Notice on the processing of personal data

1. Identity and contact details of the Data Controller

The Data Controller is Innovhub - Stazioni Sperimentali per l’Industria S.r.l., a limited liability company fully owned by the Chamber of Commerce of Milan, Monza-Brianza, Lodi (hereinafter “Innovhub" or “Controller”), with registered office in Milan, via Meravigli 9/b, postcode 20123, certified email address: innovhub_ssi@legalmail.it.

2. Purposes and legal basis for processing

The personal data provided or collected while browsing the Website and/or accessing certain sections of it are processed for the following purposes:

• performance of a contract or pre-contractual measures requested by the interested party:

1. allow browsing on the Website;
2. manage the requests sent to contact e-mail addresses on the Website or through the contact form;

• fulfilment of legal obligations:

3. comply with national and European regulatory obligations including those imposed by Government Authorities in charge of particular matters (e.g. fiscal obligations);

• with the consent of the interested party:

4. use third-parties' analytical and profiling cookies;
5. send information and promotional messages by e-mail, telephone, texting or instant messaging.

3. Types of data processed

Navigation data
When connecting to the Website, the IT systems and the software procedures that allow them to function, automatically and indirectly provide and/or acquire certain information whose transmission is inherently connected to the use of Internet communication protocols. This data category includes IP addresses or domain names of computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) addresses of requested resources, the time of each request, the method used to transmit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response received from the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment. These data, which are necessary to use web services, are also processed for the purpose of:

• collecting statistical information on the use of services (most visited pages, number of visitors by time or day, geographical areas of origin, etc.);
• checking the performance of the web services offered.

Data provided by the user
The optional, explicit and voluntary transmission of messages to contact addresses and the compilation and transmission of forms on the Website involve the acquisition of the sender's contact data needed to reply as well as of all personal data contained in the text.

Cookies and other tracking systems
Cookies are small texts strings that are sent by a server (the Website service in this case) to the user's device (normally an Internet browser) when the user accesses a given page of a website. They are automatically stored by the browser and retransmitted to the server which generated them each time the user accesses the same web page.

Following technical cookies are necessary for the proper performance of the Website:

First party cookies

Youtube-NoCookie - third party cookie

The enhanced privacy mode allows you to embed YouTube videos without using cookies to monitor viewing behavior. Therefore, no activity will be collected to personalize the viewing experience. The recommended videos will instead be linked to the context and to the video currently being viewed. Videos playing in the enhanced privacy mode will not affect the viewer's browsing experience on YouTube.

Click here for more details by Google

Anonymized Google Coookies - Third party cookie

Google related page

The user can choose to enable or disable cookies by selecting the desired setting in the navigation browser according to the instructions provided by the software supplier (see links below):

• Chrome
• Firefox
• Safari
• Internet Explorer
• Opera

Anonymous browsing mode, if available, prevents the browser from saving cookies and navigation data.

4. Provision of data

The provision of navigation data and the use of technical cookies are not subject to the user's consent, as both are necessary for the proper performance of the Website.

The provision of data during the compilation of the contact form is mandatory for the fields marked with an asterisk (*) and optional for the other fields. Failure to provide the mandatory data blocks the submission of the form.

5. Recipients of data

Personal data are processed by authorized personnel who operate under the direct authority of the Controller. Navigation and registration data may be processed by external parties who operate as Data Processors or as independent Data Controllers. The data may be disclosed to any competent law enforcement body upon their request for any investigative needs and crime detection purposes.

6. Retention time

Navigation data do not persist after the end of the browsing session. The duration of cookies is indicated in Par. 3. The data processed with the consent of the interested party will be kept until the consent to the processing is revoked, which can be done at any time. Direct marketing activity will continue for a maximum period of twenty-four months from the last commercial contact with the customer, except in case of opposition to the processing, which can be expressed at any time. In the case of particular legal obligations, the processing of information will continue in accordance with current legislation.

7. User rights

The interested party is guaranteed the exercise of the rights recognized by Art. 12 et seq. of the GDPR. In particular, they are granted the right to:

• access their personal data;
• request the rectification of inaccurate personal data;
• request the deletion of personal data;
• obtain the restriction of the processing;
• oppose the processing;
• request the portability of personal data;
• revoke the consent to the processing, with no consequences on the lawfulness of any processing conducted prior to the withdrawal;
• make a compliant to the Authority responsible for personal data protection according to the procedure set out on the Authority's website: www.garanteprivacy.it.

For the exercise of the aforementioned rights, the interested party can contact the Data Controller (see above indications).