Last updated: 15 September 2026
1. Scope
This Privacy Policy describes how personal data are processed through the website assist.foundation, operated by Assist – Natural Health Fellowship.
The website may make its content available in more than one language directly through Assist. In the event of any interpretative discrepancy, the original English version published by Assist shall prevail.
2. Data controller
The data controller is:
Assist – Natural Health Fellowship
Private Abundance Charitable Purpose Trust
Italian tax code: 90028590066
Trustee: Silvia Isaksen
Institutional and immaterial seat:
Assist has not appointed a Data Protection Officer.
3. Categories of personal data processed
Depending on how the website is used, Assist may process:
- identification data, such as a name;
- contact data, such as an email address;
- the subject and content of enquiries;
- information provided in connection with a request for the Statute;
- technical and security data generated through access to the website.
The forms do not request special categories of personal data. Users are asked not to include unnecessary sensitive information in their messages.
4. General Enquiry Form
The General Enquiry Form collects the user’s name, email address, selected subject and message.
The available subjects are:
- General enquiry;
- Record of Facts;
- Other institutional matter.
The data are processed solely to receive, assess, manage and, where appropriate, respond to the enquiry.
The legal basis is the legitimate interest of Assist in managing institutional communications and protecting its activities, rights and documentary records, pursuant to Article 6(1)(f) of the General Data Protection Regulation.
Submission of the form does not create a contractual relationship or an obligation for Assist to respond.
The data will not be used for marketing, newsletters, profiling or promotional communications.
Enquiries are normally deleted within twelve months, unless longer retention is reasonably necessary for institutional, evidentiary, legal or security purposes.
5. Request the Statute Form
The Request the Statute Form collects the user’s name, email address and reason for the request.
The data are processed to assess the request, verify its institutional relevance, communicate with the applicant and maintain an appropriate record of any resulting disclosure.
The legal basis is the legitimate interest of Assist in controlling and documenting access to its Statute, pursuant to Article 6(1)(f) of the General Data Protection Regulation.
Submission of a request does not create an automatic right to receive the Statute. Assist may accept or refuse the request or request further information.
Information relating to requests and any resulting disclosure may be retained for up to five years, or longer where reasonably necessary for institutional, evidentiary or legal purposes.
6. Technical and security data
The hosting system and website software may automatically process technical data necessary for operation and security, including IP address, browser and device information, date and time of access, requested resources, error data and security logs.
These data are processed to provide the website, prevent abuse, identify technical problems and protect the website and its infrastructure. The legal basis is the legitimate interest of Assist in maintaining a secure and functioning institutional website.
7. Cookies and similar technologies
The website may use technical cookies required for its operation, security, session management and form functionality.
Assist does not intend to use advertising, profiling or behavioural-tracking cookies. Any optional third-party functionality will be subject to appropriate information and consent controls where required.
Further information is provided in the Cookie Policy.
8. Language versions
The website may make its content available in more than one language directly through Assist.
Language versions are provided to improve accessibility and understanding. In the event of any interpretative discrepancy, the original English version published by Assist shall prevail.
9. Recipients of personal data
Personal data may be accessed or processed, where necessary, by:
- the Trustee and persons specifically authorised by Assist;
- hosting, email, website-maintenance and technical service providers;
- professional advisers where required for legal or institutional purposes;
- public authorities or judicial bodies where disclosure is required by law or necessary for the protection of rights.
Personal data are not sold or made available for commercial use.
10. Hosting and technical infrastructure
The website and its database are hosted on infrastructure located in Italy. Form submissions may be stored within the Joomla and Convert Forms systems and transmitted to the institutional contact address by email.
Technical providers process data only to the extent necessary to provide their services and in accordance with applicable contractual and legal obligations.
11. Data retention
Personal data are retained only for as long as necessary for the purposes for which they were collected, subject to the specific periods described in this Policy.
Data may be retained for a longer period where necessary to comply with legal obligations, establish or defend rights, preserve institutional records, prevent abuse or respond to an authority.
12. International access and data transfers
The website is hosted on infrastructure located in Italy. Personal data submitted directly through the website forms are intended to be stored and processed primarily within the European Economic Area.
The website may be accessed and the forms may be submitted from any country. Access to the website by a person located outside the European Economic Area does not, by itself, constitute a transfer of personal data by Assist to a third country.
This website provides institutional information and is not specifically directed at offering goods or services in any particular non-European jurisdiction.
Optional third-party services introduced through the website may involve the processing or transfer of personal data outside the European Economic Area. Where applicable, appropriate information will be provided and safeguards required by applicable data-protection law will be adopted.
Where Assist transfers personal data to a recipient outside the European Economic Area, such transfer will be carried out in accordance with applicable data-protection law and, where required, on the basis of an adequacy decision, appropriate contractual safeguards or another legally recognised transfer mechanism.
Nothing in this Privacy Policy limits any mandatory rights granted to a data subject under the law applicable to that person.
13. Rights of data subjects
Subject to the conditions established by applicable law, a data subject may request:
- access to personal data;
- rectification of inaccurate or incomplete data;
- erasure of personal data;
- restriction of processing;
- data portability, where applicable;
- objection to processing based on legitimate interests.
Where processing is based on consent, the data subject may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
14. Complaints
A data subject may lodge a complaint with the competent data-protection supervisory authority. Persons located in Italy may contact the Garante per la protezione dei dati personali.
Persons located in another jurisdiction may also have the right to contact the supervisory or regulatory authority competent under the law applicable to them.
15. Security
Assist adopts reasonable technical and organisational measures appropriate to the nature of the website and the personal data processed. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
16. Changes to this Privacy Policy
This Privacy Policy may be updated to reflect changes in the website, its services, applicable law or technical infrastructure. The date of the latest revision will be shown at the beginning of the document.
17. Contact
Questions concerning this Privacy Policy or requests concerning personal data may be submitted through the General Enquiry Form or sent by PEC to: