This notice explains which personal data the website cramasinara.org collects, why and for how long, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended. The Italian version prevails in case of doubt.
Data controller
Associazione CRAMA, Centro Recupero Animali Marini Asinara
Viale Umberto I, 86, 07100 Sassari (SS), Italy, tax code 02362390904
Email info@cramasinara.org, certified email crama@pec.it, phone +39 340 816 1772.
The association has not appointed a Data Protection Officer, as it is not required to.
What data we process and why
Contact form and email
If you write to us through the form on the Contact page or by email, we process the data you give us: first and last name, email address, phone number (optional), subject and message. We use them only to reply and to follow up on your request (for example a visit, a distance adoption, a school activity, volunteering or a report).
Legal basis: your request and the steps it requires (Art. 6(1)(b) GDPR) and the consent you give by ticking the box on the form (Art. 6(1)(a)). Without these data we cannot reply.
Retention: as long as needed to reply and follow up, and no longer than 24 months after the last contact, unless the law requires otherwise (for example records of donations).
Distance adoptions and donations
If you adopt a turtle or donate by bank transfer, we process the transfer details and the data you send us for the certificate and kit (name of the holder, shipping address, phone, T-shirt size). They are used to send the kit and to keep the association's accounts.
Legal basis: performance of your request (Art. 6(1)(b)) and accounting and tax obligations (Art. 6(1)(c)). Retention: as required by accounting and tax rules (usually 10 years).
Browsing data
The server hosting the site automatically logs, for each request, the IP address, date and time, page requested, response code and browser type. These logs keep the site running, protect it from abuse and attacks and help fix faults. Legal basis: legitimate interest in the security of the site (Art. 6(1)(f)). Retention: no more than 14 days, unless an abuse is being investigated.
Statistics and external content (only with your consent)
With the consent you give in the cookie banner, the site uses Google Analytics 4 for aggregated visit statistics, with anonymised IP addresses, and loads the Google Maps map and YouTube videos. Without consent these services are not loaded. Details are in the cookie policy. Legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time through the "Cookie preferences" link at the bottom of every page.
Who can see the data
The data are processed by the association's staff in charge of replying and of managing adoptions and donations. The following also process them on our behalf, as processors (Art. 28 GDPR):
- the company that runs the website and server (Abacus85 S.r.l.), with servers at OVH SAS in France;
- the service that sends the contact form emails (Brevo, Sendinblue SAS, France);
- the provider of the mailbox where messages arrive;
- only with your consent, Google Ireland Ltd for Analytics, Maps and YouTube.
We do not sell or pass data to third parties for commercial purposes and do not use them for profiling or marketing.
Transfers outside the European Union
Google services may involve transferring data to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, found adequate by the European Commission on 10 July 2023. These transfers only happen if you consent to statistics cookies or external content.
Your rights
You can ask us at any time to access, correct or erase your data, to restrict processing, to receive your data in a readable format (portability), and you can object to processing based on legitimate interest (Articles 15-21 GDPR). You can withdraw your consent without affecting processing carried out before. Write to info@cramasinara.org.
If you believe the processing breaks the law, you can lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your country.
Children
The site is not aimed at children under 14 and does not knowingly collect their data. School activities are arranged with teachers.
Changes
We may update this notice; the date of the last update is shown at the top. The version of 2 November 2026 replaces the former "GDPR & Cookies" page.