Privacy Policy
Your data and Fondazione Progetto Arca ETS
Fondazione Progetto Arca ETS protects the personal data you entrust to us and undertakes to use them in compliance with EU Regulation 2016/679, available on the website garanteprivacy.it.
Your personal data will be used to send newsletters and marketing communications, as well as updates on projects, initiatives, and fundraising campaigns promoted by Fondazione Progetto Arca ETS, via email, telephone, SMS, and postal mail. Our emails contain tracking pixels. You may withdraw your consent to tracking alone while continuing to receive our communications.
On this page you will find the privacy notices governing the processing of your data: where, when, how and why we use them, as well as the list of your rights.
The data you provide will be used exclusively by Fondazione Progetto Arca ETS and will never be sold or transferred to third parties.
If, in some cases, we rely on external providers, please note that they will operate solely on our behalf and in compliance with our instructions.
The Data Controller is Fondazione Progetto Arca ETS with registered office at Via degli Artigianelli, 6, 20159 Milan.
You may contact us at any time by writing to the following address: privacy@progettoarca.org
Our Data Protection Officer (DPO) can be contacted at the following email address: dpo-progettoarca@oneseal.eu
Privacy notices regarding the processing of personal data
Why this privacy notice?
In this privacy notice we describe how the personal data of users who visit the website progettoarca.org are processed.
This notice applies to this website and to all the Foundation’s websites: emergenza.progettoarca.org, sostieni.progettoarca.org, 5×1000.progettoarca.org, povertainitalia.org.
What data do we collect?
Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to identify users visiting the site, but solely to obtain anonymous, aggregated statistical information on the use of the site and to check its correct functioning, and is deleted immediately after processing.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment.
The data may be used to ascertain liability in the event of hypothetical computer crimes against the site.
Cookies
Our Cookie Policy can be consulted here.
Data voluntarily provided by the user
The optional, explicit and voluntary sending of emails to the addresses indicated on the website or the completion of specific forms entails the subsequent acquisition of the sender’s email address and the personal data provided, as well as any additional personal data included in the message and its attachments.
Such information will be processed using IT and digital tools in order to respond to and follow up on the user’s requests.
Why do we collect this data?
We collect this data exclusively for activities aimed at pursuing the Foundation’s statutory purposes and, in particular, to respond to user requests for information; manage administrative and accounting operations related to donations; send our newsletter and/or printed informational material through which we provide updates on our projects and fundraising initiatives, subject to consent; review applications from individuals seeking collaboration; and comply with legal obligations to which we are subject.
Who do we share your data with?
We may share your data with third parties (or otherwise grant them access) only in the following ways and cases:
Third-party services
Fondazione Progetto Arca ETS collaborates with selected service providers whose services integrate with, facilitate and enhance ours. These include hosting and server co-location services, communications services, IT security services, billing and payment processing services, web analytics services, session recording and remote access services, content providers, and legal and financial consultants. These third-party services may receive or have access to users’ personal information, in whole or in part, depending on their specific roles, and may use it solely for purposes aimed at facilitating and improving our services.
Donations
Donations to Fondazione Progetto Arca ETS may be made by credit card, PayPal, Stripe, bank transfer or postal payment slip. Credit institutions and companies managing donations made via credit card or postal payment slip may therefore have access to the user’s personal information strictly necessary to carry out the requested service.
Social media features
Our website may include certain social media features and widgets, such as Facebook “Like” and “Share” buttons, embedded content from YouTube and other interactive mini-programs. These features may collect information such as the user’s IP address or the page being visited on our website and may set a cookie to ensure proper functioning.
These features are hosted by third-party platforms and are therefore governed by their respective privacy notices and not by ours.
Compliance with legal obligations
Fondazione Progetto Arca ETS may disclose or otherwise grant access to users’ personal information in order to comply with a legal obligation, such as a subpoena, legal proceeding, search warrant or court order, or where it believes in good faith that such disclosure is required by law, with or without prior notice to the user.
What are the legal bases for processing?
Personal data may be processed, safeguarding the rights and freedoms of data subjects, on the basis of certain legal grounds, including the need to perform a contract to which the data subject is a party (for example, managing operations related to a donation), or to carry out pre-contractual measures taken at the data subject’s request (for example, collecting and storing CVs), or to inform the data subject about the activities of our Organization through the sending of newsletters, subject to consent.
In addition to consent, we may process personal data in order to pursue our legitimate interests, provided that the interests or fundamental rights and freedoms of the data subject do not prevail. This includes, for example, the sending of the information magazine L’Arca and communications, in both printed and digital formats, reserved for donors.
How long do we retain your data?
The personal data collected will be retained for the time necessary to pursue the purposes of the processing, for example to follow up on your donation request, send you the newsletter you requested, or assess the application you submitted through the relevant forms.
We may continue to retain such information in order to comply with legal obligations, resolve disputes, prevent fraud and abuse, comply with contractual obligations and/or protect our legitimate interests.
Your rights and how to contact us
Please note that you have the right to obtain from Fondazione Progetto Arca ETS, in the cases provided for, access to your personal data and the rectification or erasure thereof, or restriction of processing concerning you, or to object to processing (Articles 15 et seq. of the Regulation).
Requests should be addressed:
by email to the following address: privacy@progettoarca.org
or by post to Fondazione Progetto Arca ETS, Via degli Artigianelli, 6, 20159 Milan.
Right to lodge a complaint
Data subjects who believe that the processing of personal data relating to them is carried out in violation of the Regulation have the right to lodge a complaint with the Supervisory Authority, following the procedures and instructions published on the official website: garanteprivacy.it
Last updated: 15/10/2026
Version V1.5
This privacy notice may be updated: the most recent version will always be available on this page.
In this privacy notice we describe how the personal data of users who visit the website progettoarca.org are processed.
This notice applies to this website and to all the Foundation’s websites: emergenza.progettoarca.org, sostieni.progettoarca.org, 5×1000.progettoarca.org, povertainitalia.org.
What data do we collect?
Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to identify users visiting the site, but solely to obtain anonymous, aggregated statistical information on the use of the site and to check its correct functioning, and is deleted immediately after processing.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment.
The data may be used to ascertain liability in the event of hypothetical computer crimes against the site.
Cookies
Our Cookie Policy can be consulted here.
Data voluntarily provided by the user
The optional, explicit and voluntary sending of emails to the addresses indicated on the website or the completion of specific forms entails the subsequent acquisition of the sender’s email address and the personal data provided, as well as any additional personal data included in the message and its attachments.
Such information will be processed using IT and digital tools in order to respond to and follow up on the user’s requests.
Why do we collect this data?
We collect this data exclusively for activities aimed at pursuing the Foundation’s statutory purposes and, in particular, to respond to user requests for information; manage administrative and accounting operations related to donations; send our newsletter and/or printed informational material through which we provide updates on our projects and fundraising initiatives, subject to consent; review applications from individuals seeking collaboration; and comply with legal obligations to which we are subject.
Who do we share your data with?
We may share your data with third parties (or otherwise grant them access) only in the following ways and cases:
Third-party services
Fondazione Progetto Arca ETS collaborates with selected service providers whose services integrate with, facilitate and enhance ours. These include hosting and server co-location services, communications services, IT security services, billing and payment processing services, web analytics services, session recording and remote access services, content providers, and legal and financial consultants. These third-party services may receive or have access to users’ personal information, in whole or in part, depending on their specific roles, and may use it solely for purposes aimed at facilitating and improving our services.
Donations
Donations to Fondazione Progetto Arca ETS may be made by credit card, PayPal, Stripe, bank transfer or postal payment slip. Credit institutions and companies managing donations made via credit card or postal payment slip may therefore have access to the user’s personal information strictly necessary to carry out the requested service.
Social media features
Our website may include certain social media features and widgets, such as Facebook “Like” and “Share” buttons, embedded content from YouTube and other interactive mini-programs. These features may collect information such as the user’s IP address or the page being visited on our website and may set a cookie to ensure proper functioning.
These features are hosted by third-party platforms and are therefore governed by their respective privacy notices and not by ours.
Compliance with legal obligations
Fondazione Progetto Arca ETS may disclose or otherwise grant access to users’ personal information in order to comply with a legal obligation, such as a subpoena, legal proceeding, search warrant or court order, or where it believes in good faith that such disclosure is required by law, with or without prior notice to the user.
What are the legal bases for processing?
Personal data may be processed, safeguarding the rights and freedoms of data subjects, on the basis of certain legal grounds, including the need to perform a contract to which the data subject is a party (for example, managing operations related to a donation), or to carry out pre-contractual measures taken at the data subject’s request (for example, collecting and storing CVs), or to inform the data subject about the activities of our Organization through the sending of newsletters, subject to consent.
In addition to consent, we may process personal data in order to pursue our legitimate interests, provided that the interests or fundamental rights and freedoms of the data subject do not prevail. This includes, for example, the sending of the information magazine L’Arca and communications, in both printed and digital formats, reserved for donors.
How long do we retain your data?
The personal data collected will be retained for the time necessary to pursue the purposes of the processing, for example to follow up on your donation request, send you the newsletter you requested, or assess the application you submitted through the relevant forms.
We may continue to retain such information in order to comply with legal obligations, resolve disputes, prevent fraud and abuse, comply with contractual obligations and/or protect our legitimate interests.
Your rights and how to contact us
Please note that you have the right to obtain from Fondazione Progetto Arca ETS, in the cases provided for, access to your personal data and the rectification or erasure thereof, or restriction of processing concerning you, or to object to processing (Articles 15 et seq. of the Regulation).
Requests should be addressed:
by email to the following address: privacy@progettoarca.org
or by post to Fondazione Progetto Arca ETS, Via degli Artigianelli, 6, 20159 Milan.
Right to lodge a complaint
Data subjects who believe that the processing of personal data relating to them is carried out in violation of the Regulation have the right to lodge a complaint with the Supervisory Authority, following the procedures and instructions published on the official website: garanteprivacy.it
Last updated: 15/10/2026
Version V1.5
This privacy notice may be updated: the most recent version will always be available on this page.
Introduction
This Privacy Notice, provided pursuant to Articles 13 and 14 of the GDPR, explains how we collect, use, share and retain your personal data in connection with the sending of newsletters and marketing communications via email, telephone, SMS and postal mail.
This Privacy Notice is provided by Fondazione Progetto Arca ETS in its capacity as Data Controller.
What information do we collect, for what purposes and on what legal grounds?
Fondazione Progetto Arca ETS will process personal data collected and/or provided through the Website and/or during the pre-contractual and/or contractual stages, in accordance with the methods and for the purposes described in this section.
1. Newsletter distribution
Personal data processed
Personal data provided when subscribing to the Newsletter or making a donation, including:
– First and last name;
– Email address;
– Data collected through tracking pixels (see section “Tracking Pixels in Emails”).
Purposes of processing
Sending newsletters and updates on projects, initiatives and fundraising campaigns promoted by Fondazione Progetto Arca ETS.
Measuring email opens and link clicks through tracking pixels (see section “Tracking Pixels in Emails”).
Legal bases for processing
The consent of data subjects (Article 6(1)(a) of the GDPR) and, with regard to tracking pixels, Article 122 of the Italian Privacy Code.
Legitimate interest in the case of communications sent to existing donors concerning similar initiatives, pursuant to Article 6(1)(f) of the GDPR and Article 130(4) of Legislative Decree No. 196/2003 (the “Italian Privacy Code”).
Data retention
Personal data will be retained until consent to processing is withdrawn through the opt-out option provided at the bottom of each communication.
Data collected through tracking pixels will be retained as specified in the section “Tracking Pixels in Emails”.
To ensure that personal data remains up to date and that communications remain relevant, Fondazione Progetto Arca ETS periodically assesses subscribers’ continued interest, including on the basis of email opens and link clicks recorded through tracking pixels.
In the event of prolonged inactivity (90 days), the Newsletter subscription will be suspended and the data subject will be invited to confirm their subscription. If no confirmation is received within 30 days, the subscription will be considered terminated and the personal data will no longer be processed for this purpose, unless the data subject subscribes again.
For subscribers who have withdrawn their consent to tracking, the absence of email opening data will not be considered an indication of inactivity.
Fondazione Progetto Arca ETS reserves the right to extend the aforementioned retention period where necessary to comply with a legal obligation applicable to Fondazione Progetto Arca ETS or to protect its rights before a competent authority.
2. Marketing communications
Personal data processed
Personal data collected directly from the data subject, including through the completion of paper forms distributed in various locations, such as:
– First and last name;
– Telephone number;
– Mobile phone number;
– Postal address.
Purposes of processing
Sending marketing communications and updates on projects, initiatives and fundraising campaigns promoted by Fondazione Progetto Arca ETS, via telephone calls, SMS or postal mail.
Legal bases for processing
The consent of data subjects (Article 6(1)(a) of the GDPR).
Data retention
Personal data will be retained until consent is withdrawn.
Fondazione Progetto Arca ETS reserves the right to extend the aforementioned retention period where necessary to comply with a legal obligation applicable to Fondazione Progetto Arca ETS or to protect its rights before a competent authority.
Tracking pixels in Emails
To improve the communications we send you, we use tracking pixels: very small, often transparent images that are not embedded directly in the email but are hosted on a remote server. When you open the message, your email client automatically downloads this image, allowing us to detect that the email has been opened. This mechanism only works if image downloading is enabled; if you choose to read emails in plain-text format, the pixel will not be downloaded.
Through tracking pixels, we collect information about email opens (date, time and number of opens), clicks on links contained in the email, device type and email client, IP address and approximate location.
The data collected is used to improve the performance of our communications (content, subject lines and frequency) and to periodically assess subscribers’ continued interest, as described in the section “Newsletter Distribution”.
Processing is based on the consent of data subjects (Article 6(1)(a) of the GDPR and Article 122 of the Italian Privacy Code), given together with consent to receive the Newsletter. Data is retained until consent to tracking is withdrawn or the subscription is terminated.
You may withdraw your consent selectively, either by withdrawing the consent previously given in its entirety, thereby preventing the receipt of further communications, or by partially withdrawing consent solely in relation to tracking through tracking pixels. You can manage these choices by accessing the Preference Center via the link provided at the bottom of each email you receive. Your preferences can be managed separately for each mailing list to which you are subscribed. Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.
If you withdraw your consent to tracking only, you will continue to receive our communications without any restrictions. Your interactions with emails will only be considered in aggregate form and will no longer be attributable to you personally. Your preferences are recorded with the date and time of your selection.
With regard to personal data processing activities carried out through the sending of emails containing tracking pixels that began before the entry into force of the Italian Data Protection Authority’s Decision of 17 April 2026, entitled “Guidelines on the Use of Tracking Pixels in Email Communications”, and therefore before 29 October 2026, the information obligations are fulfilled upon the next available communication, through which data subjects are informed of the mechanism allowing them to withdraw their consent, including selectively.
Methods of processing
The personal data of data subjects will primarily be processed using electronic or otherwise automated means, through methods and tools designed to ensure the security and confidentiality of such data in compliance with the GDPR.
In particular, all necessary technical, IT, organizational, logistical and procedural security measures will be implemented to ensure the minimum level of data protection required by law, restricting access exclusively to persons authorized to process personal data by Fondazione Progetto Arca ETS or by the Data Processors appointed by Fondazione Progetto Arca ETS.
The information collected and the methods of processing will be relevant and proportionate to the services provided. Personal data will also be managed and protected in environments where access is constantly monitored and controlled.
With whom do we share your information?
The personal data of data subjects processed pursuant to this Privacy Notice may be shared with third parties only with the specific consent of the data subjects, provided through a Release Form.
Furthermore, the personal data of data subjects may be disclosed to:
– companies, consultants or professionals appointed, where necessary, to install, maintain, update and generally manage software owned or used by Fondazione Progetto Arca ETS in providing its services, formally appointed as Data Processors;
– employees and/or collaborators of Fondazione Progetto Arca ETS, formally designated as persons authorized to process personal data;
– any entities (including Public Authorities) entitled to access personal data pursuant to legislative or administrative provisions;
– any public and/or private entities, natural and/or legal persons (legal, administrative and tax consultancy firms, Judicial Offices, Chambers of Commerce, Labour Chambers and Offices, etc.), where such disclosure is necessary or instrumental to the proper fulfilment of contractual obligations and obligations arising under applicable law.
Personal data relating to data subjects will not be publicly disclosed, except in anonymous and aggregated form for statistical or research purposes.
Transfers of personal data to third countries
We will not transfer your personal data to countries outside the European Economic Area (“EEA”), which includes the Member States of the European Union, Norway, Liechtenstein and Iceland.
Should such transfers become necessary to fulfil the purposes of processing described in this Privacy Notice, our Organization guarantees that any transfer of personal data outside the EEA will be carried out in a manner that ensures the full protection of the rights and freedoms of data subjects.
Where the European Commission has not issued an adequacy decision concerning the recipient third country, data transfers will be carried out by adopting the safeguards provided for under Articles 46 et seq. of the GDPR, including the Standard Contractual Clauses approved by the European Commission, together with a thorough assessment of the legislation of the relevant destination country.
Your rights and how to contact us
As a data subject, you may exercise the rights provided for under Articles 15 et seq. of the GDPR, specifically the rights to:
– object to receiving newsletters by clicking the appropriate opt-out link provided at the bottom of all communications received;
– withdraw your consent to receive marketing communications (telephone, SMS, postal mail) at any time;
– withdraw your consent solely to tracking through tracking pixels, while continuing to receive communications, by accessing the Preference Center via the link provided at the bottom of each email received;
– obtain, at any time, confirmation as to whether or not your personal data is being processed, and obtain access to your personal data and information concerning its processing;
– request the rectification of inaccurate personal data and the completion of incomplete data;
– request, in the cases provided for by the GDPR and without prejudice to the specific provisions applicable to certain processing activities, the erasure or restriction of processing of personal data once the applicable retention periods have expired.
Requests should be sent to privacy@progettoarca.org.
Right to lodge a complaint
If you believe that the processing of your personal data infringes the provisions of the GDPR, you have the right to lodge a complaint with the competent Data Protection Authority, as provided for under Article 77 of the GDPR, or to seek a judicial remedy before the competent courts pursuant to Article 79 of the GDPR.
Changes to this privacy notice
Fondazione Progetto Arca ETS reserves the right to amend this Privacy Notice at any time, while ensuring an adequate and equivalent level of personal data protection.
To obtain information about any changes, you are invited to contact us at the following email address: privacy@progettoarca.org.
To access previous versions of this Privacy Notice, you may submit a request to the following email address: privacy@progettoarca.org.
Last updated: 15/10/2026
Version V1.5
This privacy notice may be updated: the most recent version will always be available on this page.
This Privacy Notice, provided pursuant to Articles 13 and 14 of the GDPR, explains how we collect, use, share and retain your personal data in connection with the sending of newsletters and marketing communications via email, telephone, SMS and postal mail.
This Privacy Notice is provided by Fondazione Progetto Arca ETS in its capacity as Data Controller.
What information do we collect, for what purposes and on what legal grounds?
Fondazione Progetto Arca ETS will process personal data collected and/or provided through the Website and/or during the pre-contractual and/or contractual stages, in accordance with the methods and for the purposes described in this section.
1. Newsletter distribution
Personal data processed
Personal data provided when subscribing to the Newsletter or making a donation, including:
– First and last name;
– Email address;
– Data collected through tracking pixels (see section “Tracking Pixels in Emails”).
Purposes of processing
Sending newsletters and updates on projects, initiatives and fundraising campaigns promoted by Fondazione Progetto Arca ETS.
Measuring email opens and link clicks through tracking pixels (see section “Tracking Pixels in Emails”).
Legal bases for processing
The consent of data subjects (Article 6(1)(a) of the GDPR) and, with regard to tracking pixels, Article 122 of the Italian Privacy Code.
Legitimate interest in the case of communications sent to existing donors concerning similar initiatives, pursuant to Article 6(1)(f) of the GDPR and Article 130(4) of Legislative Decree No. 196/2003 (the “Italian Privacy Code”).
Data retention
Personal data will be retained until consent to processing is withdrawn through the opt-out option provided at the bottom of each communication.
Data collected through tracking pixels will be retained as specified in the section “Tracking Pixels in Emails”.
To ensure that personal data remains up to date and that communications remain relevant, Fondazione Progetto Arca ETS periodically assesses subscribers’ continued interest, including on the basis of email opens and link clicks recorded through tracking pixels.
In the event of prolonged inactivity (90 days), the Newsletter subscription will be suspended and the data subject will be invited to confirm their subscription. If no confirmation is received within 30 days, the subscription will be considered terminated and the personal data will no longer be processed for this purpose, unless the data subject subscribes again.
For subscribers who have withdrawn their consent to tracking, the absence of email opening data will not be considered an indication of inactivity.
Fondazione Progetto Arca ETS reserves the right to extend the aforementioned retention period where necessary to comply with a legal obligation applicable to Fondazione Progetto Arca ETS or to protect its rights before a competent authority.
2. Marketing communications
Personal data processed
Personal data collected directly from the data subject, including through the completion of paper forms distributed in various locations, such as:
– First and last name;
– Telephone number;
– Mobile phone number;
– Postal address.
Purposes of processing
Sending marketing communications and updates on projects, initiatives and fundraising campaigns promoted by Fondazione Progetto Arca ETS, via telephone calls, SMS or postal mail.
Legal bases for processing
The consent of data subjects (Article 6(1)(a) of the GDPR).
Data retention
Personal data will be retained until consent is withdrawn.
Fondazione Progetto Arca ETS reserves the right to extend the aforementioned retention period where necessary to comply with a legal obligation applicable to Fondazione Progetto Arca ETS or to protect its rights before a competent authority.
Tracking pixels in Emails
To improve the communications we send you, we use tracking pixels: very small, often transparent images that are not embedded directly in the email but are hosted on a remote server. When you open the message, your email client automatically downloads this image, allowing us to detect that the email has been opened. This mechanism only works if image downloading is enabled; if you choose to read emails in plain-text format, the pixel will not be downloaded.
Through tracking pixels, we collect information about email opens (date, time and number of opens), clicks on links contained in the email, device type and email client, IP address and approximate location.
The data collected is used to improve the performance of our communications (content, subject lines and frequency) and to periodically assess subscribers’ continued interest, as described in the section “Newsletter Distribution”.
Processing is based on the consent of data subjects (Article 6(1)(a) of the GDPR and Article 122 of the Italian Privacy Code), given together with consent to receive the Newsletter. Data is retained until consent to tracking is withdrawn or the subscription is terminated.
You may withdraw your consent selectively, either by withdrawing the consent previously given in its entirety, thereby preventing the receipt of further communications, or by partially withdrawing consent solely in relation to tracking through tracking pixels. You can manage these choices by accessing the Preference Center via the link provided at the bottom of each email you receive. Your preferences can be managed separately for each mailing list to which you are subscribed. Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.
If you withdraw your consent to tracking only, you will continue to receive our communications without any restrictions. Your interactions with emails will only be considered in aggregate form and will no longer be attributable to you personally. Your preferences are recorded with the date and time of your selection.
With regard to personal data processing activities carried out through the sending of emails containing tracking pixels that began before the entry into force of the Italian Data Protection Authority’s Decision of 17 April 2026, entitled “Guidelines on the Use of Tracking Pixels in Email Communications”, and therefore before 29 October 2026, the information obligations are fulfilled upon the next available communication, through which data subjects are informed of the mechanism allowing them to withdraw their consent, including selectively.
Methods of processing
The personal data of data subjects will primarily be processed using electronic or otherwise automated means, through methods and tools designed to ensure the security and confidentiality of such data in compliance with the GDPR.
In particular, all necessary technical, IT, organizational, logistical and procedural security measures will be implemented to ensure the minimum level of data protection required by law, restricting access exclusively to persons authorized to process personal data by Fondazione Progetto Arca ETS or by the Data Processors appointed by Fondazione Progetto Arca ETS.
The information collected and the methods of processing will be relevant and proportionate to the services provided. Personal data will also be managed and protected in environments where access is constantly monitored and controlled.
With whom do we share your information?
The personal data of data subjects processed pursuant to this Privacy Notice may be shared with third parties only with the specific consent of the data subjects, provided through a Release Form.
Furthermore, the personal data of data subjects may be disclosed to:
– companies, consultants or professionals appointed, where necessary, to install, maintain, update and generally manage software owned or used by Fondazione Progetto Arca ETS in providing its services, formally appointed as Data Processors;
– employees and/or collaborators of Fondazione Progetto Arca ETS, formally designated as persons authorized to process personal data;
– any entities (including Public Authorities) entitled to access personal data pursuant to legislative or administrative provisions;
– any public and/or private entities, natural and/or legal persons (legal, administrative and tax consultancy firms, Judicial Offices, Chambers of Commerce, Labour Chambers and Offices, etc.), where such disclosure is necessary or instrumental to the proper fulfilment of contractual obligations and obligations arising under applicable law.
Personal data relating to data subjects will not be publicly disclosed, except in anonymous and aggregated form for statistical or research purposes.
Transfers of personal data to third countries
We will not transfer your personal data to countries outside the European Economic Area (“EEA”), which includes the Member States of the European Union, Norway, Liechtenstein and Iceland.
Should such transfers become necessary to fulfil the purposes of processing described in this Privacy Notice, our Organization guarantees that any transfer of personal data outside the EEA will be carried out in a manner that ensures the full protection of the rights and freedoms of data subjects.
Where the European Commission has not issued an adequacy decision concerning the recipient third country, data transfers will be carried out by adopting the safeguards provided for under Articles 46 et seq. of the GDPR, including the Standard Contractual Clauses approved by the European Commission, together with a thorough assessment of the legislation of the relevant destination country.
Your rights and how to contact us
As a data subject, you may exercise the rights provided for under Articles 15 et seq. of the GDPR, specifically the rights to:
– object to receiving newsletters by clicking the appropriate opt-out link provided at the bottom of all communications received;
– withdraw your consent to receive marketing communications (telephone, SMS, postal mail) at any time;
– withdraw your consent solely to tracking through tracking pixels, while continuing to receive communications, by accessing the Preference Center via the link provided at the bottom of each email received;
– obtain, at any time, confirmation as to whether or not your personal data is being processed, and obtain access to your personal data and information concerning its processing;
– request the rectification of inaccurate personal data and the completion of incomplete data;
– request, in the cases provided for by the GDPR and without prejudice to the specific provisions applicable to certain processing activities, the erasure or restriction of processing of personal data once the applicable retention periods have expired.
Requests should be sent to privacy@progettoarca.org.
Right to lodge a complaint
If you believe that the processing of your personal data infringes the provisions of the GDPR, you have the right to lodge a complaint with the competent Data Protection Authority, as provided for under Article 77 of the GDPR, or to seek a judicial remedy before the competent courts pursuant to Article 79 of the GDPR.
Changes to this privacy notice
Fondazione Progetto Arca ETS reserves the right to amend this Privacy Notice at any time, while ensuring an adequate and equivalent level of personal data protection.
To obtain information about any changes, you are invited to contact us at the following email address: privacy@progettoarca.org.
To access previous versions of this Privacy Notice, you may submit a request to the following email address: privacy@progettoarca.org.
Last updated: 15/10/2026
Version V1.5
This privacy notice may be updated: the most recent version will always be available on this page.
Why this privacy notice?
In this privacy notice we describe the methods used to process the personal data of individuals who intend to make a donation to Fondazione Progetto Arca ETS or who are already donors.
What data do we collect?
The optional, explicit and voluntary sending of personal data by email to the addresses indicated on this website or through the completion of specific forms entails the subsequent acquisition of the sender’s address and the personal data provided.
The data will be processed in paper, IT and digital form.
Why do we collect this data?
We collect data concerning you in order to manage all accounting and administrative operations connected with your donation, including instrumental activities (for example, communications about payments, donation summaries and reporting, etc.), and to follow up on your explicit requests, expressed by filling in specific forms, to receive updates on Progetto Arca’s activities or on other donation methods (for example, to receive emails or SMS reminders to allocate the 5×1000 to Progetto Arca or to have our guide to legacy giving sent to you).
Who do we share your data with?
We may share your data with third parties (or otherwise grant them access) only in the following ways and cases:
Payments
Fondazione Progetto Arca ETS may share your personal data with banking institutions or credit card payment management companies solely for the purpose of processing the donation request you have submitted.
Compliance with legal obligations
Fondazione Progetto Arca ETS may disclose or otherwise grant access to your personal data in performance of a legal obligation, such as a subpoena, legal proceedings, a search warrant, a court order, or pursuant to applicable law where it reasonably believes that such conduct is required by law, with or without prior notice to the user.
What are the legal bases for processing?
Personal data may be processed, safeguarding the rights and freedoms of data subjects, on the basis of certain legal grounds including the need to manage operations related to and consequent upon your donation, as well as to inform you about the activities of our Organization through the sending of the information magazine L’Arca and communications, in paper and digital formats, reserved for donors.
We may also process your personal data in order to comply with a legal obligation to which our Organization is subject.
When and how can we contact you?
We may contact you only at your request, or to keep you informed about donations you have made, or for service needs related to the donation methods you have chosen.
How long do we retain your data?
Your personal data will be retained for the time necessary to pursue the purposes of the processing.
We may also continue to retain such information after the purpose for which it was collected has been achieved, insofar as reasonably necessary to comply with legal obligations.
Your rights and how to contact us
Please note that you have the right to obtain from Fondazione Progetto Arca ETS, in the cases provided for, access to your personal data and the rectification or erasure thereof, or restriction of processing concerning you, or to object to processing (Articles 15 et seq. of the Regulation).
Requests should be addressed:
by email to the following address: privacy@progettoarca.org
or by post to Fondazione Progetto Arca ETS, Via degli Artigianelli, 6, 20159 Milan.
Right to lodge a complaint
Data subjects who believe that the processing of personal data relating to them is carried out in violation of the Regulation have the right to lodge a complaint with the Supervisory Authority, following the procedures and instructions published on the official website garanteprivacy.it
Last updated: Last updated: 15/10/2026
Version V1.5
This privacy notice may be updated: the most recent version will always be available on this page.
In this privacy notice we describe the methods used to process the personal data of individuals who intend to make a donation to Fondazione Progetto Arca ETS or who are already donors.
What data do we collect?
The optional, explicit and voluntary sending of personal data by email to the addresses indicated on this website or through the completion of specific forms entails the subsequent acquisition of the sender’s address and the personal data provided.
The data will be processed in paper, IT and digital form.
Why do we collect this data?
We collect data concerning you in order to manage all accounting and administrative operations connected with your donation, including instrumental activities (for example, communications about payments, donation summaries and reporting, etc.), and to follow up on your explicit requests, expressed by filling in specific forms, to receive updates on Progetto Arca’s activities or on other donation methods (for example, to receive emails or SMS reminders to allocate the 5×1000 to Progetto Arca or to have our guide to legacy giving sent to you).
Who do we share your data with?
We may share your data with third parties (or otherwise grant them access) only in the following ways and cases:
Payments
Fondazione Progetto Arca ETS may share your personal data with banking institutions or credit card payment management companies solely for the purpose of processing the donation request you have submitted.
Compliance with legal obligations
Fondazione Progetto Arca ETS may disclose or otherwise grant access to your personal data in performance of a legal obligation, such as a subpoena, legal proceedings, a search warrant, a court order, or pursuant to applicable law where it reasonably believes that such conduct is required by law, with or without prior notice to the user.
What are the legal bases for processing?
Personal data may be processed, safeguarding the rights and freedoms of data subjects, on the basis of certain legal grounds including the need to manage operations related to and consequent upon your donation, as well as to inform you about the activities of our Organization through the sending of the information magazine L’Arca and communications, in paper and digital formats, reserved for donors.
We may also process your personal data in order to comply with a legal obligation to which our Organization is subject.
When and how can we contact you?
We may contact you only at your request, or to keep you informed about donations you have made, or for service needs related to the donation methods you have chosen.
How long do we retain your data?
Your personal data will be retained for the time necessary to pursue the purposes of the processing.
We may also continue to retain such information after the purpose for which it was collected has been achieved, insofar as reasonably necessary to comply with legal obligations.
Your rights and how to contact us
Please note that you have the right to obtain from Fondazione Progetto Arca ETS, in the cases provided for, access to your personal data and the rectification or erasure thereof, or restriction of processing concerning you, or to object to processing (Articles 15 et seq. of the Regulation).
Requests should be addressed:
by email to the following address: privacy@progettoarca.org
or by post to Fondazione Progetto Arca ETS, Via degli Artigianelli, 6, 20159 Milan.
Right to lodge a complaint
Data subjects who believe that the processing of personal data relating to them is carried out in violation of the Regulation have the right to lodge a complaint with the Supervisory Authority, following the procedures and instructions published on the official website garanteprivacy.it
Last updated: Last updated: 15/10/2026
Version V1.5
This privacy notice may be updated: the most recent version will always be available on this page.
Why this privacy notice?
In this privacy notice we describe how we process the personal data of Volunteers in order to establish and manage the voluntary collaboration with them, on a free-of-charge basis.
What data do we collect?
For the correct performance of volunteering activities we need to collect and process data defined by law as “common” data, such as identification details.
Such information will also be processed in order to comply with obligations set out by law, regulations and EU legislation.
Why do we collect this data?
Specifically, your data may be processed for the following purposes:
to manage the unpaid relationship with the volunteer;
to allow the sending and receipt of service communications from us;
to create an identification badge visible to the public;
to assert or defend a right in legal proceedings.
Who do we share your data with?
We may share your information with third parties (or otherwise grant them access) only in the following ways and cases:
to public and private entities that may access the data under laws, regulations or EU legislation, within the limits set by such rules;
to entities that need access to your data for purposes auxiliary to the relationship between us, strictly within the limits necessary to carry out such ancillary tasks.
What are the legal bases for processing?
Personal data may be processed, safeguarding the rights and freedoms of data subjects, on the basis of certain legal grounds, including:
the need to perform a contract to which the data subject is a party or pre-contractual measures adopted at their request;
the need to comply with a legal obligation to which our Organization is subject;
the need to pursue a legitimate interest of our Organization (for example, the creation of an identification badge visible to the public), provided that the interests or fundamental rights and freedoms of the data subject do not prevail;
where you have given your consent to the processing of your personal data for one or more specific purposes (for example, the publication of images).
In cases where processing is based on the legitimate interest of our Organization, you may object at any time to the processing of your personal data (see the “Your rights” section of this privacy notice).
How long do we retain your data?
We may retain your personal data for a period not exceeding 10 years and 6 months from the end of the volunteering relationship.
Other information concerning you, such as data collected from the processing of web navigation log files or from the use of our Organization’s email services, will be retained for a period not exceeding the achievement of the purposes for which they are processed and to fulfil legal obligations.
At the end of the retention period, the information concerning you will be deleted from our IT systems or destroyed.
Your rights and how to contact us
Please note that you have the right to obtain from Fondazione Progetto Arca ETS, in the cases provided for, access to your personal data and the rectification or erasure thereof, or restriction of processing concerning you, or to object to processing (Articles 15 et seq. of the Regulation).
Requests should be addressed:
by email to the following address: privacy@progettoarca.org
or by post to Fondazione Progetto Arca ETS, Via degli Artigianelli, 6, 20159 Milan.
Right to lodge a complaint
Data subjects who believe that the processing of personal data relating to them is carried out in violation of the Regulation have the right to lodge a complaint with the Supervisory Authority, following the procedures and instructions published on the official website: garanteprivacy.it
Last updated: Last updated: 15/10/2026
Version V1.5
This privacy notice may be updated: the most recent version will always be available on this page.
In this privacy notice we describe how we process the personal data of Volunteers in order to establish and manage the voluntary collaboration with them, on a free-of-charge basis.
What data do we collect?
For the correct performance of volunteering activities we need to collect and process data defined by law as “common” data, such as identification details.
Such information will also be processed in order to comply with obligations set out by law, regulations and EU legislation.
Why do we collect this data?
Specifically, your data may be processed for the following purposes:
to manage the unpaid relationship with the volunteer;
to allow the sending and receipt of service communications from us;
to create an identification badge visible to the public;
to assert or defend a right in legal proceedings.
Who do we share your data with?
We may share your information with third parties (or otherwise grant them access) only in the following ways and cases:
to public and private entities that may access the data under laws, regulations or EU legislation, within the limits set by such rules;
to entities that need access to your data for purposes auxiliary to the relationship between us, strictly within the limits necessary to carry out such ancillary tasks.
What are the legal bases for processing?
Personal data may be processed, safeguarding the rights and freedoms of data subjects, on the basis of certain legal grounds, including:
the need to perform a contract to which the data subject is a party or pre-contractual measures adopted at their request;
the need to comply with a legal obligation to which our Organization is subject;
the need to pursue a legitimate interest of our Organization (for example, the creation of an identification badge visible to the public), provided that the interests or fundamental rights and freedoms of the data subject do not prevail;
where you have given your consent to the processing of your personal data for one or more specific purposes (for example, the publication of images).
In cases where processing is based on the legitimate interest of our Organization, you may object at any time to the processing of your personal data (see the “Your rights” section of this privacy notice).
How long do we retain your data?
We may retain your personal data for a period not exceeding 10 years and 6 months from the end of the volunteering relationship.
Other information concerning you, such as data collected from the processing of web navigation log files or from the use of our Organization’s email services, will be retained for a period not exceeding the achievement of the purposes for which they are processed and to fulfil legal obligations.
At the end of the retention period, the information concerning you will be deleted from our IT systems or destroyed.
Your rights and how to contact us
Please note that you have the right to obtain from Fondazione Progetto Arca ETS, in the cases provided for, access to your personal data and the rectification or erasure thereof, or restriction of processing concerning you, or to object to processing (Articles 15 et seq. of the Regulation).
Requests should be addressed:
by email to the following address: privacy@progettoarca.org
or by post to Fondazione Progetto Arca ETS, Via degli Artigianelli, 6, 20159 Milan.
Right to lodge a complaint
Data subjects who believe that the processing of personal data relating to them is carried out in violation of the Regulation have the right to lodge a complaint with the Supervisory Authority, following the procedures and instructions published on the official website: garanteprivacy.it
Last updated: Last updated: 15/10/2026
Version V1.5
This privacy notice may be updated: the most recent version will always be available on this page.
Why this privacy notice?
In this privacy notice we describe how we process the personal data of candidates for employment.
This notice is provided to those who submit their CV or other information to establish an employment relationship with our Organization.
What data do we collect?
The optional, explicit and voluntary sending of personal data by email to the addresses indicated on this site or by completing specific forms entails the subsequent acquisition of the sender’s address and the personal data provided.
The data will be processed in paper, IT and digital form.
Why do we collect this data?
We collect these data exclusively to carry out personnel search, selection and evaluation activities, namely to perform pre-contractual measures adopted at your request.
Who do we share your data with?
We may share your data with third parties (or otherwise grant them access) only in the following ways and cases:
Compliance with legal obligations
Fondazione Progetto Arca ETS may disclose or otherwise grant access to your personal data in performance of a legal obligation, such as a subpoena, legal proceeding, search warrant or court order, or where it believes in good faith that such conduct is required by law, with or without prior notice to the user.
What are the legal bases for processing?
Personal data may be processed, safeguarding the rights and freedoms of data subjects, on the basis of certain legal grounds, including the need to perform a contract to which the data subject is a party or pre-contractual measures taken at their request (for example: retaining the CV received).
If among the data provided by the data subject there are “special” categories of data (such as information revealing political, philosophical or religious beliefs, or information relating to health or sexual life), we will ask for explicit consent for their processing.
When and how can we contact you?
We may contact you only to arrange an interview or to request further information relating to your professional profile.
How long do we retain your data?
We may retain your CV or other information relating to you for a maximum period of 6 months, unless you request earlier deletion.
In the event of hiring, the personal data provided will be retained for the time necessary to manage the Personnel File.
We may also continue to retain such information after the purpose for which it was collected has been achieved, to the extent reasonably necessary to comply with legal obligations, resolve disputes, prevent fraud and abuse, comply with contractual obligations and/or protect our legitimate interests.
Your rights and how to contact us
Please note that you have the right to obtain from Fondazione Progetto Arca ETS, in the cases provided for, access to your personal data and the rectification or erasure thereof, or restriction of processing concerning you, or to object to processing (Articles 15 et seq. of the Regulation).
Requests should be addressed:
by email to the following address: privacy@progettoarca.org
or by post to Fondazione Progetto Arca ETS, Via degli Artigianelli, 6, 20159 Milan.
Right to lodge a complaint
Data subjects who believe that the processing of personal data relating to them is carried out in violation of the Regulation have the right to lodge a complaint with the Supervisory Authority, following the procedures and instructions published on the official website: garanteprivacy.it
Last updated: Last updated: 15/10/2026
Version V1.5
This privacy notice may be updated: the most recent version will always be available on this page.
In this privacy notice we describe how we process the personal data of candidates for employment.
This notice is provided to those who submit their CV or other information to establish an employment relationship with our Organization.
What data do we collect?
The optional, explicit and voluntary sending of personal data by email to the addresses indicated on this site or by completing specific forms entails the subsequent acquisition of the sender’s address and the personal data provided.
The data will be processed in paper, IT and digital form.
Why do we collect this data?
We collect these data exclusively to carry out personnel search, selection and evaluation activities, namely to perform pre-contractual measures adopted at your request.
Who do we share your data with?
We may share your data with third parties (or otherwise grant them access) only in the following ways and cases:
Compliance with legal obligations
Fondazione Progetto Arca ETS may disclose or otherwise grant access to your personal data in performance of a legal obligation, such as a subpoena, legal proceeding, search warrant or court order, or where it believes in good faith that such conduct is required by law, with or without prior notice to the user.
What are the legal bases for processing?
Personal data may be processed, safeguarding the rights and freedoms of data subjects, on the basis of certain legal grounds, including the need to perform a contract to which the data subject is a party or pre-contractual measures taken at their request (for example: retaining the CV received).
If among the data provided by the data subject there are “special” categories of data (such as information revealing political, philosophical or religious beliefs, or information relating to health or sexual life), we will ask for explicit consent for their processing.
When and how can we contact you?
We may contact you only to arrange an interview or to request further information relating to your professional profile.
How long do we retain your data?
We may retain your CV or other information relating to you for a maximum period of 6 months, unless you request earlier deletion.
In the event of hiring, the personal data provided will be retained for the time necessary to manage the Personnel File.
We may also continue to retain such information after the purpose for which it was collected has been achieved, to the extent reasonably necessary to comply with legal obligations, resolve disputes, prevent fraud and abuse, comply with contractual obligations and/or protect our legitimate interests.
Your rights and how to contact us
Please note that you have the right to obtain from Fondazione Progetto Arca ETS, in the cases provided for, access to your personal data and the rectification or erasure thereof, or restriction of processing concerning you, or to object to processing (Articles 15 et seq. of the Regulation).
Requests should be addressed:
by email to the following address: privacy@progettoarca.org
or by post to Fondazione Progetto Arca ETS, Via degli Artigianelli, 6, 20159 Milan.
Right to lodge a complaint
Data subjects who believe that the processing of personal data relating to them is carried out in violation of the Regulation have the right to lodge a complaint with the Supervisory Authority, following the procedures and instructions published on the official website: garanteprivacy.it
Last updated: Last updated: 15/10/2026
Version V1.5
This privacy notice may be updated: the most recent version will always be available on this page.