Privacy policy

This is the website of Regenesy Technologies S.p.A., with registered office in Piazza del Popolo 18, 00187 Rome, tax code and VAT no. 14650841001, telephone: +39 064620171, email: regenesy@regenesy.ai, Data Controller of the data concerning you (hereinafter “Regenesy” or “Data Controller” or “Controller”).

To request information on data processing and to exercise your rights, you can send an email to privacy@regenesy.ai or, if you prefer another method such as a letter, you can send it to: Privacy Office, Regenesy Technologies S.p.A. – Piazza del Popolo 18, 00187 Rome, Italy.

Where we collect your data from and what it is

When you connect to a website, some data is inevitably acquired, such as your IP address and the features of the program you are using to browse the Internet. Today websites are dynamic, allow interaction through questions and answers and enable connection to social networks, so other data may be acquired, including behaviour, tastes and preferences, to improve the browsing experience and make it easier to find products and services. Finally, the site needs some technical elements, called cookies, to work better and improve the browsing experience.

If you are a registered user and have already consented to processing, this data may be recorded, associated with your profile and kept for the entire duration of your relationship with us. It will then be deleted, unless required by law.

How and why we process your data

When you visit our site, it is as if you were looking at a shop window and we could see what you do inside the shop. We are interested in managing this data to improve our online offer of products and services. If you are not registered, your data will be processed anonymously, but it could indirectly be traced back to your identity. Other data will be processed only with your explicit consent. In any case, it will be handled by competent, trained staff to ensure that only the data actually needed is processed and that it is managed securely, through adequately protected IT systems and paper archives. Your data will not be disclosed or transferred outside the EU and will not be shared with third parties, unless required by law or requested by the authorities. It may be managed by bodies outside our organisation, but always under our control, to ensure that certain activities are carried out.

User rights

You have the right to know what data has been collected, how it is managed and to whom it may be transferred, to obtain a copy in electronic format and to intervene in the processing by requesting its blocking, modification, updating and erasure, using the contact details given at the beginning of this document. If you are a registered user and wish to delete your profile, log in with your credentials and select the relevant option. If you cannot do so, write to the addresses indicated and we will handle the request.

If you feel this information is not sufficient, please consult the full policy at: www.regenesy.ai/privacy-policy. If this policy does not satisfy you either, you can contact us for further clarification at the addresses already indicated; if, after our replies, you are still not satisfied, you can contact the Italian Data Protection Authority through the website www.garanteprivacy.it.

Please note that the extended policy contains all the information required by law, describes the characteristics and purposes of the cookies installed by the site and gives users the information they need to select or deselect individual cookies.

Full information for website users

Pursuant to Article 13 of European Regulation 679/2016 (hereinafter the “Regulation”)

and the national legislation, Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 (hereinafter the “Applicable Legislation”).

Regenesy Technologies S.p.A., with registered office in Rome (RM), Piazza del Popolo 18 – 00187, tax code and VAT no. 14650841001, telephone: +39 064620171, email: regenesy@regenesy.ai, Controller of personal data processing pursuant to the Regulation (hereinafter, for brevity, the Controller)

informs

Users who connect to the website www.regenesy.ai, whether registered or not, are informed that personal data collected by the company, acquired from third parties or freely provided by data subjects through the various options on the site (work with us, newsletter, competitions and events, etc.) will be processed lawfully and fairly, in compliance with the principles established by EU and Italian law.

Data processed

Browsing data: IP address, operating system and browser used, date and time of connection and disconnection, time spent on the site, pages visited, activity carried out, location (if the related service is active) and anything else made available by your computer, according to its security settings.

Personal data: first name, surname, email address, telephone, fax, physical contact details where available, any IDs that will be communicated and data contained in the CV if sent by email.

Purposes and legal basis of processing

The collection and any other processing of data subjects' data acquired through the website are carried out by the Controller at the company's premises, in compliance with the security measures and requirements of the Applicable Legislation, or by parties delegated by it (specifically selected and with the necessary professional skills), using manual and computerised procedures, in order to offer users a simple and rewarding browsing experience, to gather information useful for improving the offer of products and services online, to fulfil specific requests of the data subject (e.g. a contact request or an unsolicited application), for pre-contractual and contractual obligations, for ordinary administrative, financial and accounting activities, to ensure proper customer management during the marketing and sale of products, for after-sales support and to comply with legal obligations. Processing is also aimed at producing statistics in anonymised or pseudonymised form.

At the data subject's request or subject to specific consent, processing may also be carried out through CRM and customer care, to measure the data subject's satisfaction, tastes, preferences and habits, to send commercial information or advertising material, for direct marketing campaigns, for participation in games, competitions or prize promotions, for involvement in events, for the provision of services, for market research and other activities directly or indirectly related to marketing.

The legal bases for processing are the controller's legitimate interest in managing users' browsing data to improve the offer of products and services through the website, the consent given by data subjects, and the obligations relating to the pre-contractual and contractual phases of the relationship. It is always possible to ask the Controller to clarify the legal basis of each processing operation and in particular to specify whether processing is based on law, provided for by a contract or necessary to conclude a contract.

Sources and nature of the data

Data may be collected through the company website, by analysing browsing or through information freely entered by the data subject using the forms provided.

For registered users, the Controller processes personal details, telephone and electronic contact details and any bank details provided for payments, as well as other data essential to meet data subjects' requests or fulfil the commitments made.

Providing the data is therefore mandatory, since processing cannot take place if consent is not given or is withdrawn.

Please note that incorrect or insufficient provision of the requested data may make it wholly or partly impossible to fulfil the data subject's requests or the obligations connected with the commitments made, with the possible consequence that the results of processing may not match the agreements made or the obligations imposed by laws and regulations.

Other data, on the other hand, is collected solely to adapt promotional campaigns, offers and, in general, business activities to the interests of customers and other parties involved. Providing it is therefore not mandatory, and refusing processing or withdrawing consent does not affect the establishment or continuation of the main relationship.

Data of minors

Minors under 16 may not provide data without the consent of a parent or guardian.

The Controller will in no way be liable for any false statements provided by minors and, should it establish that a statement is false, will immediately erase all personal data and any information acquired. In any case, consent to data processing given by minors aged over sixteen is authorised for those under eighteen only for access to information society services. Minors under 18 may not in any case approve and sign terms and conditions of service.

Browsing data

The IT system and software used for the corporate web portal acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not stored to identify data subjects but, by its nature, could allow users to be identified through processing and association with other data held by third parties.

This category of data includes the IP addresses and domain names of the computer used by the user to connect to the site, the URL (Uniform Resource Locator) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file received, the numerical code indicating the status of the server's response (success, error, etc.) and other parameters relating to the user's operating system and computer. This data is used only to produce anonymous statistics on the use of the site and to check that it works properly. It is normally deleted immediately after processing. It may be used and provided to law enforcement and the judiciary to establish liability in the event of damage to the site or offences committed through the network.

Data provided by the user

Filling in any forms on the site's pages results in the data being stored in the system's memory. The information is protected by an authentication system and can only be used by those with credentials. It is also kept up to date and adequately protected, according to the best available practices.

Requests for information by email involve storing the user's email address, which is needed to reply to the sender's requests. The data contained in the message is also included. The Controller advises its customers not to send third parties' personal data or information when requesting services and information, unless absolutely necessary.

Cookies

As with most websites, information about browsing on the site is stored for statistical purposes. This information is collected through cookies. A cookie is a small file that is transferred to the computer's hard disk when connecting to a site.

This data is not personal, as it does not allow the user to be specifically identified. The data collected concerns the geographical location of the service provider, the type of browser used, the IP address, the pages visited, etc. The information collected in this way shows how often a site is visited and the activity carried out while browsing.

In this way, over time, the site's content can be improved and made easier to use.

Companies that supply content to the site, or whose sites can be reached through links, may also use cookies when the user selects the relevant link.

In these cases the use of cookies is not under the direct control of the Data Controller. Most browsers accept cookies automatically, but they can be refused or selected individually according to the user's preferences. However, if the user blocks cookies, some components of the site may stop working and some pages may appear incomplete.

Essential technical cookies

These cookies are needed to ensure that the site works properly and smoothly: they allow pages to be browsed, content to be shared, login credentials to be stored to speed up access to the site, preferences and credentials to remain active while browsing, and the browsing or purchasing experience to be improved. Without these cookies, the services for which users access the site cannot be provided, in whole or in part.

Statistical cookies

These cookies help us understand how users use the site so that we can assess and improve how it works and create content ever better suited to users' preferences. For example, these cookies tell us which pages are visited most and least, how many visitors the site has, how long the average user spends on the site and how visitors reach it. This makes it possible to determine what works best and which content is most appreciated, and how page content and functionality can be improved. All information collected by these cookies is anonymous and not linked to the user's personal data.

Third-party profiling cookies

These are cookies used by third parties not directly controlled by the Controller. The company cannot give any guarantee regarding the use that will be made of the data, which is processed directly by an external party. Cookies from these third-party operators make it possible to offer advanced features, as well as more information and personal functions. This includes the ability to share content through social networks and to have a site experience personalised according to the preferences expressed through the pages visited.

If you have an account or use the services of these other controllers, they may be able to know that you have visited the company's site. The use of data collected by these external operators through cookies is subject to their own privacy policies. Third-party profiling cookies are identified by the names of the respective operators and can be disabled.

Cookie management

By selecting the ACCEPT button shown in the banner overlaid on the Homepage, you authorise the installation of cookies on the device you are using. The settings of downloaded cookies can be changed through the browser's features. In this way it is also possible to block third-party cookies and remove cookies previously installed, including those containing cookie preferences. To adjust or change browser settings, consult the guide of the software or application manufacturer. Disabling cookies may cause the site, or parts of it, to malfunction.

Third-party sites

The site may, even only periodically, contain links to third-party sites and applications (Google Adwords widgets, Analytics, YouTube, Vimeo, etc.) to provide further services and information to the user. When users follow these links, they leave the company site and access other resources that are not under the direct control of the Data Controller, who will therefore not be responsible for the browsing, security and personal data processing procedures of other sites, even in the case of co-branding or display of the company logo. We recommend carefully reviewing the security and privacy procedures of the site visited, which may send further cookies, read those already on the user's hard disk and request or acquire further personal information.

Interaction with social networks and external platforms

Through widgets and buttons, the site can interact with external platforms and social networks. In this case, the information acquired depends on the profile settings used by the user on each social network and not on the administrator of this site.

Further information can be obtained from the websites of the companies offering the service. In this case the data is not managed by the Data Controller's website, which links these buttons only to offer an additional service to the data subject but has no control over them.

Disclosure and dissemination

Data processed through the website is exclusively of a common nature and is not intended for dissemination. The Controller does not request and has no interest in collecting and processing data classified by the Regulation as “special” (health, genetic, biometric, etc.) or “criminal”, without prejudice to legal obligations.

Data must be disclosed to third parties in fulfilment of obligations arising from laws or regulations (institutions, law enforcement, judicial authorities, etc.) or for activities directly or indirectly connected with the relationship established. By way of non-exhaustive example:

• Parties that need to access the data subject's data for purposes relating to the relationship with the Controller (banks, financial intermediaries, electronic money and payment institutions, debt collection companies, customer due diligence companies, carriers, etc.);
• Consultants, collaborators and service companies, to the extent necessary to carry out the tasks assigned by the Controller;
• Subsidiaries and/or affiliated companies that may access the data, strictly to the extent necessary to carry out tasks assigned by the Controller.

Data may be disclosed to parties operating within the European Union, or in countries that guarantee the same level of protection as the Applicable Legislation. The up-to-date list of data processors is available at the Controller's offices.

The data subject's data may be disclosed to parties operating in non-EU countries where expressly permitted by the data subject. In any case, data processing carried out in the various countries will comply with the strictest rules, so as to ensure the highest level of protection.

They may be transferred to third parties, including for a fee, if the data subject has given express consent, for purposes directly or indirectly connected with the Controller's business.

Data retention periods

Data processed by the Controller, without prejudice to legal obligations, is kept until the data subject expressly requests its erasure and is in any case periodically checked, including through automatic procedures, to ensure it is up to date and actually relevant to the purposes of processing. If the purpose for which it was acquired no longer applies, the data will be erased, unless it must be processed to protect rights in court, for regulatory obligations or at the express request of the data subject. At the end of processing and following erasure, the data subject's rights can no longer be exercised.

Data subject rights

Data subjects are granted the rights set out in Articles 15 to 22 of GDPR 679/2016 and in the Applicable Legislation in general. In particular, data subjects may at any time withdraw their consent to processing, request rectification, updating or anonymisation of their data, restrict its use even partially, request its portability and its erasure. These rights may be exercised to the extent that processing is not mandatory under laws or regulations. Requests concerning the exercise of data subject rights may be sent to the Data Controller at the following address: privacy@regenesy.ai o dpo@regenesy.ai. If not satisfied with the response given to their requests by the Data Controller or by the Data Protection Officer, data subjects may lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), Piazza Venezia 11, 00187 Rome www.garanteprivacy.it