With this information notice, we wish to provide information regarding the collection of personal data relating to:

  • use of the Nando and Elsa Peretti Foundation websites (, and;
  • use of the "Contact us" system;
  • use of the online application system (OAS) should you submit a project proposal;
  • cookie policy.

In order to ensure complete understanding, intelligibility and use of the information we provide, it will be divided and detailed according to the service to which it refers.

  1. Information regarding websites, Data Controllers and Data Protection Officers
    Below we will inform you regarding the collection of personal data during use of the websites. Personal data are all data which can be traced back to you, such as name, address, e-mail addresses or your user behaviour on websites.
    The Nando and Elsa Peretti Foundation (NaEPF), Äulestrasse 5, 9490 Vaduz is the controller of the processing of personal data and responsible for data protection (Data Controller).

    1.1. Collection of personal data for the use of our websites

    For the purely informational use of the website (i.e. if you do not log in or register to use the website, or otherwise transfer information to us), we collect no personal data, with the exception of the data transferred by your browser which allow you to visit the website. These data include:

    • Date and time of the query
    • Time zone difference to Greenwich Mean Time (GMT)
    • Content of the request (specific page
    • Access status/HTTP status code
    • The quantity of data transferred each time
    • Website from which the request originated
    • Browser
    • Operating system and its interface
    • Language and version of the browser software

    1.2. Information regarding the use of the “contact us” system

    We process the personal data you provide:

    • Full name
    • Email address

    to receive information requests from the contact form present in the "Contact us" page.

  2. Information regarding Online Application System (OAS)

    Below we inform you regarding the collection of personal data during your use of our OAS.
    To apply and submit a project proposal you need to register and then follow the online application procedure.
    Personal data are all data which can be traced back to you, such as name, address, e-mail addresses etc.

    2.1. Information regarding the purpose of the processing of personal data for the use of our OAS

    For the purpose of the application procedure, we process the following personal data that you provide:

    • Organization's info
      • Organization
      • Acronym
      • Legal status
      • Address
      • Correspondence Address
      • Registered in
      • Tax code
      • Founded
      • Active since
      • Number of staff
      • Number of volunteers
      • Telephone
      • Fax
      • E-mail
      • Homepage

    • Parent Organization
      • Legal Representative of the organization
      • Title
      • Name
      • Last Name
      • Position
      • Birth Place
      • Birth date
      • Residence
      • Tax code

    • Contact person
      • Title
      • Name
      • Last Name
      • Position
      • E-mail
      • Address
      • Phone
      • Fax

    • Bank details
      • Name of the Bank
      • Address of the Bank
      • Account number
      • Account holder
      • SWIFT code
      • IBAN code

    • Other information
      • Applied to the NaEPF in the past?
      • Usual sources of financing for the organization
      • How did you learn about the NaEPF?
      • IP-address

  3. Method, location and logic of processing

    The data are collected and registered lawfully and fairly, for the purposes indicated above, in compliance with the principles and provisions in article 5, paragraph 1 of the GDPR.

    The processing of personal data is done through computer, telecommunication and manual devices within a logic strictly related to the purposes of the processing and, in any case, always guaranteeing their safety and in compliance with article 5 paragraph 1 of GDPR.

    The Controller shall guarantee that the data which, if applicable after their review, result exceeding or not relevant to the purpose for which they are collected and processed will not be used except, in case conservation of the relevant document is necessary to fulfil legal obligations of the Data Controller.

    Processing operations connected to the web services of this website take place in Italy

  4. Communication

    We do not disclose your personal data with any third parties other than with the officers of the two affiliated Foundations, the Nando and Elsa Foundation Delegatiò a Catalunya (Barcelona, Spain) and/or the Fondazione Nando ed Elsa Peretti (Rome, Italy).

  5. Duration of storage

    As a rule, we store your personal data only as long as required for the purposes for which they were collected in accordance with this data protection declaration. However, it may occur that we are legally obliged to store certain data for a longer period. In this case, we will ensure that your personal data are treated in accordance with this data protection declaration for the entire period

  6. Data security

    We maintain up-to-date technical measures for providing data security, in particular for the protection of your personal data from the risks during data transferral and to prevent third parties from obtaining knowledge of such data. These are regularly updated in order to comply with state-of-the-art standards.

  7. Cookie policy

    Our website uses so-called cookies. These are small text files which are stored on your terminal with the aid of your browser. The cookies do not cause any damage.
    We only use them to make our service more user-friendly. Some cookies remain stored on your terminal until you delete them. They allow your browser to be recognised at the next visit.
    If you do not want this, you can set up your browser so that it informs you of the placement of cookies and allows you to accept them on a case-by-case basis. However, please note that in this case you may not be able to use the full functionality of this website.

    To give you the best experience on the cookie management side, we classify cookies of this website in two categories: essential and non essential.

    You can enable and disable cookies that are classified as non essential here

    • Essential Cookies - The site owner has indicated that these are essential to the running of the site.
      • Cookie Guard
        This cookie is essential for storing the status of your cookie choices whilst using this site.
      • PHP Session
        This cookie is used to track important logical information for the smooth operation of the site.
      • Technical Cookies
        These cookies are used to track important logical information for the smooth operation of the site.
      • Google Captcha
        This cookie is needed for our contact form.
    • Non-Essential Cookies - The site owner has approved these cookies but you may turn them off.
      • Google Analytics
        These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. Google Analytics, a web analytics service provided by Google, Inc. ("Google"), uses cookies to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
  8. Changes

    We regularly revise our data protection declaration as part of the continuing technical development of our services and the legal framework. Changes to the data protection declaration are published on our website. Therefore, please read the current version of the data protection declaration regularly at

    Subject to the applicable legal provisions, all changes to the data protection declaration come into effect as soon as the updated data protection declaration is published. If we have already recorded data from you and/or are subject to a legal duty to provide information, we will also inform you regarding significant changes to our data protection declaration and will request your consent if this is required by law.

  9. Rights of the data subjects

    In accordance with the limits and conditions established by the regulations on personal data protection regarding the exercise of the rights of the data subjects in respect to the processing of the personal data covered by this Information notice you as Data Subject have the following rights:

    • right of access;
    • right to rectification;
    • right to revoke consent;
    • right to erasure;
    • right to restriction of processing:
    • right to data portability;
    • right to object.

    The above rights may be exercised as provided by EU Regulation 2016/679 articles 12-23.
    The exercise of your right as data subject is free of charge and can be done without formalities in order to:

    • obtain confirmation of the processing carried out by the Company;
    • access your personal data and know its origins (when the data was not directly obtained by you), the purposes and the objectives of the processing, information on the parties to whom they are communicated, how long they will be stored or the criteria used to determine this;
    • update or amend your personal information so that it is always precise and accurate;
    • revoke consent at any time, in cases where this constitutes the basis of processing without prejudice to the lawfulness of the processing based on consent before revocation;
    • obtain the deletion of your personal data present in our databases and/or archives including back-up ones in certain circumstances if they are no longer relevant for the purposes of the processing or if this is assumed to be illicit, and always when there are the conditions under the law and in any case if the processing is not justified by a legitimate reason;
    • limit the processing of your personal data under certain circumstances, for example in cases where you have complained about their preciseness for the timeframe necessary for the Company to verify the complaint. In this respect, you will also be informed, within a reasonable timeframe when the restriction period has expired or the cause of the restriction of the processing is not applicable any more and thus the restriction itself has been cancelled;
    • obtain the transfer of your data, if their processing occurs on the basis of a contract and with automated devices, in electronic format also for the purpose of transferring them to another data controller (data portability).

    N.B. In the summary description of your personal rights mentioned above, we invite you to pay particular attention to the right to object to the processing which, according to GDPR must be explicitly brought to the attention of the Data Subject, also separately from the information notice. Therefore, we remind you that you have:

    • the right to object (article 21 of the GDPR) for reasons related to your particular situation, to the processing of your personal data, according to article 6, paragraph 1, letter e) or f) of the GDPR, based on the condition of the lawfulness of the processing in the public interest or connected to the exercise of public power which the Data Controller is bound by and, when necessary, for the pursuit of the legitimate interest of the Data Controller or of third parties, on the condition that other prevailing interests or rights and fundamental freedoms of the data subject require the protection of personal information.

    The Company will proceed to process your request without delay and, at the latest, within a month from the receipt of your request. The term may be extended to two months if necessary, due to the complexity and the number of requests received.

    In such cases, within a month of receiving your request, the Company will inform you of the reasons for the delay.

    It is necessary to note that if your requests are manifestly unfounded or excessive, in particular for their repetitive nature, the Company as Data Controller can:

    • debit a reasonable fee, keeping in mind administrative costs sustained in supplying requested information and documentation;
    • refuse to fulfill the request.

    Pursuant to article 77 of GDPR, without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes GDPR norms.

    If you wish to exercise the above rights, please contact us by e-mail at

  10. Appendix examples of other specifications

    With reference to Deutsche Gesellschaft für Datenschutz GmbH (German Association for Data Protection)

    The data controller collects and processes the personal data of applicants for the purpose of the application procedure. The processing may also occur electronically. This is especially the case if an applicant has transferred relevant application documents to the data controller electronically, for example by e-mail or via a web form located on the website. If the data controller enters into a Grant Agreement with an applicant, the data transferred will be stored for the purpose of executing the Grant Agreement, having regard to legal provisions. If the data controller does not enter into a Grant Agreement with the applicant, the application documents will be erased two months following notification of the rejection decision, provided no other legitimate interests of the data controller prevent erasure. For the purposes of this provision, other legitimate interests may be, for example, a burden of proof in a procedure pursuant to the German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz - AGG).

think global, act local
you are here: Home