Privacy policy

Your privacy is very important to us and for this reason we collect and manage your personal data with the utmost care, adopting specific security measures. Below you will find the main information on the processing carried out by STH in relation to your personal data collected through our platform. We invite you to read the following Privacy Policy, as well as our “Cookie Policy”.

1. Who is the controller of your personal data.

Pursuant to the applicable legislation and as provided for by EU Regulation 2016/679 (hereinafter also “GDPR”) on the protection of natural persons with regard to the processing of personal data, as well as on the free movement of such data, we inform you that the controller of your personal data is Save the Heritage srl Società Benefit with registered office at Via del Mezzetta 2P, 50135 Florence (hereinafter also “STH”).

Email: support@reuseitaly.com

2. Which personal data STH processes and for what purposes

Data provided voluntarily

For the simple consultation of the Site, no provision of your personal data is required.

STH processes the personal data you provide to create your account for access to the restricted area of the Site and for registration and participation, also through teams, in the competitions promoted through our Site, by electronically completing the appropriate registration form. The personal data collected by completing the form to participate in one of the summer schools promoted by STH are: first name, last name, gender, date and place of birth, tax code, telephone number, residential address and street number, country, nationality, e-mail address, role and University of origin of the participant. For the person qualifying as a professional, billing details will also be required.

STH also processes the following personal data:

the contact or personal data you provide when you contact us to obtain information and/or assistance;
your e-mail address when you subscribe to our newsletter;
the identity card of participants will be requested to verify identity before confirming registration.

The personal data provided will be used exclusively for the following purposes:

Respond to your requests;
Manage contacts and send communications;
Manage registration and authentications on the Site;
Manage registrations for cultural activities promoted through the platform (registration, payment, etc.);
Manage activities related to the running of the summer schools (project submission deadlines, monitoring the correct submission of the required documentation);
Inform and update you on future competitions organized by STH;
Publication of the projects resulting from the summer school and their authors, in a dedicated section of the site;

Exclusively with the prior express consent of the team leader and of the participants in the competition, personal data will be processed for the sending of commercial or promotional communications relating to initiatives, products and services offered by STH and/or by STH partners (Newsletter).

Special categories of data

STH does not deliberately collect special categories of data, defined in Article 9 of EU Regulation 679/16 as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data concerning health or a person’s sex life or sexual orientation.

Browsing data

STH may process the personal data it collects while you browse the Site or use the services offered by the Site. The computer systems and software procedures used to operate our Site automatically acquire some personal data, the transmission of which is implicit in the use of Internet communication protocols.

This category of data includes your IP address or the domain name of the computer used to connect to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and your IT environment.

These data are used exclusively for the following purposes:

allow access to and navigation of the Site;
obtain statistical information on the use of our Site;
check the proper functioning of the Site and improve our offering and services.

Browsing data are processed for the time strictly necessary to achieve the purposes.

3. Legal bases of processing and mandatory or optional nature of data provision

STH processes your personal data where one or more of the following conditions provided for by the GDPR apply:

3.1. Processing is necessary for the performance of a contract to which you are a party and/or for the performance of pre-contractual measures. This legal basis legitimizes the processing of personal data carried out in the following activities:

conclusion and performance of the contract for participation in an STH summer school;
registration on the Site and use of services reserved for registered users;
management of requests relating to the performance of cultural activities organized by STH;
recognition in terms of visibility and/or criticism of certain participants in cultural activities;

The provision of your personal data for these activities is a contractual obligation. You are free to provide your data or not, but failure to provide the required data will make it impossible for us to conclude or perform the contract and to process your requests.

3.2. Processing is necessary to comply with a legal obligation to which STH is subject. In the event of the conclusion of a contract for participation in a competition, the processing of your personal data will also be carried out in order to fulfil the legal obligations incumbent upon STH in accordance with tax provisions and other applicable regulations. The provision of your personal data for these activities is a contractual obligation. You are free to provide your data or not, but failure to provide the required data will make it impossible for us to conclude or perform the contract and to fulfil the legal obligations incumbent upon STH.

3.3. You have given STH specific consent. The following processing activities will be carried out exclusively if you have given your express consent:

the sending of commercial or promotional communications relating to initiatives, products and services offered by STH and/or by STH partners.

3.4 Processing is carried out on the basis of STH’s legitimate interest. STH will process users’ data for general assistance activities and to respond to requests for information from users, or to respond to reports, complaints and/or disputes.

It constitutes a legitimate interest of STH to respond to users’ requests, which also coincides with the legitimate interest of the users of the Site who, following a request, reasonably expect a response from STH.

The legitimate interest of STH thus identified may be considered prevailing over the fundamental rights and freedoms of the data subject, also by virtue of such reasonable expectations and of the relationship existing between the data subject and STH, as well as in consideration of the nature of the data processed and the coinciding interest of the data subjects themselves.

4. How we process your personal data

Processing is carried out by STH using IT and/or telematic tools designed to store, manage and transmit the data, with logics strictly related to the purposes themselves.

5. Who will process your personal data

Data processing will be carried out by personnel authorized and instructed by STH, using procedures and technical and IT tools suitable to protect the confidentiality and security of your personal data.

Without prejudice to communications and disclosures carried out in execution of legal obligations, the data may be communicated to third parties operating on behalf of STH and in accordance with its instructions, as data processors. The data subject may request a complete and updated list of the data processors by contacting one of the contacts indicated below.

The names of participants in the summer schools will be published in a dedicated section of the Site, together with their projects.

6. How long and where we store your personal data

The information and personal data you provide through the Site, including data freely provided by completing the forms on the Site, will be stored for a period of time limited to the fulfilment of the purposes for which they are collected. Once the purpose has been fulfilled, your personal data will be deleted or destroyed, unless otherwise required by the authority, by statutory retention requirements, or unless otherwise indicated in specific sections of the Site.

Transfer of data abroad

STH does not transfer your personal data abroad.

The data in question are processed at the operating offices of the Controller and reside on servers located in Italy, at the premises of the relevant provider, appointed as Data Processor.

7. What are your rights

We remind you that in relation to your personal data you may exercise your rights against the Controller, pursuant to Articles 15 et seq. of EU Regulation 2016/679, i.e. you may obtain confirmation as to whether or not personal data concerning you exist and request their communication in an intelligible form. You will also have the right to obtain updating, rectification, integration and erasure of data or restriction of processing. Finally, you will have the right to object, in whole or in part, for legitimate reasons, to the processing of your personal data, even if relevant to the purpose of the collection. You will have the right to exercise the right to data portability and to lodge a complaint with the Supervisory Authority.

Below is the list of your rights

Rights of the data subject Articles 15–22 of EU Regulation 2016/679

Article 15 Right of access by the data subject: the data subject has the right to obtain confirmation as to whether or not personal data concerning him or her are being processed and, where that is the case, access to the personal data and the related information (categories of data, purposes, possible recipients, retention period or criteria…).

Article 16 Right to rectification: the data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Article 17 Right to erasure (“right to be forgotten”): the data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller has the obligation to erase personal data without undue delay, where one of the grounds set out in Article 17(1)(a),(b),(c),(d),(e),(f), paragraphs 2 and 3(a),(b),(c),(d),(e) applies.

Article 18 Right to restriction of processing: the data subject has the right to obtain from the controller restriction of processing where one of the conditions set out in Article 18(1)(a),(b),(c),(d), paragraphs 2 and 3 applies.

Article 19 Notification obligation regarding rectification or erasure of personal data or restriction of processing: the controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Articles 16, 17(1) and 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject so requests.

Article 20 Right to data portability: the data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the conditions set out in Article 20(1)(a),(b), paragraphs 2,3,4 apply.

Article 21 Right to object: the data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her pursuant to Article 6(1)(e) or (f), including profiling based on those provisions. Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning him or her for such marketing, including profiling to the extent that it is related to such direct marketing. Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

8. Methods for exercising the rights of the data subject

You may request information on the methods of processing and the exercise of your rights as a data subject through the following methods:

In case of doubts or clarifications regarding this Privacy Policy or the methods of processing your personal data, you may contact the Controller STH Srl at Via del Mezzetta 2P, 50135 Florence, VAT No. 07043300487 (hereinafter also “STH”) – Email: info@reuseschol.com; strictly excluding the communication of any other type of information;
Formal requests to exercise the rights of the data subject must instead be submitted exclusively using the request form provided by the Data Protection Authority, addressed to STH Srl, attention of the administrative office, by certified email to savetheheritage@pec.it or by ordinary mail to the registered office address Via del Mezzetta 2P, 50135 Florence, by registered letter with return receipt.

9. Amendments to this privacy policy

STH may amend or simply update, in whole or in part, this Privacy Policy. Any amendment or update to the Privacy Policy will be made available to all users in the Privacy section of the Site as soon as the updates are active and will be binding as soon as they are published on the Site in this section, where the date of the last update will also be indicated. We therefore invite you to periodically check the contents of our Privacy Policy. If you do not intend to accept such amendments, you may discontinue use of our Site at any time.