In view of the upcoming edition of World Children’s Day (WCD), this information notice (the “Notice”) provides data subjects with details on how the free online newsletter service will be managed and the related personal data processing carried out by Be Human.

This information is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) for users who subscribe to the “Newsletter” service and, more generally, interact with the online information service dedicated to WCD.

DATA CONTROLLER

The Data Controller is BE HUMAN ETS (Italian third-sector organization) with registered office in Rome, Via Della Conciliazione 3 A (hereinafter, the “Controller” or “Be Human”). Contact: [-].

DATA PROTECTION OFFICER (DPO)

The Controller has appointed a Data Protection Officer (DPO) pursuant to Article 37 GDPR, contactable at: [-].

DATA COLLECTED

The personal data processed are those provided voluntarily by the data subject (or, in the case of minors under 14, by the parent/legal guardian) via the subscription form for the official World Children’s Day Newsletter, as well as technical data automatically generated by the systems used to manage the service.

1. Personal data provided by the user

   The following personal data are processed for the free Newsletter service:

• First name (mandatory)

• Last name (mandatory)

• Diocese of origin (optional)

• City (optional)

• Phone/mobile number (optional)

• Email address (mandatory)

• Name and surname of the parent/legal guardian for subscriptions of minors under 14 (mandatory in such cases)

These data are processed solely to provide the Newsletter service and manage related institutional communications regarding WCD.

2. Technical data collected automatically

   Visiting the website dedicated to the WCD Newsletter may result in automatic collection of certain technical data (e.g., IP address, log data, browser and device information) as well as the use of cookies and similar technologies.

   Such processing is fully described in the site’s Cookie Policy, available to users via a banner and permanent footer link.

The Newsletter platform automatically records technical events necessary for service operation, including:

• Opening of the Newsletter

• Links clicked by the user

• Date and time of interactions

• IP address and technical information about the browser/device used

Collecting these data ensures efficient communication management, technical operation of the service, and compliance with requests for deletion or withdrawal of consent.

LOCATION OF DATA PROCESSING

Data processing related to the Newsletter service is carried out by Be Human at its premises and with the support of third parties appointed as Data Processors under Article 28 GDPR for hosting, maintenance, and technical management.

Processing is primarily performed within the EU.

The updated list of Data Processors is available upon request. The Newsletter is distributed via email automatically and free of charge through a professional platform managed by the Data Processor.

Personal data are processed using IT tools solely for providing the requested service and are retained only while the Newsletter is active, unless consent is withdrawn.

LEGAL BASIS AND PURPOSE OF PROCESSING

The purpose of processing is to provide the free “Newsletter” service for World Children’s Day (WCD), sending users news, updates, and communications regarding the organization, events, initiatives, and activities promoted by Be Human.

The legal basis for processing is the data subject’s consent (Art. 6(1)(a) GDPR).

Providing data is optional; however, without consent, the Newsletter cannot be sent, without affecting other services offered by Be Human.

Consent may be revoked at any time by sending a request to: [-]. Revocation does not affect the lawfulness of processing before withdrawal.

PROCESSING METHODS AND SECURITY MEASURES

Personal data are processed manually, electronically, and online according to principles of lawfulness, fairness, and transparency, with technical and organizational measures to ensure data security, prevent loss, unauthorized access, or misuse (Articles 24, 25, 32 GDPR).

RETENTION PERIOD

Personal data will be kept only as long as necessary to provide the Newsletter service or until consent is revoked. Afterward, data will be deleted or anonymized within a maximum of 12 months, unless legal obligations or the Controller’s rights require longer retention.

DATA SHARING AND TRANSFER

Data may only be shared with:

• Be Human personnel and collaborators authorized for processing

• IT or communication service providers appointed as Data Processors under Article 28 GDPR

• Public authorities as required by law

Data are not disseminated or transferred outside the EU unless via compliant platforms with adequate safeguards.

DATA SUBJECT RIGHTS

Users may exercise their rights under Articles 15–22 GDPR, including: access, rectification, deletion, restriction, objection, portability, and withdrawal of consent.

Complaints may be filed with the competent supervisory authority (for Italy, the Garante Privacy, www.garanteprivacy.it) or judicial authorities pursuant to Art. 79 GDPR.

PROTECTION OF MINORS

Minors under 14 may subscribe only through a parent/legal guardian. Be Human ensures parental consent verification in accordance with Art. 8 GDPR. Data are treated with particular care.

CHANGES TO THIS NOTICE

Be Human may update this notice at any time; changes will be published in the same website section and users are encouraged to check periodically.

Notice updated on 19/11/2025