Privacy and cookies

Privacy Policy

This Privacy Policy (hereinafter “Policy”) describes the personal data collected or generated (processed) when you use the Data Controller’s websites (hereinafter “Sites”). The Policy also describes the types of personal data that are collected when you use our Sites and the manner in which personal data is collected, shared and protected in accordance with applicable privacy laws and will be based on the principles of fairness, lawfulness, transparency and data protection.

To this end, in compliance with the provisions of Article 13 of the European Regulation 2016/679 (GDPR), we indicate below the general information regarding the processing of personal data carried out through this Site.

This information refers exclusively to the data of those who interact with the services accessible from the home page jesuits-eum.org without extending to other sites that may be reached by the user through links on the Site.

Contact details of the Data Controller

The holder of the treatment is Fr. Francesco Pecori Giraldi SJ, Legal Representative of Provincia d’Italia della Compagnia di Gesù, with registered office in Via degli Astalli 16 – 00186 Rome, Italy – Fiscal Code 97411700582 – who can be contacted to ask for explanations about this informative report or to exercise the rights provided by the legislation on the protection of personal data described in the following text. You may contact the Controller by any of the following means:

• by e-mail: privacy@gesuiti.it
• telephone: 06 697001
• by ordinary mail: Via degli Astalli, 16 – 00186 Rome, Italy

For any communication with the Controller, you must include your contact details in order to be identified and contacted.

Type of data processed

Browsing data

Computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the communication protocols of the Internet.

This category of data includes IP addresses or domain names of computers used by users who connect to the Site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters regarding the operating system and computer environment. This information is not collected in order to be associated with identified interested parties, as the data is used solely for the purpose of obtaining anonymous statistical information on the use of the Website, to check its correct functioning and to prevent computer crimes, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. Please note that the data could be used by the competent Authorities to ascertain responsibility in case of hypothetical computer crimes.

Cookies

The Site makes use of cookies and other digital markers to enhance your browsing experience. For further information on the type of cookies used, their purposes and how to disable them, please refer to the specific information, indicated below.

Data provided voluntarily by the user

To access any services reserved for users, you must register and enter some personal data. The conferment of certain identification data is necessary in order to authenticate and verify the legitimacy of access, in the different levels of the reserved areas, to the subjects who access them. Under no circumstances sensitive or judicial data will be processed.

The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, and any other personal data included in the message. Specific summary information will be progressively reported or displayed on the pages of the Site set up for particular services on request.

Purposes

The data provided by the interested party may be processed for:

1. the performance of operations that are strictly necessary in order to provide the services that may be requested, including the navigation through the pages of the Site;
2. the provision of technological services (mailing lists, sending newsletters, remote or local assistance and maintenance, etc.), also by specifically authorized third parties;
3. activities imposed by laws, regulations;
4. statistical processing of aggregate data in relation to the performance of the Site;
5. analyzing the use of the Site by users;
6. sending promotional material.

The pages of the Site where the personal data of the interested party are explicitly collected contain, where necessary, further specific information on the processing of personal data, as well as the methods for acquiring the relative consent in cases where the Data Controller uses this legal basis for processing.

Legal basis

Personal data will be processed on the basis of one or more of the following conditions. In particular, the processing carried out for the purposes described above, concerning:

• point 1 and point 2 have as their legal basis the need to execute the express requests to receive a service directly available through the Site: it is therefore the provision of data strictly necessary and related to a pre-contractual and / or contractual or functional to respond to a specific request from the person concerned. As such, the data collected from time to time are required and, if you do not intend to provide them, it will not be possible to provide the service or respond to the request;
• point 3, will have as a legal basis the need to comply with a legal obligation and as such these data and their processing are mandatory;
• points 4, 5 and 6, will have as a legal basis the free and informed consent of the interested party, which will be requested in special pages of the Site and preceded by our specific information or through cookies (see section on Cookie Policy). In this case the provision of data is absolutely free and in the absence of consent, the data will not be collected and used in any way for these purposes. In this case the provision of data is absolutely free and in the absence of consent, the data will not be collected and used in any way for these purposes. For the sake of clarity, we would like to point out that the revocation of consent has no retroactive effects on the data processed before the revocation itself.

In addition, if you are under 16 years of age, to process data for these purposes will be necessary to collect permission from the holder of parental responsibility.

Where the Controller can make use of other legal basis (legitimate interest, public interest, etc.), will be provided appropriate and specific information.

Processing methods, security measures and storage times

All data will be processed mainly in electronic format. Personal data as well as any other information that can be associated, directly or indirectly, to a specific user, are collected and processed by applying technical and organizational security measures such as to ensure a level of security appropriate to the risk, taking into account the state of the art and the cost of implementation, or, where required, security measures prescribed by specific legislation such as, for example: measures provided for by applicable provisions issued by the Guarantor Authority for the protection of personal data or specific rules and regulations for the banking / financial sector and will be accessible only to specifically authorized personnel.

Precisely with reference to the aspects of personal data protection, the data subject is invited, pursuant to art. 33 of the GDPR, to report to the Data Controller any circumstances or events from which a potential “personal data breach” may arise in order to allow an immediate assessment and the adoption of any actions aimed at countering such an event, by sending a communication to privacy@gesuiti.it .

Please note that a personal data breach is defined as “a breach of security that accidentally or unlawfully results in the destruction, loss, modification, unauthorized disclosure of or access to personal data transmitted, stored or otherwise processed.” The measures adopted by the Owner do not exempt the user/customer from paying the necessary attention to the use, where required, of passwords/PINs of adequate complexity, which must be updated periodically as well as kept carefully and made inaccessible to others, in order to avoid improper and unauthorized use.

The personal data processed will be kept in a form that allows identification of the data subjects for a period of time not exceeding the achievement of the purposes for which they are processed, without prejudice to the need to store them for a longer period following requests by the competent authorities for the prevention and prosecution of crimes or otherwise to enforce or defend a right in court.

Categories of recipients of personal data

Personal data will be processed by specifically authorized personnel of the Data Controller as well as by third parties, including those established in countries outside the European Union, only if this is necessary for the operation, security and maintenance of the Site and the services made available through the Site itself, without prejudice to any obligations imposed by law (e.g. inspections by the tax authorities). Under no circumstances will they be disclosed to the public.

As required by the GDPR, the Data Controller appoints as data processors the third party companies that perform all or part of the activities in question on behalf of the Data Controller. In the case of involvement of third parties established in countries outside the European Union, for the relative transfer of data abroad, the appropriate guarantees corresponding to the adequacy decisions issued by the European Commission and/or the national Data Protection Authority are adopted as appropriate to the case.

The personal data provided by users who request dispatch of material are used only to perform the service or provision requested and are communicated to third parties only where this is necessary for that purpose (example: shipment service of publications).

Rights of data subjects

In relation to the processing of personal data carried out through this Site, at any time, as a data subject you may exercise your rights under the GDPR. In particular, you can:

• access to personal data, obtaining evidence of the purposes pursued by the Controller, the categories of data involved, the recipients to whom the data may be communicated, the applicable storage period;
• obtain without delay the correction of inaccurate personal data concerning the subject;
• obtain, in the cases provided for by law, the cancellation of data;
• to obtain the limitation of the treatment or to oppose it, when allowed by the provisions of the law applicable to the specific case;
• in the cases foreseen by the law, to request the portability of the data provided to the Controller, i.e. to receive them in a structured, commonly used and machine-readable format, and also to request the transmission of such data to another controller, if technically feasible;
• where deemed appropriate, submit a complaint to the Control Authority.

For the processing of personal data for which the legal basis is the consent can always be revoked and in particular exercise the right to oppose direct marketing.

To exercise these rights, please contact the Data Controller using the contact details provided at the beginning of this Policy.

For further information on your rights and on privacy in general, please visit the website of the Guarantor Authority for the protection of personal data at https://www.garanteprivacy.it/.

Cookie Policy

Preface

This page specifically describes the use of cookies made by the official website https://jesuits-eum.org.

About Cookies

Cookies are small text strings that sites visited by the user send to his terminal (usually to the browser), where they are stored and then retransmitted to the same sites the next time the same user visits. While browsing a Site, the user can receive on his/her terminal also cookies that are sent by different sites or web servers (so-called “third parties”), on which some elements (such as, for example, images, maps, sounds, specific links to pages of other domains) present on the Site that the user is visiting can reside.

Thanks to cookies, the server sends information that will be re-read and updated every time the user returns to the Site. In this way, the Website can automatically adapt to the user, improving the browsing experience. In addition, the cookies provide the operator of the Site anonymous information on the navigation of users, including to obtain statistical data on the use of the Site and improve navigation. The information collected through cookies can also be used to build a “profile” of the preferences expressed by the user during navigation, in order to customize the messages of commercial promotion.

In some cases other types of digital markers such as localStorage are used instead of cookies. Throughout this policy, “cookies” is used as a generic term to indicate digital markers saved on the user’s terminal; where appropriate, the type of marker is specified.

Cookie types

According to the legislation on the protection of personal data, cookies can be divided into “technical”, for the use of which in most cases the user’s consent is not required, and “profiling” for promotional purposes, for which it is necessary to obtain the user’s consent.

Technical cookies

This type of cookie is further divided into:

Navigation/session cookies

These cookies are essential to navigate within the Site using all of its features, such as maintaining a session and access to restricted areas. They are strictly necessary because without them it would not be possible to provide the requested services. These cookies do not collect information to be used for commercial purposes.

Performance cookies

They collect and analyze information on the use of the Site by visitors (pages visited, number of accesses, time spent on the Site, etc.) to optimize the management of the Site. These cookies do not collect information that could identify you in any way. They are also called “analytics cookies”.

Functional cookies

They allow the user to navigate according to a set of selected criteria (e.g. language) in order to provide the user with a better browsing experience. The information collected by this type of cookie is anonymous.

The Website functions optimally if technical cookies are enabled; however, you may choose to disable the use of non-technical cookies on this Website as specified in the “Disabling and Deleting Cookies” section. It should be noted, however, that if cookies are disabled, some features of the Site may be disabled.

The Website on which you are browsing uses some technical cookies as detailed in this Cookie Policy.

Profiling cookies

Cookies can also be used to collect information about the user in order to send personalized advertisements, i.e. siutable with the preferences expressed by user during his browsing activity (profile).

Due to the impact on the private sphere of the user of the use of such techniques for profiling purposes, the collection of the user’s consent is necessary.

In the eventuality that cookies are used for such purposes, the Site will feature a specific brief information (banner) also containing an indication of how the user can express consent to the use of profiling cookies, according to the requirements contained in the provision of the Italian Data Protection Authority “Identification of the simplified procedures for information and acquisition of consent for the use of cookies – May 8, 2014”. Profiling data is retained for twelve months. This type also includes so-called retargeting cookies.

Retargeting cookies

These cookies are used to send personalized advertising to users who have previously visited a Site.

The Website on which you are browsing does not use any type of profiling cookies.

First-party cookies

These cookies are set by the Website itself (with the same domain as the one indicated in the browser address bar) and can only be read by that Website. They are commonly used to store information such as preferences, for use on subsequent visits to the Site.

Third-party cookies

While browsing the Site, cookies may be installed by other sites which can be accessed from the Site but are managed by other parties (third parties). In this case, the Site Data Controller acts only as a technical intermediary between the user and these sites.

To learn more about third party cookies or to be able to disable them on all the sites you visit, please refer to the information made available by these third parties. For example, Google services such as YouTube can install profiling cookies on the user’s terminal if the user has logged into his or her Google account in the browser used to visit the Controller’s websites. These cookies and activities are not under the control of the Controller, and can be managed directly by the user by modifying the settings of their Google account available at this address.

Disabling and deleting cookies

To disable, where technically possible, the installation of unnecessary cookies by the Owner’s sites the user can click on the link “Manage cookie preferences” located in the footer of all pages of the Site or on the following link:

Manage cookie preferences

For a more generalized control of the functionality related to cookies, browser settings allow both the cancellation and the possibility to prevent the installation of cookies on the electronic device used.

MICROSOFT INTERNET EXPLORER

1. Click on “Tools” at the top of the browser window and select “Internet Options” and then click on the “Privacy” tab.
2. To enable cookies the Privacy level must be set to “Medium” or lower.
3. Setting the Privacy level above “Medium” will disable the use of cookies.

MOZILLA FIREFOX

1. Click on “Tools” at the top of the browser window and select “Options”.
2. Select the “Privacy” icon.
3. Click on “Cookies”, then select whether or not to “Accept cookies from sites” and “Accept third-party cookies”.

GOOGLE CHROME

1. Click on the Chrome menu icon.
2. Select Settings.
3. At the bottom of the page, click Show advanced settings.
4. In the “Privacy” section, click on Content Settings.
5. Enable or disable cookies:
   1. To enable cookies, select Allow local data storage (recommended).
   2. To disable cookies, select “Prevent sites from setting data”.
6. Click Finish to save.

SAFARI

1. Click on the “Cog” icon at the top of the browser window and select the “Preferences” option.
2. Click on “Security” and select the “Block third-party and advertising cookies” option or not.
3. Click on “Save”.

In any case, it is possible to set and manage preferences regarding the use of cookies used for online behavioural advertising purposes also through specific websites such as, for example, the Your Online Choices website which can be reached at the following link https://www.youronlinechoices.com.

Cookies used on this Site

First-party technical cookies

Session/navigation cookies

COOKIE NAME	DESCRIPTION	TYPE	LIFETIME
wordpress_test_cookie	WordPress test cookies that verifies the possibility of installing cookies	HTTP Cookie	session
wordpress_google_apps_login	WordPress cookie related to Google account login	HTTP Cookie	session
PHPSESSID	Used to identify the unique session on the Website	HTTP Cookie	session

Functional cookies

Accessibility

This Site allows the user to set text size and dark theme to improve legibility and browsing experience. The user’s preferences are saved in two localStorage HTML markers, which have a variable lifetime depending on the browser used.

COOKIE NAME	DESCRIPTION	TYPE	LIFETIME
text-size	Stores the text body size selected by the user for viewing the Site	HTML localStorage	depends on browser
color-theme	Stores the selection of the dark theme for viewing the Site	HTML localStorage	depends on browser

Consent management

The consents given or denied by the user regarding the use of cookies is saved in an HTTP localStorage marker of variable duration depending on the browser used.

COOKIE NAME	DESCRIPTION	TYPE	LIFETIME
eumConsents	Stores the user’s consent to cookies	HTML localStorage	depends on browser

Performance cookies

Performance cookies collect anonymous information about how users use the Website and its various features. For example, our performance cookies collect information about which pages of the Site you visit most often.

To collect aggregate data on the use of the Site we use Google Analytics with IP address anonymization: the last portion of the user’s IP address is masked as soon as technically possible and the full address is never stored.

COOKIE NAME	DESCRIPTION	TYPE	LIFETIME
_ga	Used by Google Analytics to generate anonymous statistical data about how visitors use the Site.	HTTP Cookie	2 years
_gid	Used by Google Analytics to uniquely distinguish users.	HTTP Cookie	1 day
_gat_gtag_UA#		HTTP Cookie	10 minutes

For more information on the use of cookies by Google Analytics, the user can read the dedicated article; the use of cookies by Google services is described in a more general way in the information available at this address.

Google Analytics cookies can be specifically rejected for all sites visited using the tool provided by Google.

Third-party technical cookies

YouTube videos

This Site incorporates YouTube videos in an advanced privacy mode: only technical cookies are installed, and installation occurs only when the user starts the video. It is not technically possible for the Controller to allow the viewing of such videos without the installation of technical cookies by YouTube; the user can disable the installation of YouTube cookies by acting directly on the browser settings.

For more information on the type of technical cookies installed by YouTube you can consult the privacy policy of Google services.