Privacy policy
PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA OF USERS OF THE REPURPOSE WEBSITE PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679 (“GDPR”)
PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA OF USERS OF THE REPURPOSE WEBSITE PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679 (“GDPR”)
Introduction
Italbiotec S.r.l. Benefit Company ("Italbiotec") provides this information in relation to the processing of personal data collected by Italbiotec when visiting and browsing the REPURPOSE website. This privacy policy is provided exclusively for the REPURPOSE website and does not apply to online pages or services accessible via links and icons that may be present on the website. The personal data provided by users will be processed in compliance with the provisions of EU Regulation no. 2016/679 (for short, "GDPR").
Data Controller
The Data Controller is Italbiotec S.r.l. Benefit Company (Tax Code/VAT 06259750963), with registered office in Piazza della Trivulziana 4/A Milan (20121), represented by its pro tempore legal representative, certified e-mail (pec): cisiscrl@legalmail.it
Categories of Data – Browsing Data
The Data Controller processes personal data relating to website browsing, such as IP addresses and addresses in URI/URL notation. The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified data subjects, but which by its nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes:
- the IP addresses or domain names of the computers used by users who connect to the site;
- the addresses in URI (Uniform Resource Identifier) notation of the requested resources;
- the time of the request;
- the method used to submit the request to the server;
- the size of the file obtained in response;
- the numerical code indicating the status of the response given by the server (successful, error, etc.);
- other parameters related to the user's operating system and computer environment.
This data is collected in order to obtain anonymous statistical information on the use of the site and to check its correct functioning.
Categories of Data – Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mails to the addresses indicated on the website entails the subsequent acquisition of the sender’s e-mail address, which is necessary to respond to requests, as well as any other personal data included in the communication.
For the processing of personal data carried out through the contact e-mail addresses available on the website, please refer to the specific privacy notice relating to the contacts service.
With the exception of what is specified above for browsing data and in the information pursuant to art. 13 of the GDPR provided in the individual sections of the REPURPOSE website, the provision of data for additional purposes is optional.
Purposes of the Processing, legal basis of the Processing and methods of Processing
Personal data are processed using electronic and telematic means, as well as manual methods, for the following purposes:
Categories of Data – Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mails to the addresses indicated on the website entails the subsequent acquisition of the sender’s e-mail address, which is necessary to respond to requests, as well as any other personal data included in the communication.
For the processing of personal data carried out through the contact e-mail addresses available on the website, please refer to the specific privacy notice relating to the contacts service.
With the exception of what is specified above for browsing data and in the information pursuant to art. 13 of the GDPR provided in the individual sections of the REPURPOSE website, the provision of data for additional purposes is optional.
Purposes of the Processing, legal basis of the Processing and methods of Processing
Personal data are processed using electronic and telematic means, as well as manual methods, for the following purposes:
- to allow navigation and the correct functioning of the website as well as to guarantee the security of the site itself. The legal basis of the processing is the legitimate interest of the Data Controller pursuant to Article 6, paragraph 1 letter f) GDPR;
- to comply with legal obligations as well as to respond to requests from the Authorities. The legal basis for the processing is compliance with a legal obligation to which the Data Controller is subject pursuant to Article 6, paragraph 1, letter c) GDPR;
- to the exercise and defense of Italbiotec's rights in every forum, both judicial and extrajudicial. The legal basis of the processing is the legitimate interest of the Data Controller pursuant to Article 6, paragraph 1, letter f) GDPR;
Your data will be processed by Italbiotec's staff and collaborators (internal or external, natural or legal persons) for maintenance, management and provision of the website navigation service.
Cookie
Information on cookie can be found in the cookie policy section. At any time you mai modify, revoke or update your consents in our cookie center available on the website.
Data retention period
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected, pursuant to art. 5 paragraph 1 letter e) GDPR.
Specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access.
Categories of recipients of Personal Data – Data Processors
The personal data processed may be communicated, in addition to the subjects referred to in the paragraph "Purposes of the processing - processing methods", also to the judicial authority for the need to ascertain unlawful acts.
- Data processors: The data provided by users may be processed, by virtue of the purposes described in this policy, by the subjects appointed as data processors pursuant to Article 28 of the GDPR:
Cookie
Information on cookie can be found in the cookie policy section. At any time you mai modify, revoke or update your consents in our cookie center available on the website.
Data retention period
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected, pursuant to art. 5 paragraph 1 letter e) GDPR.
Specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access.
Categories of recipients of Personal Data – Data Processors
The personal data processed may be communicated, in addition to the subjects referred to in the paragraph "Purposes of the processing - processing methods", also to the judicial authority for the need to ascertain unlawful acts.
- Data processors: The data provided by users may be processed, by virtue of the purposes described in this policy, by the subjects appointed as data processors pursuant to Article 28 of the GDPR:
- providers of IT and technical services related to the management and maintenance of the website and IT systems.
Rights of the data subjects
In relation to the personal data processed under this privacy policy, you may exercise the following rights at any time:
- Access (art. 15 EU Regulation no. 2016/679) – the right to request and obtain from the Data Controller confirmation that the processing of your data is being carried out and access to the data concerning the data subject (including to know the purpose of the processing, the categories of data processed);
- Rectification (art. 16 EU Regulation no. 2016/679) – allows you to request the Data Controller to correct, modify, integrate your personal data;
- Erasure (art. 17 EU Regulation no. 2016/679) – allows you to obtain the deletion of your data without justified delay (“right to be forgotten”);
- Restriction (art. 18 EU Regulation no. 2016/679) – the right to obtain a limitation on the processing of the data subject's data, for example, in addition to the exercise of the right referred to in art. 16 for as long as necessary to ascertain the correctness of the data;
- Portability (art. 20 EU Regulation no. 2016/679) – allows the data subject to receive personal data concerning you and to transmit those data to another Data Controller;
- Objection to processing (art. 21 EU Regulation no. 2016/679) – allows the data subject to object to the processing of personal data.
The exercise of your rights can be exercised by written communication to be sent to the address: Piazza della Trivulziana 4/A Milan (20121), or by e-mail: privacy@italbiotec.it
Complaint
It should be noted that pursuant to art. 77 of EU Regulation no. 2016/679, the data subject may lodge a complaint with the Supervisory Authority in the event of a deemed violation of the current legislation on the protection of personal data.
Authority: Italian Data Protection Authority (GPDP)
Website: www.garanteprivacy.it
PEC: protocollo@pec.gpdp.it
Address: Piazza Venezia, 11 – 00187 Rome
Latest Version: 1.10.2026
In relation to the personal data processed under this privacy policy, you may exercise the following rights at any time:
- Access (art. 15 EU Regulation no. 2016/679) – the right to request and obtain from the Data Controller confirmation that the processing of your data is being carried out and access to the data concerning the data subject (including to know the purpose of the processing, the categories of data processed);
- Rectification (art. 16 EU Regulation no. 2016/679) – allows you to request the Data Controller to correct, modify, integrate your personal data;
- Erasure (art. 17 EU Regulation no. 2016/679) – allows you to obtain the deletion of your data without justified delay (“right to be forgotten”);
- Restriction (art. 18 EU Regulation no. 2016/679) – the right to obtain a limitation on the processing of the data subject's data, for example, in addition to the exercise of the right referred to in art. 16 for as long as necessary to ascertain the correctness of the data;
- Portability (art. 20 EU Regulation no. 2016/679) – allows the data subject to receive personal data concerning you and to transmit those data to another Data Controller;
- Objection to processing (art. 21 EU Regulation no. 2016/679) – allows the data subject to object to the processing of personal data.
The exercise of your rights can be exercised by written communication to be sent to the address: Piazza della Trivulziana 4/A Milan (20121), or by e-mail: privacy@italbiotec.it
Complaint
It should be noted that pursuant to art. 77 of EU Regulation no. 2016/679, the data subject may lodge a complaint with the Supervisory Authority in the event of a deemed violation of the current legislation on the protection of personal data.
Authority: Italian Data Protection Authority (GPDP)
Website: www.garanteprivacy.it
PEC: protocollo@pec.gpdp.it
Address: Piazza Venezia, 11 – 00187 Rome
Latest Version: 1.10.2026