top of page

Privacy Policy

A legal disclaimer

The explanations and information provided on this page are only general and high-level explanations and information on how to write your own document of a Privacy Policy. You should not rely on this article as legal advice or as recommendations regarding what you should actually do, because we cannot know in advance what are the specific privacy policies you wish to establish between your business and your customers and visitors. We recommend that you seek legal advice to help you understand and to assist you in the creation of your own Privacy Policy. 

Privacy Policy - the basics 

Having said that, a privacy policy is a statement that discloses some or all of the ways a website collects, uses, discloses, processes, and manages the data of its visitors and customers. It usually also includes a statement regarding the website’s commitment to protecting its visitors’ or customers’ privacy, and an explanation about the different mechanisms the website is implementing in order to protect privacy. 

 

Different jurisdictions have different legal obligations of what must be included in a Privacy Policy. You are responsible to make sure you are following the relevant legislation to your activities and location.

What to include in the Privacy Policy

Generally speaking, a Privacy Policy often addresses these types of issues: the types of information the website is collecting and the manner in which it collects the data; an explanation about why is the website collecting these types of information; what are the website’s practices on sharing the information with third parties; ways in which your visitors an customers can exercise their rights according to the relevant privacy legislation; the specific practices regarding minors’ data collection; and much much more. 


To learn more about this, check out our article “Creating a Privacy Policy”.

COOKIE POLICY

 

This information (hereinafter, “Cookie Policy”) governs the processing of your personal data through the use of cookies, carried out by Neuronova S.r.l., with registered office in Via Giovanni Pascoli, 60, 20133 – Milano (MI), VAT No. 13678910962, email privacy@neuronovatech.com (hereinafter, the “Controller”), in accordance with the rules on protection of personal data, in particular, the EU Regulation 2016/679 (hereinafter, “GDPR”), through the site you are browsing (hereinafter, the “Site”).

 

1. Identity and contact details of the data controller

 
The Data Controller is established in the territory of the EU, no representative has been appointed.


2. Contact details of the DPO

The Controller has not appointed a Data Protection Officer (“DPO”) pursuant to Art. 37 GDPR.


3. Processing methods


Cookie 

Cookies are small text strings that the Site you visit sends to your browser, which stores them in order to transmit them to the Site when you visit it again. 

Cookies allow us to collect information about your browsing experience. 

Cookies may be permanently stored on your computer and have a variable duration (persistent cookies), or they may not be permanently stored on your device and be automatically deleted when you close your browser (session cookies). 

Cookies may be installed by the site you are visiting or may be installed by other websites that provide various services to that site (third party cookies).


3.1 Technical cookies 

Cookies in this category allow the Site to function properly and can be found below.
 

3.2 Statistical cookies

The Site also uses statistical cookies created directly by the Controller, or provided by third parties.  

With the statistical cookies created directly that will carry out statistical analyses on various domains, websites or apps that can be traced back to the Cointroller itself, and will carry out its own statistical processing, without such analyses being aimed at making commercial decisions. 

With third-party statistical cookies, means have been taken to reduce their identifying power, for example by masking significant portions of the IP addresses processed. In case of use of third-party statistical cookies, the third party has contractually committed to the Controller to use them exclusively for the provision of the service, to store them separately and not to “enrich” or “cross-reference” them with other information they have.

These cookies can be found below.

Navigation data and environmental variables

The Site automatically acquires some personal data relating to your navigation.  This category of data includes, for example:

  • the IP addresses of the computer you are using;

  • the number of accesses;

  • the pages used;

  • the date and time of access;

  • the URL where the browser was before viewing the Site;

  • the type of browsing browser;

  • the operating system used.

 

3.3 Marketing cookies


Marketing cookies are non-technical cookies that enable the Data Controller to carry out marketing activities. The Data Controller uses the marketing cookies listed and viewable below.

3.4 Profiling cookies

Profiling cookies are non-technical cookies that allow the Company to provide you with personalized services tailored to your needs. The Company uses the profiling cookies listed and available for viewing below.

4. Delete and disable cookies 

You can configure your browser to prevent the processing of cookies, or delete them immediately after browsing. Below, we list how to disable and delete cookies with the main browsers:

5.  Data you voluntarily provide 

You have the right and the freedom to provide data by sending electronic mail to the addresses indicated on the Site, which the Controller may acquire for the purposes indicated from time to time. In addition to the email address necessary to respond to you, any other personal data contained in the relevant communication will be processed. The data collected in this way will be stored and processed exclusively for the purpose of keeping correspondence, without using it for any other purpose.

6. Purpose, legal basis of the processing, optional consent and consequences of non-consent

  • Personal data processed with technical cookies: The provision of personal data is a contractual obligation, without which the website could not be made available in full working order in accordance with the terms and conditions of use. 

  • Personal data processed with statistical cookies: The communication of personal data is purely optional. If you do not communicate your data, it will be impossible for the Controller to carry out statistical analyses. The legal basis for processing is your consent, expressed in accordance with paragraph 3.2. of the Cookie Policy;

  • Personal data processed with marketing cookies: The communication of personal data is purely optional. If you do not communicate your data, it will be impossible for the Controller to carry out marketing activities. The legal basis for processing is your consent, expressed in accordance with paragraph 3.3. of the Cookie Policy.

  • Personal data processed with profiling cookies: The communication of personal data is purely optional. If you do not communicate your data, it will be impossible for the Controller to provide you with personalized services through profiling. The legal basis for processing is your consent, expressed in accordance with paragraph 3.4. of the Cookie Policy. 

  • Personal data provided voluntarily via email or form: The communication of personal data is purely optional. If you fail to provide the data, Controller will not be able to respond to your requests. The legal basis for the processing is the legitimate interest for the Controller to respond to requests. 

You can express your consent to the processing of personal data with non-technical cookies by clicking on a specific box presented within a banner.

7. Automated decision-making and profiling   

If you consent to processing through profiling cookies to benefit from personalized services, your personal data may be subject to an automated decision-making process, with a specific algorithm that will decide which communications are best suited to your profile or which might be of interest to you. The expected consequences of this processing are the sending of highly profiled commercial communications, sending discounts, sending invitations to events deemed to be of interest.   

 In accordance with Article 22 GDPR, you have the right to:   

  • obtain human intervention in the decision-making process by the Data Controller; 

  • express your opinion;   

  • obtain an explanation of the decision reached by the Data Controller;

  • challenge the decision itself.

8. Source of personal data and data categories

The Data Controller will process only the personal data you provide in accordance with the Cookie Policy, collected through the Website or via email. The Company will not process data from publicly available sources. The Data Controller will not process special categories of personal data as referred to in Article 9 of the GDPR.

 

9. Recipients and possible categories of recipients of personal data

They may receive your personal data the companies that provide hosting services and telecommunications services to the Controller.
 

10. Data Transfer 

The Data Controller intends to transfer your personal data to entities established in a country outside of the European Union or to an international organization. Such entities could be represented, without limitation, by:

  • Communications companies that perform communications activities; 

  • companies offering information society services;

  • companies that offer hosting services; 

  • the service providers of the communication company.

The transfer of personal data to such entities, if established in a third country, or to an international organization, is carried out in the presence of an adequacy decision by the European Commission, which has verified that the third country, the territory or one or more specific sectors within the third country, or the international organization in question ensure an adequate level of protection of your rights. In the absence of such decisions, if deemed appropriate, (completare) reserves the right to enter into specific and separate agreements obliging such entities to adopt adequate security measures, including organizational measures, aimed at providing appropriate safeguards with respect to your rights. 

The data may thus be transferred to the following countries: United States of America.

To obtain a copy of this data or the place where it has been made available, simply send your request to the Controller at the addresses shown above.

 

11. Data retention period

  • The Controller will keep your personal data processed by means of technical cookies in order to allow you to use the Site correctly for a period not exceeding 12 (twelve) months from the date of individual collection, in accordance with the provisions of point 3.1 of the Cookie Policy;

  • The Controller will keep your personal data processed to carry out statistical activities through statistical cookies for a period not exceeding 12 (twelve) months from the date of individual collection, in accordance with the provisions of paragraph 3.2 of the Cookie Policy; 

  • The Controller will keep your personal data processed to send marketing communications through marketing cookies for a period not exceeding 12 (twelve) months from the date of individual collection, in accordance with the provisions of paragraph 3.3 of the Cookie Policy;

  • The Controller will keep your personal data processed to provide personalized services through profiling cookies for a period not exceeding 12 (twelve) months from the date of individual collection, in accordance with the provisions of paragraph 3.4 of the Cookie Policy;

  • The Controller will keep your personal data provided voluntarily and processed to respond to your requests for a period of time strictly necessary for achieving this purpose and, in any case, for no longer than 12 (twelve) months from the date of individual collection. 

The Controller reserves the right, in any case, to ask you to renew your consent to the processing and / or to verify the consents you have already expressed.

 

12. Right of objection

As a “data subject”, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you pursuant to Article 6(1)(e) or (f) of the GDPR, including profiling on the basis of those provisions. 

The Controller refrains from further processing your personal data, unless itself demonstrates the existence of compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. 

If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data about you carried out for such purposes, including profiling insofar as it is related to such direct marketing.
If you object to the processing for direct marketing purposes, your personal data shall no longer be processed for such purposes. 

You may object to the processing of your personal data for direct marketing purposes even in part, for example by objecting only to the sending of promotional communications carried out by automated and/or digital means, or to the sending of paper communications and/or the receipt of telephone communications.
If your personal data is processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, you have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you, unless the processing is necessary for the performance of a task carried out in the public interest.

 

13. Other rights 

The Controller would also like to inform you of the existence of the following rights:

  • Right of access: you have the right to obtain confirmation from the Controller that personal data concerning you is or is not being processed. If so, you have the right to access your personal data and specific information, in accordance with Article 15 of the GDPR;

  • Right of rectification: you have the right to obtain from the Controller the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration, in accordance with Article 16 of the GDPR;

  • Right to erasure: you have the right to obtain from the Controller the erasure of personal data concerning you without undue delay. The Controller is obliged to delete your personal data without undue delay, if there are grounds listed in Article 17 of the GDPR;

  • Right to restriction of processing: you have the right to obtain from the Controller the restriction of processing, if the grounds listed in Article 18 of the GDPR exist;

  • Right to data portability: you have the right to receive in a structured, commonly used and machine-readable format, personal data concerning you provided to the Controller, as well as the right to transmit such data to another data controller without hindrance by the Controller, in the cases and under the conditions specified by Article 20 of the GDPR;

  • Right to obtain human intervention, express your opinion, obtain an explanation of the decision reached by the Controller and challenge the decision reached by means of automated decision-making processing: you have the right to  obtain human intervention in the decision-making process by the Data Controller, express your opinion, obtain an explanation of the decision reached by the Data Controller and challenge the decision itself in accordance with Article 22 GDPR;

  • Right to object to commercial communications: you have the right to object at any time, free of charge, to receiving commercial communications from the Controller;

  • Right to lodge a complaint with the Data Protection Authority: you have the right to lodge a complaint with the Data Protection Authority, to complain about a violation of the rules on the protection of personal data, in accordance with Article 77 of the GDPR. 

 

14. How to exercise your rights

You may exercise the rights set forth in the Privacy Policy by sending your requests directly to the Controller at the email address privacy@neuronovatech.com, or by sending a registered letter with return receipt to the Controller’s registered office as indicated above. You may file a complaint with the Italian Data Protection Authority in accordance with the procedures outlined on the official website, addressing it to the contact information available at https://www.garanteprivacy.it/home/footer/contatti.

 

15. Accessibility 

The Cookie Policy is available within the Site or at the premises of the Data Controller. If expressly requested, the Data Controller may provide the information orally, subject to proof of your identity.

 

16. Changes

The Controller may modify the Cookie Policy, also to comply with changes in national and/or European Union regulations, or technological innovations. Any new versions of the Cookie Policy will be posted within the Site. We encourage you to periodically check the Cookie Policy. Any changes will be communicated to you through a pop-up on the Site or by other means and/or computer tools. 

If the Controller substantially modifies the privacy policy, providing for new processing purposes and/or categories of processed personal data, the Controller will inform you, requesting the necessary consents, by means of a pop-up on the Site or other methods and/or IT tools.

bottom of page