Privacy notice

Information provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) to visitors of this website and to anyone contacting the Foundation through it. In case of discrepancy, the Italian version prevails. Last updated: 26 September 2026.

1. Data controller

Fondazione Gagliardi, Via Annunziata 115, scala A, 84037 Sant’Arsenio (SA), Italy, represented by its legal representative. E-mail: info@fondazionegagliardi.it. The Foundation has not appointed a Data Protection Officer, as it is not required to do so.

2. What data we process

Browsing data. The systems running this website automatically collect some technical data, such as IP address, browser and device type, date and time of the request and pages visited. It is used only to keep the website working and secure, and not to identify visitors.

Data you provide. If you write to the Foundation through the contact form or by e-mail, we process the data you give us: full name, e-mail address, reason for contact, message and any other information you choose to include. Please do not include special categories of data (for example health data) unless strictly necessary.

Cookies and similar tools. The website only uses technical tools; see the Cookie policy.

3. Purposes and legal bases

• Answering your requests and managing any resulting relationship (partnership proposals, information on projects, events and calls): steps taken at your request and the Foundation’s legitimate interest in following up on contacts received (Art. 6(1)(b) and (f) GDPR).
• Keeping the website working and secure, preventing abuse and spam: legitimate interest (Art. 6(1)(f)).
• Complying with legal obligations and, where necessary, establishing, exercising or defending legal claims: legal obligation and legitimate interest (Art. 6(1)(c) and (f)).
• Statistics or marketing cookies, if used in the future: only with your consent (Art. 6(1)(a)), which you may withdraw at any time.

4. Is providing data mandatory?

Providing data through the contact form is optional, but without your name, e-mail and message we cannot answer your request.

5. How we process data

Data is processed electronically by persons authorised and instructed by the Foundation, with appropriate technical and organisational security measures (including encrypted HTTPS transmission). No automated decision-making or profiling takes place.

6. Who receives the data

Data is not published. It may be processed on the Foundation’s behalf, as data processors, by the providers of services the website needs:

• Netlify, Inc. (USA): website hosting and delivery, browsing data;
• FormSubmit (formsubmit.co): forwarding contact form messages by e-mail;
• Google: blog content is published from a Google spreadsheet; your browser downloads it from Google’s servers, which receive the technical data of the request (such as your IP address), without setting cookies;
• the Foundation’s e-mail provider.

Data may also be disclosed to public authorities where required by law.

7. Transfers outside the European Union

Some providers are based in, or use infrastructure in, the United States. Such transfers rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, for certified providers, or on the Standard Contractual Clauses approved by the Commission (Articles 45 and 46 GDPR).

8. How long we keep data

• Messages and contact details: for as long as needed to handle the request and in any case no longer than 24 months after the last contact, unless required for an ongoing relationship or by law.
• Browsing data: only as long as strictly necessary for technical and security purposes, in line with the hosting provider’s retention periods.
• Cookie choices: 6 months (see the Cookie policy).

9. Your rights

You may at any time request access to your data, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interest (Articles 15–22 GDPR). Where you gave consent, you may withdraw it without affecting the lawfulness of prior processing. To exercise your rights, write to info@fondazionegagliardi.it.

If you believe the processing breaches data protection law, you may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the country where you live or work.

10. Children

This website is not intended for children under 14. If you are under 14, do not send personal data without the consent of a parent or guardian.

11. Changes

The Foundation may update this notice; the current version is always published on this page with the date of the latest update.