Privacy Policy

Version 1.0.3, June 2024

Pursuant to Article 13 of Regulation (EU) No. 679/2016 (“GDPR”), Bambini nel Deserto ETS (“BnD”, the “Organization” or the “Data Controller”), informs that the personal data provided (“Data”) will be processed in compliance with the provisions of the law and in accordance with the following information. This information is specifically provided regarding the processing of personal data collected through the Bambini nel Deserto website (via its domains and following the expression of interest in one or more products or services offered by the Organization.


Purpose and legal basis of processing

The Data will be processed for sending – including by e-mail through automated systems – communications containing information related to the Data Controller and the activities organized by the Data Controller (such as, for example, invitations to conferences and events in general), as well as updates and/or informational material of a professional or promotional nature, such as training sessions, informative newsletters, initiatives, presentations, insights and updates on matters related to the activities carried out by the Data Controller, including profiling activities for these purposes, in order to personalize BnD’s initiatives, taking into account the specific areas of interest indicated by the user.

The processing of Data for this purpose requires the user’s consent pursuant to Article 6, paragraph 1, letter a) of the GDPR.


Categories of Data processed

BnD will process identification and contact Data, such as name, surname, e-mail address, as well as the areas of interest indicated by the user (such as: “newsletter”), through the appropriate forms present in the “Request your TheTree” and “Newsletter” sections of the TheTree website.


Data Security

To protect the Data, BnD adopts the measures provided for by data protection regulations, aimed at preventing abuse by unauthorized third parties.

It also uses suppliers capable of guaranteeing high protection standards:


Provision of Data and consequences in case of failure to provide

The provision of Data is optional and their failure to provide will result in the impossibility for BnD to carry out activities functional to achieving the purposes in question.


Data Controller and Data Processors

The controller of personal data processing is Bambini nel Deserto ETS, with registered office at Via Casoli 45 41123 Modena (MO) Italy, e-mail

The updated list of any data processors is available at the Data Controller’s headquarters.


Recipients or categories of recipients

The Data may be made accessible, brought to the attention of or communicated to the following subjects, who will be appointed by the Data Controller, depending on the case, as data processors or authorized persons for processing, or will act as independent data controllers:

  • associations to which BnD belongs (parent companies, subsidiaries, affiliates), employees and/or collaborators in any capacity of BnD and/or associations of the group to which BnD belongs;
  • private entities, natural or legal persons, of which BnD avails itself for the performance of activities instrumental to the achievement of the aforementioned purpose or to which BnD is required to communicate the Data, by virtue of legal or contractual obligations.

In any case, the Data will not be disseminated.


Retention period

The Data will be retained for a maximum period of 24 months.


Transfer of Data to third countries

The Data will circulate within EU countries. Furthermore, BnD may transfer the Data to any controlled organizations, in accordance with Article 45 of the GDPR (adequacy decision). Should this scenario occur, this article will be updated with the addresses of the registered offices of the controlled organizations.


Rights of the data subject. Rights of access, erasure, restriction and portability

Data subjects are granted the rights set forth in Articles 15 to 20 of the GDPR. By way of example, each data subject may:

  • obtain confirmation as to whether or not personal data concerning him or her are being processed;
  • if processing is in progress, obtain access to personal data and information relating to the processing as well as request a copy of the personal data;
  • obtain the rectification of inaccurate personal data and the integration of incomplete personal data;
  • obtain, if one of the conditions set forth in Article 17 of the GDPR is met, the erasure of personal data concerning him or her;
  • obtain, in the cases provided for by Article 18 of the GDPR, the restriction of processing;
  • if the conditions set forth in Article 20 of the GDPR are met, receive the personal data concerning him or her in a structured, commonly used and machine-readable format and request their transmission to another controller, if technically feasible.

Right to object to processing carried out for legitimate interest

Each data subject has the right to object at any time to the processing of his or her personal data carried out for the pursuit of a legitimate interest of the Organization. In case of objection, his or her personal data will no longer be subject to processing, unless there are legitimate grounds for proceeding with the processing that prevail over the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.


Right to object for marketing purposes

Each data subject has the right to object at any time to the processing of his or her personal data carried out for marketing purposes, by writing an email to The objection to processing exercised through these methods also extends to the sending of commercial communications by postal service or telephone calls with an operator, without prejudice to the possibility of exercising this right in part, for example by objecting only to processing carried out through automated communication systems.


Right to withdraw consent

In the event that consent is required for the processing of personal data, each data subject may also revoke at any time the consent already given, without prejudice to the lawfulness of the processing based on the consent given before the revocation. Consent can be revoked by writing an email to


Right to lodge a complaint with the Supervisory Authority

Furthermore, each data subject may lodge a complaint with the Italian Data Protection Authority in the event that they believe that the rights of which they are the holder under the GDPR have been violated, according to the procedures indicated on the Authority’s website accessible at:


Rights of the data subject

The rights of the data subject may be exercised through the Organization’s contact details indicated above.


Cookie Policy

What are cookies

A cookie is a text file that is stored on computers, tablets, smartphones and on any device used to browse the Internet, capable of storing user navigation information. Some cookies are used to make navigation easier, and to personalize the experience on our website, allowing the recognition of users upon arrival on our pages.

The purpose of using cookies is to personalize access to the website, optimizing navigation and the functioning of the site, for the improvement of our services.

Which cookies we use

For our websites, we use proprietary technical cookies.

These cookies are essential for the proper functioning of our websites and to improve the browsing experience on the site.

They are not used for further purposes and are normally installed directly by the owner or manager of the website. They are divided into navigation or session cookies and guarantee normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access reserved areas).

For the installation of such cookies, the prior consent of users is not required, pursuant to Directive 2009/136/EC, transposed by Legislative Decree 28 May 2012 n. 69, and the provision of the Italian Data Protection Authority concerning the “Identification of simplified procedures for information and acquisition of consent for the use of cookies” of 8 May 2014, published in the Official Gazette n. 126 of 3 June 2014, as technical cookies are fundamental for the correct functioning of a website, they can be used even without the prior consent of the user, without prejudice to the obligation to provide information.

Storage and deletion of cookies

The duration of cookies varies depending on their type: session cookies expire when the browser is closed; persistent cookies have typical expiration dates that generally do not exceed 2 years.

The user can refuse the use of some cookies used by this website by selecting, on their browser, the settings that allow their rejection. Each browser (e.g. Chrome, Firefox, Safari, etc.) has specific procedures to follow to disable cookies, which can be found on the browser provider’s website.


Changes to privacy and cookie policies

Bambini nel Deserto ETS reserves the right to make changes to this privacy and cookie policy. The user agrees to be bound by such eventual and future revisions and therefore undertakes to periodically visit this page to be informed of any changes.