Information on the processing of personal data – Privacy Policy

Pursuant to Art. 13 of EU Regulation 679/2016

1. DATA CONTROLLER

The Fondazione Bambino Gesù del Cairo Ente Filantropico ETS, with registered office in Viale Giorgio De Chirico N.7 - 04100 Latina, Tax Code 91161820591, in the person of its legal representative Monsignor Yoannis Lahzi Gaid (hereinafter referred to as the "Foundation"), operates as the Data Controller of personal data pursuant to Art. 4 of the European Regulation 679/2016 (hereinafter "GDPR") and, in full compliance with current regulatory requirements, intends to provide information regarding the processing of personal data of users interacting with the website bambinogesu-eg.com (hereinafter the "Site").

The Site also uses "cookie" technologies for specific purposes illustrated below. The information contained in this document does not concern other websites or online systems to which the Site may refer through hyperlinks. Users are invited to read the privacy policies directly on the sites to which the links may lead.

2. CONTACT DETAILS

The Data Controller can be contacted by sending an e-mail to segreteria@bambinogesu-eg.com. The Foundation employs a Data Protection Officer (DPO) who can be contacted for clarification or for matters concerning the processing of personal data at the e-mail address dpo@bambinogesu-eg.com.

3. TYPES OF DATA PROCESSED

Through the Site, the Foundation may process:

• Browsing data: Computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols (e.g., IP addresses, browser type, timestamps).

• Data provided voluntarily by the user: Any personal data (name, surname, e-mail address, etc.) provided by the user through contact forms or by sending e-mails to the addresses indicated on the Site.

• Cookies: Small text files that the sites visited by the user send to their terminal.

4. PURPOSE AND LEGAL BASIS OF THE PROCESSING

Personal data are processed for the following purposes:

1. Management of requests: To provide feedback to requests for information or assistance sent by users. Legal basis: implementation of pre-contractual measures (Art. 6.1.b GDPR).

2. Navigation and security: To allow the correct technical functioning of the site and monitor its security. Legal basis: Legitimate interest of the Controller (Art. 6.1.f GDPR).

3. Compliance with legal obligations: To fulfill obligations established by law or by the Authorities. Legal basis: Legal obligation (Art. 6.1.c GDPR).

4. Donations and philanthropic activities: To manage donations and related administrative/tax fulfillments. Legal basis: performance of a contract or legal obligation.

5. RECIPIENTS OF PERSONAL DATA

The data may be communicated to:

• Subjects authorized by the Foundation (employees, collaborators).

• Third-party service providers (IT assistance, hosting providers, consultants) appointed as Data Processors.

• Public authorities or judicial bodies where required by law.

6. TRANSFER TO THIRD COUNTRIES

Personal data are processed within the European Economic Area (EEA). Should a transfer to a third country be necessary, the Foundation ensures the adoption of appropriate safeguards (such as Standard Contractual Clauses) in compliance with the GDPR.

7. DATA RETENTION PERIOD

The data will be kept for the time strictly necessary to fulfill the purposes for which they were collected, or according to the deadlines established by tax and civil law (generally 10 years for administrative data). Navigation data are deleted immediately after processing (except for judicial investigations).

8. COOKIE POLICY

(The text follows the standard descriptions for technical, analytical, and third-party cookies as per the original document).

9. NATURE OF DATA PROVISION

Apart from navigation data, the user is free to provide their personal data. Failure to provide them may make it impossible to obtain a response from the Foundation or to manage the requests addressed to it.

10. PROCESSING METHODS

Data are processed in compliance with sectoral regulations, ensuring confidentiality and security through paper, computer, and electronic tools, only by authorized personnel.

11. RIGHTS OF THE DATA SUBJECT

Data subjects have the right to obtain from the Foundation access to their personal data, rectification, erasure, limitation of processing, or to object to processing (Artt. 15 et seq. of the Regulation). Please refer to the contact details in point 2.

12. CHANGES TO THIS PRIVACY POLICY

This document constitutes the "Privacy Policy" and "Cookie Policy" of this site and is subject to periodic updates. Current version: February 2026.