SocialTechno

    Privacy Policy

    Welcome to the website of SocialTechno Impresa Sociale S.r.l

    This notice is provided in compliance with the European General Data Protection Regulation EU 2016/679 ("GDPR") and subsequent amendments and/or additions, as well as national legislation or regulations on the processing of personal data applicable from time to time ("Privacy Regulations"), to ensure that the processing of personal data is carried out in compliance with the rights and freedoms of individuals, with particular regard to the protection of personal data.

    The term "personal data" means any information relating to an identified or identifiable natural person, even indirectly, with reference to any other information, including a personal identification number.

    The term "processing" means any operation or set of operations, whether or not carried out by automated means, applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, restriction, erasure or destruction.

    The term "data subject" means the natural person to whom the personal data relates.

    1. Data Controller

    The Data Controller is SocialTechno Impresa Sociale S.r.l., with registered office at Via Oberdan 2, 20064 Gorgonzola (Mi), Tax Code and VAT No. 08722650960, contactable at the email address: info@socialtechno.it

    SocialTechno independently decides on the purposes and methods of processing, as well as the security procedures to be applied to ensure the confidentiality, integrity and availability of data.

    2. Types of data processed and data sources

    The data collected, stored and processed, directly or through third parties, by SocialTechno in compliance with this Policy and applicable laws, may be voluntarily provided by the data subject accessing this site and/or collected by SocialTechno, including through the use of cookies, both proprietary and third-party.

    Among the Personal Data collected by the Controller, independently or through third parties, are: Cookies; Usage data; email; first name; last name; profession; company name; various types of Data; date of birth; phone number; address; username; Tax Code; VAT number; country; state; province; postal code; city; business sector; number of employees; website; billing address; street number; budget; unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example); number of Users; device information; session statistics; latitude (of the city); longitude (of the city); browser information.

    The data subject's data processed by the Controller may also include photographs and videos of participants collected at events and training sessions organized by the Controller.

    The Data Subject assumes responsibility for the Personal Data of third parties obtained, published or shared through www.SocialTechno.it and guarantees that they have the right to communicate or disseminate them, releasing the Controller from any liability towards third parties.

    Authentication credentials may be required in the login area to access certain services.

    3. Purpose and legal basis of processing

    The Controller may process the data subject's personal data for the following processing purposes:

    • for the conclusion and management of a contract with the Controller of which the data subject is a party — performance of a contract (Art. 6(1)(b) GDPR).
    • to enable the data subject to register for events including training organized by the Controller and/or its Partners — performance of a contract (Art. 6(1)(b) GDPR) as the legal basis for processing.
    • to provide the data subject with the Controller's services such as consulting services and programs provided through the portal reserved for registered users and requested by the data subjects themselves — performance of a contract (Art. 6(1)(b) GDPR) as the legal basis for processing;
    • to enable the data subject to receive the newsletter and invitations relating to the Controller's events and initiatives — consent (Art. 6(1)(a) GDPR) as the legal basis for processing;
    • for compliance with legal obligations, regulations, and EU legislation — legal obligations (Art. 6(1)(c) GDPR) as the legal basis for processing.
    • to promote events and training sessions organized by the Controller and/or its selected partners on online communication channels (including social networks) — consent (Art. 6(1)(a) GDPR) as the legal basis for the collection and publication of the data subject's images and videos.
    • for marketing purposes for the promotion and sale of products and services similar to those already purchased by the data subject (so-called soft spam), through commercial communications sent via email — legitimate interest of the Controller (pursuant to Art. 6(1)(f) GDPR) as the legal basis for processing.
    • For website management (statistical analysis) — legitimate interest of the Controller (pursuant to Art. 6(1)(f) GDPR) in managing its own website.

    4. Data retention period

    The data subject's personal data will be retained only for the time necessary to achieve the purposes for which they were collected, in compliance with the principle of minimization pursuant to Art. 5.1.c) of the GDPR.

    In particular, regarding processing for marketing purposes, data will be processed and retained until consent is revoked by the data subject, in any case no longer than 24 months from consent.

    In any case, the data subject may always request the interruption of processing or the deletion of their data, as provided below.

    Data is processed for the period of time required by applicable laws and regulations, as well as for the time necessary to assert any rights in court.

    In any case, data is also processed in accordance with the confidentiality standards that the Controller has always upheld.

    At the end of the retention period, Personal Data will be deleted. Therefore, upon expiry of such period, the right of access, deletion, rectification and the right to data portability can no longer be exercised.

    5. Consequences of failure to provide data

    In cases where data processing is based on consent, data subjects are free to refrain from providing such Data, without this having any consequence on the availability of the Service provided by the Controller or its operation.

    If the data subject does not consent to data processing and/or expresses their refusal of consent to their use, images and videos will not be collected or published, while participation in training sessions and events to which they refer remains guaranteed.

    6. Methods of data processing

    The Controller adopts appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of Personal Data. Processing is carried out using computer and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated.

    In addition to the Controller, in some cases, other parties involved in the Controller's organization (administrative, commercial, marketing, legal personnel, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Controller. The updated list of Processors may always be requested from the Data Controller.

    The processing of collected data takes place at electronic databases owned by the Controller and any service providers identified and appointed by the Controller, where necessary, as data processors pursuant to Art. 28 of the GDPR.

    Personal data published on social networks (Facebook, Instagram, LinkedIn) will be processed with automated third-party tools, appointed as data processors.

    7. Communication of Data to third parties

    Except in cases where communication is required by law or necessary for purposes provided by law, Data may be made available to the following third parties:

    • providers of technological services necessary for sending newsletters and marketing communications,
    • providers of technological services necessary for the delivery of certain consulting services or certain programs of the Controller,
    • providers of various IT services (providers of tools necessary for collecting course registrations).

    Common personal data (first name, last name, organization) may be communicated to partner companies of courses and events. In this regard, personal video and photo data may be disseminated through publication on the Controller's website (www.SocialTechno.it) and/or partner event websites, as well as on various social network pages (for example Facebook, YouTube, Instagram, LinkedIn, Vimeo etc.) and in print.

    The above-mentioned third-party suppliers are appointed as data processors pursuant to and for the purposes of Art. 28 GDPR.

    8. Public Space

    Any information that the Data Subject may reveal in a public space, including social media, chat or any other site linked to SocialTechno.it, is available to anyone visiting that space. The Controller cannot protect information that the Data Subject makes public on these tools.

    9. Links to other sites

    The portal www.SocialTechno.it may contain links to sites belonging to third parties not connected with the Controller. The Controller cannot protect information that Data Subjects may make public on third-party sites and recommends checking the privacy policy of sites visited.

    10. Minors

    SocialTechno undertakes not to enter into any service contract with minors and not to contact minors for promotional offers or marketing purposes.

    11. User Rights

    Pursuant to European Regulation 679/2016 (GDPR) and national legislation, the Data Subject may, in the manner and within the limits provided by current legislation, exercise the following rights:

    • request confirmation of the existence of personal data concerning them (right of access);
    • know the origin;
    • receive intelligible communication;
    • obtain information about the logic, methods and purposes of processing;
    • request updating, rectification, integration, deletion, transformation into anonymous form, blocking of data processed in violation of law, including those no longer necessary for the purposes for which they were collected;
    • in cases of consent-based processing, receive, at the cost of any medium only, their data provided to the controller, in a structured format readable by a data processor and in a format commonly used by an electronic device;
    • the right to lodge a complaint with the Supervisory Authority (Privacy Guarantor);
    • as well as, more generally, exercise all rights recognized by current legal provisions.

    The Controller undertakes to respond as soon as possible to the Data Subject after verifying their identity where necessary.

    In the event that the right of objection is exercised, the Controller reserves the right not to follow up on the request, and therefore to continue processing, in cases where there are compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject.

    Rights may be exercised against the Data Controller by sending a request to the email address: info@socialtechno.it

    The data subject is informed that, pursuant to Art. 12 of the GDPR, if the data subject's requests are manifestly unfounded or excessive, particularly due to their repetitive nature, the Controller may: a) charge a reasonable fee, taking into account the administrative costs incurred in providing the information or communications or taking the requested action, or b) refuse to comply with the request.

    The data subject also has the right to lodge a complaint before the Data Protection Authority.

    12. Changes to this privacy policy

    This Privacy Policy may be modified or simply updated, in whole or in part, in light of any legislative changes; changes and updates to the Privacy Policy will be binding as soon as published on the Site.

    In the event of non-acceptance of the changes made to this notice, the Data Subject is required to cease use of this site and the Controller's services and may request SocialTechno to remove their personal data.

    Last updated: October 2025