PRIVACY POLICY

Information regarding the processing of personal data pursuant to Articles 13-14 of GDPR (General Data Protection Regulation) 2016/679.

According to the Law, anyone processing personal data must provide the concerned individual with appropriate information and, in some cases, obtain consent for processing. As a Data Subject, we inform you as follows.

Purpose of Processing

Data may be collected for one or more of the following purposes, related to contractual obligations:

• Free registration to our community (e.g., on the improove.tech domain);
• Execution of subscribed services;
• Compliance with legal or regulatory obligations;
• Free subscription to our newsletters;
• Contact management;
• Invitations to informational or promotional events;
• Sending community-related informational and promotional material;
• Satisfaction surveys;
• Statistical analysis for marketing purposes;
• Marketing and advertising.

Processing Methods

Data will be processed as follows:

• Collection directly from the data subject through forms or coupons, from third parties, by phone, or online;
• Recording and processing on paper and/or electronic media;
• Organization of archives in predominantly automated form;

in compliance with minimum security measures under the Technical Regulations on minimum security measures, Annex B of the Privacy Code.

Personal data is retained for the duration of the association and/or mandate relationship and, in the event of revocation and/or termination of the relationship, for the statutory terms indicated in Article 19 of Legislative Decree 35/2017.

Your email address may be used for sending communications related to the community (membership reminders, newsletters, special offers, etc.) or to update you on new products (if a different service is subscribed to).

Data Provision

Providing data to our community is entirely optional, but refusal to provide such data will make it impossible to use the services offered by the community.

Data Processors

Data will be processed on behalf of the community by Managed Designs S.r.l., professionals, and companies appointed by us, performing specific processing services or complementary activities necessary for the execution of our operations or services.

Data Disclosure Scope

Data may also be disclosed to:

• Entities that must have access to data under laws or secondary/community regulations;
• Companies and entities (e.g., businesses, associations, foundations) performing outsourcing activities for Managed Designs S.r.l.;
• Third parties for advertising and/or promotional purposes.

Rights of the Data Subject

You may exercise the following rights at any time:

• Access to personal data;
• Obtain correction or deletion of data or restriction of processing;
• Object to processing;
• Request data portability;
• Withdraw consent, where applicable (withdrawal does not affect the lawfulness of processing based on consent before withdrawal);
• Lodge a complaint with the supervisory authority (Data Protection Authority).

You can exercise your rights by sending a request via email to: privacy@improove.tech.

Data Transfer Abroad

Due to the existence of telematic, IT, or correspondence links, data may be made available abroad, including outside EU countries, for the same purposes and methods mentioned above.

Data Controller and Processor

The data controller for all legal purposes is:

Managed Designs S.r.l.
VAT No. 04358780965
Registered Office: Via Giacomo Manzù 8, 20138 Milan (MI)
Operational Office: Talent Garden - Via Calabiana 6, 20139 Milan (MI)

The Data Processor is available at these contacts for exercising rights under Article 12 and/or clarifications on personal data protection.

All accounts are strictly personal, and sharing access credentials with third parties may result in service suspension at the provider's sole discretion. It is strictly forbidden to transfer, lend, resell, or share access to any system.

Account Deletion

To delete your data from the registered members' archive, please use this procedure (login required) or send a written request via registered mail with return receipt to the Data Controller.