INFORMATION REGARDING DATA PROCESSING

Pursuant to Article 13 of Regulation (EU) No. 2016/679 on the protection of personal data (hereinafter the “Regulation”), Investire SGR S.p.A. (hereinafter “Investire” or the “Company” or the “Data Controller”), as the data controller, wishes to provide the user (hereinafter “User” or “Data Subject”) with certain information regarding the processing of personal data concerning him/her carried out within the framework of the desktop and mobile version of the website “breathmilano.it” (hereinafter the “Site”) owned by the Data Controller. 

This information does not concern other sites, pages or online services that can be reached through other websites of the Company.

1. Cookies and other tracking systems

Technical cookies are used within the Site, while analytics cookies are not used, nor are cookies or other tracking systems for users profiling. 

For more information see the Site’s Cookie Policy.

2. Purpose and legal basis for processing

Personal data collected through the Site will be processed in order to provide the services offered by the Site, requested or used by the User.

In particular, sending e-mail messages to the addresses on the Site involves the acquisition by the Controller of the sender’s e-mail address. This e-mail address, together with other personal data that may be collected, is necessary in order to respond to the requests sent and to provide the services expressly requested.

The above data, also summarized in Section 3 below, are processed by the Data Controller for the above purposes and in particular for answering – directly and/or through the parties indicated in paragraph 6 below – to requests of the User in order to provide, where possible and within the limits provided by the regulations in force, feedback to the requests.  

For the aforementioned purposes, the processing of personal data is therefore necessary for the execution of measures requested by the data subject, the fulfillment of related regulatory obligations and the pursuit of legitimate interests of the Data Controller for the purpose of carrying out organizational, technical and security activities concerning the management of the Site and related services.

3. Categories of data processed

In connection with the above purposes, through the Site, the Data Controller collects and processes the personal data as well as any other information that may be provided by the Data Subject referred to in point 2 above.

For the services of the Site, no processing of special categories of personal data (such as, for example, personal data disclosing health status, political and trade union opinions, religious beliefs, etc.) is carried out. 

Personal data will hereinafter be collectively referred to as “Data”.

4. Nature of provision of Data

The provision of Data is optional for the purposes set out in point 2,  and, in case of refusal, the Data Subject will not be able to access the requested services.

5. Method of processing and data retention time

The processing of the Data Subject’s Data will be carried out with the aid of mainly automated tools and procedures suitable to guarantee their security and confidentiality in accordance with the law, with methods and logics strictly related to the above purposes. 

The Data are not subject to an automated decision-making process.

In relation to the purposes referred to in point 2 above, the Data may be retained by the Data Controller for a period of 2 years from the request of the data subject or, where applicable, from the provision of the data subject’s consent, without prejudice to the data subject’s ability to revoke it at any time.

6. Categories of subjects to whom the Data may be communicated or who may be made aware of it and the scope of dissemination thereof

Certain categories of employees of the Company, in their capacity as persons authorized to process, may have access to the Data Subject’s Data for the purpose of the fulfillment of the duties assigned to them by the Company, aimed at the pursuit of the purposes illustrated above. 

In addition, the Company, again for the pursuit of the purposes illustrated in this policy, may need to communicate the Data Subject’s Data to the following recipients:

  • subjects who perform, on behalf of or for the Company, tasks of a technical nature and professional assistance or advice;
  • real estate agents;
  • companies managing and maintaining the Site;
  • public bodies, supervisory and control bodies and judicial authorities or judicial police for the need to fulfill regulatory obligations or to ascertain responsibility in case of cyber crimes related to the use of the Site.

Individuals in the above categories may act as data processors where carried out on behalf of Investire or operate independently as separate data controllers.

The Data Subject’s Data processed by the Company will not be published or otherwise disseminated and will also not be transferred to third countries outside the European Economic Area.

7. Rights of the Data Subject

The Data Subject may exercise, at any time, his/her rights towards the Controller, pursuant to the Regulation, namely:

  • access the Data concerning him/her and obtain certain information on their processing;
  • rectify or complete them if inaccurate or incomplete;
  • delete or restrict their processing, where applicable;
  • object to their processing on grounds relating to his particular situation;
  • withdraw consent, where the processing is based on such consent;
  • obtain the portability of data subject to automated processing and based on consent or a contract with the Data Subject;
  • lodge a complaint with the Data Protection Supervisor.

8. Controller of data processing

The Data Controller referred to in this information document is “Investire SGR S.p.A.”, with registered offices in Via Po, 16 / a – 00198 Rome and with offices in Milan, Largo Donegani, n.2– 20121, which can be contacted at the following addresses: Tel: 06 – 696291; Fax: 06 – 69629212; E-mail: trattamentodati@investiresgr.it.

9. Procedures for the exercise of rights by the Data Subject

Claims relating to the exercise of the rights referred to in Section 8 of this Privacy Policy may be submitted in writing by e-mail to the following address: trattamentodati@investiresgr.it. 

10. Updates

This Privacy Policy may be subject to change and update. If substantial changes are made to the Data Controller’s use of the Site User Data, the Data Controller will notify the User by posting such changes on the Site.

Text updated on April 2024