Privacy Policy GDPR
NOTICE FOR THE PROCESSING OF PERSONAL DATA PROVIDED PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679-GDPR (GENERAL DATA PROTECTION REGULATION)
Dear User,
The ASSOCIAZIONE FABBRICA INTELLIGENTE LOMBARDIA, a Partner of the I3 DeremCo Project (hereinafter “Project”), with registered office at Via Oldofredi Ercole 23, 20124 Milan, Tax Code and VAT number 08192390964 (hereinafter “Data Controller”), pursuant to EU Regulation No. 2016/679 (hereinafter “Regulation”), is required to provide you with certain information regarding the processing of personal data conducted on the website www.deremco.afil.it.
This notice applies to the website www.deremco.afil.it (hereinafter the “Website”) and not to any other third-party websites that may be accessed by users via links. It forms an integral part of the Website and the services offered therein. The notice is provided in accordance with Article 13 of the Regulation to those interacting with the Website’s online services.
Your personal data will be processed in compliance with the legislative provisions of the Regulation and the confidentiality obligations therein. The processing of your personal data will adhere to principles of fairness, lawfulness, transparency, purpose limitation, storage limitation, data minimization, accuracy, integrity, confidentiality, and accountability, as outlined in Article 5 of the Regulation.
DATA CONTROLLER AND PROCESSORS
The Data Controller is ASSOCIAZIONE FABBRICA INTELLIGENTE LOMBARDIA, as identified above. The updated list of Data Processors can be requested by emailing direzione@afil.it.
TYPES OF DATA PROCESSED
Browsing Data
The computer systems and software procedures used to operate this Website acquire certain personal data as part of their normal operations, the transmission of which is implicit in the use of Internet communication protocols. These data are not collected to be associated with identified individuals; however, by their nature, they could allow users to be identified through processing and association with data held by third parties. This category includes IP addresses or domain names of the computers used by visitors, URI (Uniform Resource Identifier) addresses of requested resources, the time of request, the method used to submit the request to the server, the size of the response file, the numerical code indicating the server response status (successful, error, etc.), and other parameters related to the user’s operating system and computing environment. Currently, web contact data are not retained for more than seven days.
Data Provided Voluntarily by the User
Contact Section
The voluntary, explicit provision of personal data required in the contact section, along with any other personal data entered in the message, will be processed exclusively for purposes strictly related to the request (e.g., responding to inquiries). Except for processing required by law, all other purposes are excluded.
Sending emails to the contact addresses listed on this Website implies the acquisition of the sender’s address and any additional personal data contained in the email, which are necessary to respond to specific requests.
Blog Sections
The voluntary, explicit provision of personal data required in the comment sections of articles published on this Website will be processed solely for the purposes of engaging users in discussions related to the Project’s topics. Except for processing required by law, all other purposes are excluded.
Newsletter Section
The voluntary, explicit provision of personal data in the Project’s “Newsletter” subscription section entails inclusion in the Project’s mailing list, allowing you to receive periodic communications regarding news, initiatives, and events related to the Project or third parties of interest. If you no longer wish to receive such communications, you can use the “unsubscribe” function at the bottom of the Newsletter emails or request the removal of your data by contacting the Data Controller.
Training Platform (Moodle Section)
To access the training section of the Project, hosted on a dedicated Moodle platform, users must complete a one-time registration. The personal data collected in this process include: Username, Password, Email Address, First Name, Last Name, City/Location and Country. These data will be processed exclusively for the purpose of granting access to the training contents, monitoring participation, and ensuring proper user authentication within the platform. No data will be shared with third parties without explicit consent, and the information will not be used for marketing purposes. The data are stored securely in compliance with the Regulation and will be retained only for as long as necessary to manage the purposes outlined above. The legal basis for processing this data is the user’s consent, obtained during the registration process. Users have the right to withdraw their consent at any time, which will not affect the lawfulness of processing based on consent before its withdrawal.
Cookies
Details on cookies used on the Website are available in the “cookie policy” at the provided link. You can always customize your cookie preferences through the cookie banner displayed upon Website access, which is also accessible from any page of the site.
PURPOSE AND LEGAL BASIS OF PROCESSING
Your personal data will be processed for the following purposes:
- Operational management and closely related purposes for accessing and operating the Website;
- Legal basis: user consent or contract execution.
- Anonymous and aggregated statistical analysis of Website usage and functionality monitoring;
- Legal basis: user consent or legitimate interest of the Data Controller.
- Compliance with legal obligations, regulations, or requests from authorities;
- Legal basis: legal obligation.
- Processing related to communication, engagement, and animation activities related to Project articles and themes;
- Legal basis: user consent.
NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL
Providing personal data is not always mandatory but may be necessary for the execution of our services.
For purposes, data provision is always optional. You may refuse to provide data or revoke consent at any time by contacting the Data Controller or using the “unsubscribe” function in the Newsletter emails. However, denial may prevent us from processing your requests, subscribing you to the Newsletter, or publishing your comments.
PROCESSING METHODS
Your personal data will be processed using paper and/or automated IT tools for the time necessary to achieve the purposes for which they were collected. Data may be retained to comply with legal obligations or for administrative purposes.
The Data Controller adopts appropriate security measures to prevent data loss, unauthorized use, or unauthorized access, as per Article 32 of Regulation (EU) 2016/679.
Your data may be accessible to authorized personnel or third parties essential for achieving the above purposes (e.g., IT professionals, legal consultants), acting as Data Processors.
The Data Controller may disclose data to judicial authorities or legal entities when required by law. These parties will process data as independent Data Controllers.
User-provided data (name/nickname and any personal data in blog comments) may be published on this Website.
No automated decision-making processes, including profiling under Article 22 of Regulation (EU) 2016/679, are applied.
DATA TRANSFER
Currently, no data processed by this Website is transferred outside the European Economic Area. If necessary, the Data Controller will ensure compliance with applicable laws and implement appropriate safeguards.
DATA SUBJECT RIGHTS
As a data subject, you may exercise the following rights under Articles 15-22 of Regulation (EU) 2016/679:
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Rights related to automated decision-making (Art. 22)
You may withdraw consent at any time, without affecting the lawfulness of prior processing.
To exercise your rights, send a registered letter to AFIL-ASSOCIAZIONE FABBRICA INTELLIGENTE LOMBARDIA at Kilometro Rosso Innovation District, Via Stezzano 87, 24126 Bergamo (BG), or email direzione@afil.it.
PRIVACY POLICY UPDATES This Privacy Policy may be updated periodically. Any significant changes will be communicated through direct messages and/or prominent notices on the Website. Users are encouraged to review this document regularly.
NOTICE FOR THE PROCESSING OF PERSONAL DATA PROVIDED PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679-GDPR (GENERAL DATA PROTECTION REGULATION)
Dear User,
The ASSOCIAZIONE FABBRICA INTELLIGENTE LOMBARDIA, a Partner of the I3 DeremCo Project (hereinafter “Project”), with registered office at Via Oldofredi Ercole 23, 20124 Milan, Tax Code and VAT number 08192390964 (hereinafter “Data Controller”), pursuant to EU Regulation No. 2016/679 (hereinafter “Regulation”), is required to provide you with certain information regarding the processing of personal data conducted on the website www.deremco.afil.it.
This notice applies to the website www.deremco.afil.it (hereinafter the “Website”) and not to any other third-party websites that may be accessed by users via links. It forms an integral part of the Website and the services offered therein. The notice is provided in accordance with Article 13 of the Regulation to those interacting with the Website’s online services.
Your personal data will be processed in compliance with the legislative provisions of the Regulation and the confidentiality obligations therein. The processing of your personal data will adhere to principles of fairness, lawfulness, transparency, purpose limitation, storage limitation, data minimization, accuracy, integrity, confidentiality, and accountability, as outlined in Article 5 of the Regulation.
DATA CONTROLLER AND PROCESSORS
The Data Controller is ASSOCIAZIONE FABBRICA INTELLIGENTE LOMBARDIA, as identified above. The updated list of Data Processors can be requested by emailing direzione@afil.it.
TYPES OF DATA PROCESSED
Browsing Data
The computer systems and software procedures used to operate this Website acquire certain personal data as part of their normal operations, the transmission of which is implicit in the use of Internet communication protocols. These data are not collected to be associated with identified individuals; however, by their nature, they could allow users to be identified through processing and association with data held by third parties. This category includes IP addresses or domain names of the computers used by visitors, URI (Uniform Resource Identifier) addresses of requested resources, the time of request, the method used to submit the request to the server, the size of the response file, the numerical code indicating the server response status (successful, error, etc.), and other parameters related to the user’s operating system and computing environment. Currently, web contact data are not retained for more than seven days.
Data Provided Voluntarily by the User
Contact Section
The voluntary, explicit provision of personal data required in the contact section, along with any other personal data entered in the message, will be processed exclusively for purposes strictly related to the request (e.g., responding to inquiries). Except for processing required by law, all other purposes are excluded.
Sending emails to the contact addresses listed on this Website implies the acquisition of the sender’s address and any additional personal data contained in the email, which are necessary to respond to specific requests.
Blog Sections
The voluntary, explicit provision of personal data required in the comment sections of articles published on this Website will be processed solely for the purposes of engaging users in discussions related to the Project’s topics. Except for processing required by law, all other purposes are excluded.
Newsletter Section
The voluntary, explicit provision of personal data in the Project’s “Newsletter” subscription section entails inclusion in the Project’s mailing list, allowing you to receive periodic communications regarding news, initiatives, and events related to the Project or third parties of interest. If you no longer wish to receive such communications, you can use the “unsubscribe” function at the bottom of the Newsletter emails or request the removal of your data by contacting the Data Controller.
Training Platform (Moodle Section)
To access the training section of the Project, hosted on a dedicated Moodle platform, users must complete a one-time registration. The personal data collected in this process include: Username, Password, Email Address, First Name, Last Name, City/Location and Country. These data will be processed exclusively for the purpose of granting access to the training contents, monitoring participation, and ensuring proper user authentication within the platform. No data will be shared with third parties without explicit consent, and the information will not be used for marketing purposes. The data are stored securely in compliance with the Regulation and will be retained only for as long as necessary to manage the purposes outlined above. The legal basis for processing this data is the user’s consent, obtained during the registration process. Users have the right to withdraw their consent at any time, which will not affect the lawfulness of processing based on consent before its withdrawal.
Cookies
Details on cookies used on the Website are available in the “cookie policy” at the provided link. You can always customize your cookie preferences through the cookie banner displayed upon Website access, which is also accessible from any page of the site.
PURPOSE AND LEGAL BASIS OF PROCESSING
Your personal data will be processed for the following purposes:
- Operational management and closely related purposes for accessing and operating the Website;
- Legal basis: user consent or contract execution.
- Anonymous and aggregated statistical analysis of Website usage and functionality monitoring;
- Legal basis: user consent or legitimate interest of the Data Controller.
- Compliance with legal obligations, regulations, or requests from authorities;
- Legal basis: legal obligation.
- Processing related to communication, engagement, and animation activities related to Project articles and themes;
- Legal basis: user consent.
NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL
Providing personal data is not always mandatory but may be necessary for the execution of our services.
For purposes, data provision is always optional. You may refuse to provide data or revoke consent at any time by contacting the Data Controller or using the “unsubscribe” function in the Newsletter emails. However, denial may prevent us from processing your requests, subscribing you to the Newsletter, or publishing your comments.
PROCESSING METHODS
Your personal data will be processed using paper and/or automated IT tools for the time necessary to achieve the purposes for which they were collected. Data may be retained to comply with legal obligations or for administrative purposes.
The Data Controller adopts appropriate security measures to prevent data loss, unauthorized use, or unauthorized access, as per Article 32 of Regulation (EU) 2016/679.
Your data may be accessible to authorized personnel or third parties essential for achieving the above purposes (e.g., IT professionals, legal consultants), acting as Data Processors.
The Data Controller may disclose data to judicial authorities or legal entities when required by law. These parties will process data as independent Data Controllers.
User-provided data (name/nickname and any personal data in blog comments) may be published on this Website.
No automated decision-making processes, including profiling under Article 22 of Regulation (EU) 2016/679, are applied.
DATA TRANSFER
Currently, no data processed by this Website is transferred outside the European Economic Area. If necessary, the Data Controller will ensure compliance with applicable laws and implement appropriate safeguards.
DATA SUBJECT RIGHTS
As a data subject, you may exercise the following rights under Articles 15-22 of Regulation (EU) 2016/679:
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Rights related to automated decision-making (Art. 22)
You may withdraw consent at any time, without affecting the lawfulness of prior processing.
To exercise your rights, send a registered letter to AFIL-ASSOCIAZIONE FABBRICA INTELLIGENTE LOMBARDIA at Kilometro Rosso Innovation District, Via Stezzano 87, 24126 Bergamo (BG), or email direzione@afil.it.
PRIVACY POLICY UPDATES This Privacy Policy may be updated periodically. Any significant changes will be communicated through direct messages and/or prominent notices on the Website. Users are encouraged to review this document regularly.