Privacy and Policy


Information on Personal Data Processing 


Pursuant to Articles 13 and 14 of Regulation 2016/679/EU (hereinafter “GDPR”, or “Regulation”), FONDAZIONE ROMUALDO DEL BIANCO (hereinafter “Data Controller” or “Foundation”), with its registered office in Florence, VIA DEL GIGLIO No. 10, in its capacity as “Data Controller,” informs you that your personal data will be processed in compliance with the aforementioned regulation, in order to guarantee the rights, fundamental freedoms, and dignity of natural persons, with particular reference to privacy and personal identity. We inform you that if the activities provided to you involve the processing of personal data of third parties under your ownership, it will be your responsibility to ensure compliance with the requirements of the applicable legislation concerning the data subjects, in order to make their processing by us lawful. 


Origin, Purpose, Legal Basis, and Nature of the Processed Data 


In compliance with the applicable data protection regulations, and in accordance with the principles of lawfulness, fairness, and transparency, the Data will be stored, collected, and processed by the Foundation for the following purposes: A. Establishing an initial contact within the framework of the Foundation’s institutional activities, sending invitations to conferences, events, meetings and training sessions, and fulfilling any contractual obligations; B. Complying with any regulatory obligations, tax and fiscal provisions resulting from the performance of the institutional activities, and obligations related to administrative and accounting activities. The legal bases for processing the Data for the purposes referred to in points (A) and (B) above are Article 6.1(b) (performance of a contract or pre-contractual measures) and Article 6.1(c) (compliance with a legal obligation) of the GDPR. 


Communication 


The Foundation, as part of its institutional activities, does not engage in marketing activities nor does it use personal data for commercial purposes. However, in accordance with applicable data protection regulations, the Foundation may communicate the Data to third parties in the following circumstances: 

  • To fulfill legal, regulatory, or contractual obligations related to the Foundation’s institutional activities; 
  • To service providers and consultants who support the Foundation in administrative, organizational, and IT-related activities. These entities act as data processors pursuant to Article 28 of the GDPR and operate under specific data processing agreements ensuring compliance with applicable data protection laws. 
  • To TRAVEL TO DIALOGUE EVOLUTION- S.R.L. SOCIETÀ BENEFIT, with registered office in FIRENZE (FI), VIA DELLA CONDOTTA 12, CAP 50122 (hereinafter “TTDE”), which will process the Data as an independent data controller, pursuant to the contract signed between the Foundation and TTDE on 6th March 2025. TTDE will contact the Data Subjects exclusively for the purpose of requesting explicit consent to receive future communications regarding cultural and commercial initiatives aligned with the Foundation’s institutional goals. 


Therefore, any processing for marketing purposes will be carried out exclusively by TTDE, in full autonomy and under its own responsibility, after obtaining the data subject’s prior consent. The Foundation ensures that any data communication to third parties adheres to the principles of necessity, minimization, and proportionality, limiting the sharing of information to what is strictly required for the intended purposes.


Transfer of Personal Data 


Abroad Your personal data may be transferred abroad if necessary for the management of the assigned activities. In cases where data is shared with entities located outside the European Economic Area (EEA), the Foundation ensures that an adequate level of data protection is maintained, equivalent to that applied within the EEA. Any such transfer will be limited to the data strictly necessary for achieving the intended purposes and will be carried out in compliance with Chapter V of the GDPR. Where required, the Foundation will implement appropriate safeguards, such as: 

  • adequacy decisions by the European Commission (Article 45 GDPR), 
  • standard contractual clauses (SCCs) adopted by the European Commission (Article 46 GDPR), 
  • binding corporate rules (BCRs) where applicable (Article 47 GDPR). 

For the processing of information and data communicated to these entities, the Foundation will require guarantees ensuring a level of protection equivalent to that applied within the EEA, in accordance with Chapter V of the GDPR. 


Processing Methods, Logic, and Storage Periods 


Personal data is collected and processed lawfully, fairly, and transparently, in accordance with the principles outlined in Article 5(1) of the GDPR, including the principles of data minimization and storage limitation. Processing is carried out using manual, digital, and telematic tools, applying security measures that ensure data confidentiality and integrity, and strictly adhering to the purposes for which the data is collected. Personal data will be retained by FONDAZIONE ROMUALDO DEL BIANCO for the entire duration of the contractual relationship and, subsequently, for the period necessary to: 

  • assert or defend the Foundation’s rights; 
  • fulfill administrative obligations; 
  • comply with applicable legal and regulatory data retention requirements. 


Rights of the Data Subject


In accordance with applicable data protection laws, and within the limits and conditions set forth by the GDPR, as a Data Subject, you have the right to: 

  • Obtain confirmation as to whether or not your personal data is being processed; 
  • Access your personal data and request a copy of it; 
  • Request rectification of inaccurate or incomplete data; 
  • Request erasure of your personal data where applicable under the GDPR (right to be forgotten); 
  • Be informed about any rectifications or erasures made to your data and about any recipients to whom the data was disclosed; 
  • Request restriction of processing in the cases provided for by Article 18 of the GDPR; 
  • Exercise the right to data portability, meaning you can receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and transmit it to another controller where technically feasible (Article 20 GDPR); 
  • Object to processing, including profiling, where processing is based on legitimate interest (Article 21 GDPR);
  • Not be subject to automated decision-making, including profiling, that produces legal effects concerning you or significantly affects you, unless an exception under Article 22 of the GDPR applies. 

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent Supervisory Authority, in accordance with Article 77 of the GDPR. 

If you wish to request further information about the processing of your personal data or exercise your rights, you may contact us in writing at secretarygeneral@fondazione-delbianco.org. 


Data Controller 


The Data Controller, pursuant to Article 4 of the GDPR, is FONDAZIONE ROMUALDO DEL BIANCO, Via Del Giglio N. 10, Florence. 

Best regards, 

Firenze, 06/03/2025 

FONDAZIONE ROMUALDO DEL BIANCO