Some of your personal data are shared with recipients who may be located outside the European Economic Area. CEFA ensures that the processing of your personal data by these recipients takes place in compliance with the Regulation. Indeed, transfers may be based on an adequacy decision or Standard Contractual Clauses approved by the European Commission.

    • Storage of personal data

      Your Personal Data, including those belonging to "special categories" of data, will be processed by automated and non-automated means, and will be kept for the time necessary to pursue the purposes concretely pursued. This is without prejudice, in any case, to the further storage provided for by applicable legislation including that provided for in Article 2946 of the Civil Code.

    • Rights of data subjects (see Articles 15- 22 of the Regulations)

      You have the right to ask CEFA ETS at any time, access to your personal data, their rectification or cancellation or to object to their processing, you have the right to request the limitation of the processing in the cases provided for by Article 18 of the Regulation, as well as to obtain in a structured, commonly used and machine-readable format the data concerning you, in the cases provided for by Article 20 of the Regulation.

      Please note that CEFA ETS has appointed a DPO (Andrea Liuzzi) for data protection, the DPO can be contacted at 'email address: privacy@cefa.ong.

      You have the right to withdraw, at any time, your consent to the processing of your personal data. Any revocation will not affect the lawfulness of the processing based on the consent given before the revocation.

      In any case, you always have the right to lodge a complaint with the competent supervisory authority (Garante per la Protezione dei Dati Personali), in accordance with Article 77 of the Regulation, if you believe that the processing of your data is contrary to the legislation in force.

      Requests should be addressed in writing to the contact details of the Data Controller and the DPO, writing to: CEFA ETS Via Lame, 118 - 40122 Bologna, or by email to: privacy@cefa.ong

    • Purposes, legal basis for processing, and optionality of conferral

      Your personal data will be processed, with your consent where necessary, for the following purposes, where applicable:
      1. to fulfill any obligations under applicable laws;
      2. to carry out direct marketing via e-mail for services similar to those you have subscribed to;
      3. to elaborate studies, research, market statistics; to send you informative and promotional material related to the activities, services and possible products of CEFA ETS and its Business Partners, or surveys to improve the service (customer satisfaction). These communications may be made via e-mail or text message, through paper mail and/or the use of the telephone with operator and/or through the official pages of CEFA ETS on social networks;
      4. analyze your interests, habits and consumption choices also in order to be able to send you personalized informative and promotional material about the services offered (profiling);
      5. spread your image on the communication channels available to CEFA ETS;
      6. allow you to register on the CEFA ETS website and access restricted areas, including the mobile application.

      The processing of your personal data will take place by means of manual, computerized and telematic tools that are in any case suitable to guarantee the security and confidentiality of the data.
      The processing of your data for the purposes referred to in point 6 finds its legal basis in art. 6(b) of the Regulations:" the processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject." Processing for the purpose referred to in point 1 finds its legal basis in Art. 6(c) of the Regulation:" processing is necessary for compliance with a legal obligation to which the data controller is subject. The provision of your data for the aforementioned purposes is optional, however, failure to provide the data will result in the impossibility of receiving the requested services."
      The provision of your data for the above purposes is optional, however, failure to provide the data will result in the impossibility of receiving the requested services.
      The processing for the purposes of 3, 4 and 5 finds its legal basis in Art. 6(a). Consent to the processing for the purposes of points 3, 4 and 5 is also optional and does not affect the use of services. In the absence of your consent to the processing in point 3, CEFA ETS will not send you communications about its initiatives and offers. In the absence of your consent to the processing referred to in point 4, CEFA ETS will not be able to send you personalized communications and information, but only generic communications: we therefore recommend that if you wish to receive communications suited to your interests, you give the relevant consent. Finally, in the absence of consent to the processing referred to in point 5, CEFA ETS will not disseminate your image on its communication channels.
      In any case, it should be noted that should you wish to object to the processing of your data for marketing purposes carried out by one or more of the means indicated above in point 3, you may do so at any time by writing to the physical address of the Controller cd. (selective out-out), as provided for in the pro-tempore regulations in force. You have the right to revoke the consent given for the processing referred to in points 3, 4,
      and 5, at any time, without affecting the enjoyment of the services or the lawfulness of the processing performed prior to your objection.
      Finally, your personal data, belonging to "special categories" of data, will be processed, subject to your explicit consent, in accordance with the provisions of Article 9.2(a) of the Regulations and the Authorization pro tempore in force of the Guarantor for the Protection of Personal Data.

    • Third-party data voluntarily provided by the user

      In the use of particular services, there may occur a processing of personal data of third parties, communicated by you to CEFA ETS. With respect to these hypotheses, you stand as autonomous data controller, assuming all the obligations and responsibilities of the law. In this sense, you grant the widest indemnity with respect to any dispute, claim, request for compensation for damages from processing, etc. that may be received by the Data Controller from third parties whose personal data have been processed through your use of the services in violation of the applicable data protection regulations. In any case, should you provide or otherwise process personal data of third parties, you guarantee as of now - assuming all related responsibility - that this particular hypothesis of processing is based on the prior acquisition - on your part - of the third party's consent to the processing of the information concerning you.

    • Data Protection Officier

      The Owner's organization has a Data Protection Officer or DPO. The DPO is available for any information pertaining to the processing of your personal data, including the list of data processors.

Contact information

    • Owner and Data Controller

      CEFA ETS Via Lame, 118 - 40122 Bologna, Italy - C.F. 01029970371

      Owner contact email: privacy@cefa.ong