PRIVACY AND COOKIE POLICY
This policy also applies as information – pursuant to art. 13 of Regulation (EU) no. 2016/679 (hereinafter the “ GDPR ”) – rendered to those who interact with the Site (hereinafter the ’ “ User ”).
This information is aimed at defining the limits and methods of processing the personal data of each service, on the basis of which the User can freely express his consent, where necessary, and possibly authorize the collection of data and their subsequent processing.
Data controller.
The Data Controller, pursuant to art. 4 and 24 of Reg. EU 2016/679 is:
ESG.academy Srl, Via Lambro, 4 – 20129 Milan, P. VAT 11759270967.
To contact the Owner: info@esgacademy.it
Types of data processed.
Through the Site, the following can be collected and processed:
- browsing data collected automatically through this website, also from third party applications integrated into this website.
- personal data voluntarily provided by the User through the contacts on the Site (name; e-mail; address; surname; gender; date of birth; username; password; profession; sector of activity).
- personal data voluntarily provided by the User for registration to the newsletter (name; surname; e-mail). By registering with the mailing list or newsletter, the User's e-mail address is included in a list of contacts to which e-mail messages containing information may be transmitted, also of a commercial and promotional nature, relating to this Website.
Purpose and legal basis of the treatment.
The personal data collected through the Site will be processed:
- Management of requests for information sent by the User.
Legal basis: execution of a contract of which the interested party is a part or in the execution of pre-contractual measures adopted at the request of the same, pursuant to art. 6, par. 1, lett. b) of the GDPR.
- Sending of communications via email following the subscription to the newsletter and marketing, by way of example, sending promotional and commercial communications relating to services / products similar to those which it has already used as reporting corporate events or webinars or whitepapers or subscribing to newsletters.
Legal basis for processing: consent. the processing of personal data for this purpose requires the User's consent pursuant to art. 6, par. 1, lett. a) of the GDPR.
- Defense in court: the User's personal data may be used by the Owner in court or in the preparatory stages for its possible establishment for the defense against abuse in the use of this Website or related Services by the User. The User declares to be aware that the Data Controller may be obliged to disclose the Data by order of public authorities.
Legal basis: legitimate interest of the Owner pursuant to art. 6, par. 1, lett. f) of the GDPR.
- System log and maintenance. For needs related to operation and maintenance, this Website and any third party services it uses may collect system logs, i.e. files that record interactions and that may also contain personal data, such as the User IP address.
Legal basis: legitimate interest of the Owner pursuant to art. 6, par. 1, lett. f) of the GDPR.
- Fulfill obligations under regulations and applicable national and supranational legislation.
Legal basis: fulfill legal obligations, pursuant to art. 6, par. 1, lett. c) of the GDPR.
Provision of data and consequences in case of non-transfer
The provision of personal data for the purposes that provide for consent is optional and failure to provide it will result, as a single consequence, the impossibility for the Owner to manage and process the requests of the interested party or to send commercial communications on products and services of the same.
Recipients or categories of recipientsthe
Personal data may be made accessible, brought to the attention of, or communicated to, following subjects, who will be appointed by – as appropriate, as managers or agents:
- companies of the group to which the Owner belongs (controlled, associated), employees and / or collaborators for any title of the Owner and / or companies of the group to which the Owner belongs;
- public or private entities, natural or legal persons, which the Data Controller makes use of for the performance of activities instrumental to the achievement of the aforementioned purpose or to which the Data Controller is required to communicate personal data, under legal or contractual obligations.
In any case, personal data will not be disclosed.
Retention period
The data being processed will be kept for a period for a period of time not exceeding that necessary to achieve the purposes for which they were collected or subsequently processed and, in particular:
- the data provided by sending e-mail messages or filling in the contact forms on the site will be kept for the necessary time;
- the data provided for the purpose of registering for the newsletter service will be processed until the interested party exercises the right of opposition ex 21 of the GDPR;
- the data provided for contractual purposes and legal obligations: for the entire contractual duration and, after termination, for 10 years.
Transfer to third countries on the basis of standard contractual clauses
the Data Controller can transfer the Personal Data collected within the EU to third countries (i.e., all countries outside the EU) only in accordance with a specific legal basis. Therefore, these data transfers are performed according to one of the legal bases described above.
The transfer of Personal Data from the EU to third countries takes place on the basis of standard personal data protection clauses adopted by the European Commission.
In such cases, the recipients of the Data have agreed to process Personal Data in accordance with the levels of protection provided for by the legislation. Users can request further information by contacting the Owner at the details indicated in this document.
Personal Data processed: e-mail
Automated process
We do not use decision-making processes based on automatic processing, including profiling.
Information not contained in this policy
Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.
Access rights, cancellation, limitation and portability
The rights referred to in articles 15 to 20 of the GDPR. By way of example, each interested party may:
- obtain confirmation that personal data concerning him or her is being processed;
- if a processing is in progress, obtain access to personal data and information relating to the processing as well as request a copy of personal data;
- obtain the correction of inaccurate personal data and the integration of incomplete personal data;
- obtain, if one of the conditions set out in art. 17 of the GDPR, the cancellation of personal data concerning him;
- obtain, in the cases provided for by art. 18 of the GDPR, the limitation of treatment;
- receive personal data concerning him in a structured format, commonly used and readable by an automatic device and request their transmission to another owner, if technically feasible.
Right to object
Each interested party has the right to object at any time to the processing of his personal data carried out for the pursuit of a legitimate interest of the Data Controllers. In the event of opposition, your personal data will no longer be processed, provided that there are no legitimate reasons to proceed with the processing that prevail over the interests, on the rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court.
Right to object and withdraw consent in relation to the processing carried out for marketing purposes
With reference to the processing of personal data for the purpose under b), each interested party may revoke any consent given or oppose their treatment at any time, by writing an e-mail to the address info@esgacademy.it. The opposition to the treatment exercised through these methods also extends to the sending of commercial communications by means of the postal service or telephone calls with operator, without prejudice to the possibility of exercising this right in part, for example by opposing only the processing carried out using automated communication systems.
Right to withdraw consent
In the event that consent is required for the processing of personal data, each interested party may also revoke the consent already given at any time, without prejudice to the lawfulness of the treatment based on the consent given before the revocation. Consent can be revoked by writing an email to info@esgacademy.it.
Right to lodge a complaint with the Guarantor
In addition, each interested party may lodge a complaint with the Guarantor for the Protection of Personal Data in the event that he believes that the rights he owns pursuant to the GDPR have been violated, in the manner indicated on the Guarantor's website accessible at: www.garanteprivacy.it
COOKIES
I cookie they are information contained in small text files that the sites visited by Users send from their devices, where they are stored and then retransmitted to the same sites on subsequent visits. Usually, these small strings of text are stored in users' browsers with the aim of being then retransmitted to the site during subsequent visits.
COOKIES TECHNICAL
They are used for the sole purpose of transmitting a communication over an electronic communications network, or to the extent strictly necessary for the provider of an information society service, explicitly requested by the subscriber or user, to provide this service. Technical cookies can be further distinguished in:
- Cookie navigation
They are the ones who allow the site to function properly, allowing navigation and the provision of services requested by the user. They are temporary and are canceled at the end of the duration period. Without the use of this type of cookie, some operations would be less secure or more complex and, in some cases, they could not really be performed. Consent is NOT required.
- Cookie functional
They are those that allow the site, based on the user's indications, to store some of the navigation information carried out by the same, in order to be reused in subsequent navigation, improving the service offered and the quality of navigation. Consent is NOT necessary.
- Cookie analytical
They are used for collect information, in aggregate form, in order to conduct statistical analysis of how the site is navigated. They are anonymous data, usually used to improve the functionality of the site by collecting the data of the user who uses it. If they process data anonymously and in aggregate form Consent is NOT required.
- Cookie of profiling
These, however, are used for track users' browsing habits with the aim of creating profiles of their tastes, their habits, the choices made or other information. The purpose is to send targeted advertising messages to the profiled user, in line with the preferences expressed by the same while browsing. Consent is required.
THIRD PARTY COOKIES
Listed below are the third-party cookies installed on the Site. For each of them, the link to the related information on the processing of personal data and on the methods for any deactivation of the cookies used is reported. With regard to third-party cookies, the Owner has only the obligation to insert the link to the third-party website in this policy. Instead, the obligation of the information and the indication of the methods for the possible consent and / or deactivation of cookies is borne by this person.
ANALYTICAL COOKIES
The Site uses Google Analytics, a traffic analysis service web provided by Google, Inc. which employs gods cookie to analyze the behavior of use of the Site. For the use of these cookie measures have been adopted that reduce their identification power. Therefore, i cookie of Google Analytics can be assimilated to the technical ones and their use does not require the user's consent.
For more information on the Google Analytics privacy policy, www.google.com/analytics/terms/it.html is www.google.it/policies/privacy/partners/.
Cookies can be disabled by the user checking and / or changing browser settings based on the instructions made available by the relevant suppliers to the links listed below:
Our system makes use of the collaboration of third parties for the completion of the newsletter activity.
MAILCHIMP (THE ROCKET SCIENCE GROUP, LLC.) Mailchimp is an email address management and sending service provided by The Rocket Science Group LLC.
Personal Data processed: e-mail. Place of treatment: USA – https://mailchimp.com/legal/privacy/
Updates
This Privacy and Cookie Policy has been updated to September 13, 2021.