Privacy notice

1. Who processes your data

The data controller is:

No Data Protection Officer has been appointed, as none of the cases listed in Article 37 of the Regulation applies. For anything concerning your personal data you can write directly to the controller at the addresses above.

2. In short

This site collects personal data only when you provide it yourself: by subscribing to the newsletter, writing through a form, or booking a meeting. We use no analytics tools, we do not profile anyone, we run no behavioural advertising, and we neither sell nor share your data with third parties.

The pages load no resources from third-party servers: even the typefaces are hosted on our own servers, precisely so that your IP address does not reach outside providers while you are simply reading.

3. Each processing activity

a) Newsletter subscription

Data: your name and email address. Alongside these we keep the record of your consent: date and time, the IP address it was given from, the version of the text you accepted, and the date, time and IP of your confirmation.

Purpose: sending you the newsletter with articles, events and content from the magazine.

Legal basis: your consent, Article 6(1)(a) of the Regulation. We keep the record of consent to meet the obligation in Article 7(1).

Retention: until you unsubscribe. The link is at the bottom of every email you receive, and removal is immediate. Subscriptions that are never confirmed are deleted automatically after 30 days.

Subscribing takes a confirmation step: after submitting the form you receive an email with a link, and until you open it we send you nothing else. This makes sure nobody can subscribe someone else's address.

b) Messages and enquiries sent through the forms

Data: your name, email address and the content of your message. In the form for business partners, where you provide them, also your organisation, phone number, website and timing.

Purpose: answering your enquiry and handling the contact that follows from it.

Legal basis: steps taken at your request prior to entering into a contract, Article 6(1)(b).

Retention: 24 months from receipt, after which messages are deleted automatically.

c) Booking a meeting

Data: your name, email address, company or organisation where given, type of enquiry, any message, and the date and time you chose.

Purpose: arranging the meeting, sending you the confirmation and letting you know of any change or cancellation.

Legal basis: steps taken at your request prior to entering into a contract, Article 6(1)(b).

Retention: 24 months from the date of the meeting, after which the booking is deleted automatically.

d) Browsing the site

Data: the technical cookies needed for the pages to work and stay secure, and connection data (IP address, date and time of the request, page requested, browser type) recorded by the systems hosting the site.

Purpose: letting the site work, protecting the forms from abuse and diagnosing faults.

Legal basis: the controller's legitimate interest in providing a working, secure service, Article 6(1)(f).

Retention: connection data stays in the technical logs for as long as needed for diagnostics and security.

The list of cookies, with the duration and purpose of each, is in the cookie policy.

4. Who else sees your data

Your data is accessible to the members of the editorial team authorised to handle it, and to the providers that allow us to run the service, appointed as processors under Article 28 of the Regulation:

• the provider hosting the site and the mailbox our emails are sent from, Armada S.r.l..

We disclose your data to nobody else, unless required to by law or by a request from a judicial authority. We do not sell it and we do not share it for third-party marketing.

5. Transfers outside the European Union

We transfer no personal data outside the European Economic Area. Data stays on the hosting provider's servers, located in the European Union.

Should we introduce a tool that involves a transfer (an analytics service or a third-party map, for instance), we will update this notice and state the safeguards adopted under Articles 44 and following of the Regulation.

6. Your rights

Within the limits of Articles 15 to 22 of the Regulation, at any time you may:

• find out whether we process data about you and obtain a copy of it (access);
• have it corrected if it is wrong or incomplete (rectification);
• ask for it to be deleted (erasure);
• ask for the processing to be restricted;
• receive the data you gave us in a machine-readable format, or have it sent to another controller (portability);
• object to processing based on legitimate interest;
• withdraw your consent to the newsletter at any time, without affecting the lawfulness of anything sent before you withdrew it.

For the newsletter, withdrawing is immediate and needs no message to us: the unsubscribe link at the bottom of every email is enough. For anything else, write to info@followurstream.com. We reply within one month of your request, as Article 12 requires.

7. Complaints to the supervisory authority

If you believe the processing of your data breaches the Regulation, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), following the steps set out at garanteprivacy.it, or to bring the matter before a court.

8. Children

The services on this site are not aimed at children under fourteen. In Italy, under Article 2-quinquies of the Personal Data Protection Code, consent to processing in relation to information society services is valid from the age of fourteen. If we find that we have collected data about a child under fourteen without the consent of whoever holds parental responsibility, we delete it.

9. Security

The site is served entirely over an encrypted connection (HTTPS). Access to the restricted area is protected by personal credentials, stored in encrypted form and unreadable even to us, and limited to authorised people. The forms are protected against automated submission and repeated attempts.

Should a personal data breach occur that poses a risk to your rights and freedoms, we will inform the supervisory authority within seventy-two hours, as Article 33 requires, and we will inform you as well where the risk is high.

10. Changes to this notice

We may update this document when the processing activities or the tools we use change. The date it was last updated is shown below. Where changes concern processing based on your consent, we will tell you and, where necessary, ask for your consent again.

This document is also available in Italian. Should the two versions differ, the Italian text prevails: it is the language of the controller and of the applicable law.