Privacy Policy
Pursuant to Art. 13 & 14 GDPR (Reg. EU 2016/679) & D.Lgs. 196/2003 as amended by D.Lgs. 101/2018.
Last updated: July 2026
1. Data Controller (Titolare del Trattamento)
FONDAZIONE TERRA HUMANA – per la Rinaturazione e Riumanizzazione globale ETS
- Registered address: Loc. Sa Medada, SNC, 08044 Jerzu (NU), Sardinia, Italy
- Fiscal Code: 91017930917
- RUNTS Nr. 148467 (registered 18.02.2025)
- Email: info@terrahumana.ngo
- PEC: terrahumana@pec.it
- Legal representative: Dominik Ganzer (President)
2. Personal Data We Collect
| Category | Data types | Source |
|---|---|---|
| Contact data | Name, email address, message text, inquiry type | Contact form |
| Technical data | IP address (anonymised), browser type, referrer URL | Server logs (Cloudflare) |
| Donation data | Name, email address, amount, currency, selected project, receipt request, fiscal code (optional: only if an official donation receipt is requested), PayPal order & transaction ID or Mollie payment ID, full payment details (card / account data) are processed exclusively by PayPal, Mollie or Wise and never stored by us | Donation form & widget (/donate) |
| Newsletter data | Email address, first name (if provided) | Newsletter sign-up (when activated) |
| Membership application data | Full name, date & place of birth, nationality, address, contact details, profession, fiscal code or alternative ID, IBAN & SEPA mandate (if elected), digital signature, motivation text, statutory declarations | Membership form (mitgliedsantrag.html, ausserordentliche-mitgliedschaft.html) |
| Chat assistant data | Question text (processed solely to generate the answer; stored internally only as an anonymised hash), selected language, technical metadata (response time, model used) | AI chat assistant in the member portal (portal.terrahumana.ngo) |
We do not collect sensitive personal data (health, religion, ethnicity etc.) through this website.
3. Purposes, Legal Bases & Retention Periods
| Purpose | Legal basis (GDPR) | Retention |
|---|---|---|
| Responding to contact form inquiries | Art. 6(1)(b), pre-contractual / contractual necessity | 12 months |
| Donation processing & receipts (completed donations) | Art. 6(1)(b), contract; Art. 6(1)(c), legal obligation (fiscal records) | 10 years (Italian fiscal law) |
| Donation form, initiated but uncompleted donations (pending records) | Art. 6(1)(b), steps prior to entering into a contract | Automatically deleted after 48 hours if the payment is not completed |
| Newsletter communications | Art. 6(1)(a), consent (withdraw anytime) | Until withdrawal |
| Website security & fraud prevention | Art. 6(1)(f), legitimate interest | 30 days (server logs) |
| Website analytics (if consented) | Art. 6(1)(a), consent | 14 months |
| Membership applications (accepted) | Art. 6(1)(b), contract; Art. 6(1)(c): Art. 15 CTS / D.Lgs. 117/2017 (Libro degli Aderenti) | For duration of membership + 10 years after exit (fiscal & civil law) |
| Membership applications (rejected) | Art. 6(1)(f), legitimate interest (legal documentation of CdA decision) | 12 months from rejection |
| SEPA mandates & payment data | Art. 6(1)(b), contract; Art. 6(1)(c), banking & fiscal law | 10 years from last transaction |
| AI chat assistant in the member portal (answering questions from public foundation documents) | Art. 6(1)(f), legitimate interest (efficient member information) | No plain-text storage of questions; anonymised hashes & metrics 90 days; answer cache 7 days |
Signed membership applications and SEPA mandates are stored encrypted on Terra Humana's German VPS (Hetzner, EU-hosted) and mirrored to Google Drive within the EU. Deletion requests are honoured within 30 days; statutory retention obligations (10-year fiscal record) override deletion requests for accounting-relevant data, in such cases, data is restricted (Art. 18 GDPR) rather than erased.
4. Data Recipients & Processors
We share your data only where strictly necessary with the following trusted service providers, each acting as data processors (Art. 28 GDPR) or independent controllers under their own privacy policies:
Transparency on the AI chat assistant (Art. 50 EU AI Act): how the assistant works, what data it processes and where its limits are is explained in detail on our page "What is the Terra Humana Assistant?".
5. International Data Transfers
Some of our service providers are located outside the European Economic Area (EEA), particularly in the United States. Where personal data is transferred to third countries, we ensure an adequate level of protection through Standard Contractual Clauses (SCCs) approved by the European Commission (Art. 46(2)(c) GDPR) or rely on adequacy decisions where applicable. You may request a copy of the applicable safeguards by contacting us at info@terrahumana.ngo.
6. Your Rights (Art. 15–22 GDPR)
You have the following rights regarding your personal data:
- Access (Art. 15): Obtain confirmation of whether we process your data and a copy thereof.
- Rectification (Art. 16): Have inaccurate personal data corrected.
- Erasure (Art. 17): Request deletion of your data ("right to be forgotten").
- Restriction (Art. 18): Request restriction of processing in certain circumstances.
- Portability (Art. 20): Receive your data in a structured, machine-readable format.
- Objection (Art. 21): Object to processing based on legitimate interest.
- Withdrawal of consent (Art. 7(3)): Withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any right, contact us at info@terrahumana.ngo or by post to our registered address. We will respond within 30 days.
7. Right to Lodge a Complaint
If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the competent supervisory authority:
Garante per la protezione dei dati personali
Piazza Venezia, 11, 00187 Rome, Italy
8. Data Security
We implement appropriate technical and organisational measures (Art. 32 GDPR) to protect your personal data against unauthorised access, loss, or disclosure. This includes TLS/SSL encryption (HTTPS), access controls, and data minimisation practices. Our website is hosted via Cloudflare Pages with automatic DDoS protection.
9. Cookies
For detailed information on cookies used on this website, please refer to our Cookie Policy.
10. Changes to This Policy
We may update this Privacy Policy to reflect changes in our data practices or legal requirements. Material changes will be announced on this page. The date at the top of this policy indicates when it was last revised.
FONDAZIONE TERRA HUMANA ETS · CF 91017930917 · RUNTS 148467 · Last updated: July 2026