Privacy Notice
E4Impact B2B Platform Privacy Notice PRIVACY NOTICE UNDER ART. 13 REGULATION (EU) 679/2016 (GDPR)
E4Impact Foundation Impresa sociale (hereinafter, “Foundation” or “Data Controller”), within the framework of the use of the digital B2B platform (hereinafter, “Platform”), processes your data. Below, you can find the most relevant information related to your data processing, under art. 13, Regulation (EU) 2016/679 (hereinafter, “GDPR”)
1. Data Controller
The Data Controller is the Foundation, with a registered office in Milano, Galleria de Cristoforis n. 8, in the person of its legal representative Mr. Molteni Mario Marco. You can reach out to the Data Controller through e-mail: info@e4impact.org.
2. Types of data processed
The Data Controller processes the following categories of personal data relating to you: common personal data: (1) personal data, such as name and surname; (2) contact data, such as telephone number and e-mail address; (3) your role within the organization that intends to use the services of the Platform; (4) information regarding the organization and the services that are meant to be received through the Platform.
3. Purposes and legal bases of the processing activities
The Data Controller processes your data to enable your organization to benefit from the services provided by the Platform (hereinafter, “service provision”). The legal basis for this kind of processing activities can be found in Article 6 (1) (b) GDPR: fulfillment of an agreement between the Data Controller and the Data Subject. Moreover, only with your consent, the Foundation may use certain information provided by you (e.g. email address) to share news, sponsor events and send the newsletter of the Foundation (all together understood as “promotional activities”). In this case, the legal basis for the processing can be found in Article 6(1)(a) GDPR: Data Subject’s consent to the processing.
4. Kinds of personal data provisions
The provision of your data for service provision is mandatory. Without it, you will not be able to register on the Platform and use the services offered by it. On the contrary, the provision of data for promotional activities is optional. Failing this, it will still be possible for you to benefit from the services of the Platform in which you will still be registered. Failure to provide the data will prevent the Data Controller from using it for the management of promotional activities.
5. Modes of processing
Data processing is carried out by professionals duly trained in the processing of personal data. The data shall be stored and kept in electronic mode and shall be processed in full compliance with the principles of correctness, security and lawfulness of the processing. Within this framework, the Foundation ensures that all necessary technical or organizational measures have been taken to guarantee a level of security appropriate to the risk in accordance with Article 32 GDPR. E4Impact B2B Platform Privacy Notice
6. Data retention
The Data Controller retains your data just for a period of time which is deemed to be necessary to achieve the purposes set and, in any case, in compliance with the relevant legal provisions.
7. Data Subjects’ rights
By art. 13 GDPR, you may – at any time and free of charge – exercise your rights guaranteed by Articles 15 et seq. GDPR. Specifically, you may exercise: 1. right of access, Art. 15 GDPR; 2. right of rectification, Art. 16 GDPR; 3. right to erasure, Art. 17 GDPR; 4. right to restriction of processing, Art. 18 GDPR; 5. right to data portability, Art. 20 GDPR; 6. right to object, Art. 21 GDPR; 7. right not to be subjected to a decision based solely on automated processing of data concerning you, Art. 22 GDPR). Furthermore, it is your right to withdraw – at any time and free of charge – the consent you have given to the processing of your data. Revocation of consent shall not affect the lawfulness of the processing based on the consent before revocation. The rights above may be exercised by making a request to the Data Controller at the mentioned addresses with no formalities. Finally, you may file a complaint to the Data Protection Authority.
1. Data Controller
The Data Controller is the Foundation, with a registered office in Milano, Galleria de Cristoforis n. 8, in the person of its legal representative Mr. Molteni Mario Marco. You can reach out to the Data Controller through e-mail: info@e4impact.org.
2. Types of data processed
The Data Controller processes the following categories of personal data relating to you: common personal data: (1) personal data, such as name and surname; (2) contact data, such as telephone number and e-mail address; (3) your role within the organization that intends to use the services of the Platform; (4) information regarding the organization and the services that are meant to be received through the Platform.
3. Purposes and legal bases of the processing activities
The Data Controller processes your data to enable your organization to benefit from the services provided by the Platform (hereinafter, “service provision”). The legal basis for this kind of processing activities can be found in Article 6 (1) (b) GDPR: fulfillment of an agreement between the Data Controller and the Data Subject. Moreover, only with your consent, the Foundation may use certain information provided by you (e.g. email address) to share news, sponsor events and send the newsletter of the Foundation (all together understood as “promotional activities”). In this case, the legal basis for the processing can be found in Article 6(1)(a) GDPR: Data Subject’s consent to the processing.
4. Kinds of personal data provisions
The provision of your data for service provision is mandatory. Without it, you will not be able to register on the Platform and use the services offered by it. On the contrary, the provision of data for promotional activities is optional. Failing this, it will still be possible for you to benefit from the services of the Platform in which you will still be registered. Failure to provide the data will prevent the Data Controller from using it for the management of promotional activities.
5. Modes of processing
Data processing is carried out by professionals duly trained in the processing of personal data. The data shall be stored and kept in electronic mode and shall be processed in full compliance with the principles of correctness, security and lawfulness of the processing. Within this framework, the Foundation ensures that all necessary technical or organizational measures have been taken to guarantee a level of security appropriate to the risk in accordance with Article 32 GDPR. E4Impact B2B Platform Privacy Notice
6. Data retention
The Data Controller retains your data just for a period of time which is deemed to be necessary to achieve the purposes set and, in any case, in compliance with the relevant legal provisions.
7. Data Subjects’ rights
By art. 13 GDPR, you may – at any time and free of charge – exercise your rights guaranteed by Articles 15 et seq. GDPR. Specifically, you may exercise: 1. right of access, Art. 15 GDPR; 2. right of rectification, Art. 16 GDPR; 3. right to erasure, Art. 17 GDPR; 4. right to restriction of processing, Art. 18 GDPR; 5. right to data portability, Art. 20 GDPR; 6. right to object, Art. 21 GDPR; 7. right not to be subjected to a decision based solely on automated processing of data concerning you, Art. 22 GDPR). Furthermore, it is your right to withdraw – at any time and free of charge – the consent you have given to the processing of your data. Revocation of consent shall not affect the lawfulness of the processing based on the consent before revocation. The rights above may be exercised by making a request to the Data Controller at the mentioned addresses with no formalities. Finally, you may file a complaint to the Data Protection Authority.
