Information pursuant to Article 13 of EU Regulation n. 2016/679

Pursuant to art. 13 of the EU Regulation No 2016/679 (hereinafter “GDPR 2016/679”), laying down provisions for the protection of individuals with particular regard to the processing of personal data, we are pleased to inform you that the personal data provided will be processed in compliance with the European legislation and the obligations of confidentiality which is required acube SB srl. Data Controller: acube SB srl, acube SB srl, via Ampère 61/a – 20133 Milano e-mail

1. Typology of Data

For the realization of initiatives related to the acceleration program Faros, it will be necessary to collect some personal data relating to stakeholders, such as name, surname, e-mail address, telephone number, professional position.

The processing will not concern data of a sensitive nature, pursuant to art. 9 Chapter I (“special categories of personal data”) of the Regulation (i.e. those data “…capable of revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical, political or trade union, as well as personal data disclosing health and sex life”).

2. Legal basis and purpose of processing

The processing of personal data is strictly related to the implementation of the program of acceleration data are processed exclusively for the performance of the above initiative and as well as for the purpose of the exact fulfillment of all legal obligations imposed by national and EU regulations.

Personal data may be legitimately used by the Data Controller in order to fulfil legal obligations and/or requests by Public Authorities to which they are subject or, again, in cases where the processing is necessary for the protection of the rights of the Data Controller and/or their assignees/defendants. Finally, on the basis of the Purposes of the processing, the Data Controller shall be responsible for sharing the Data provided by the startups with the Corporate and Technical Partners of the Program.

Data will be used for advertising and promotional activities, after explicit consent, in order to send promotional communication, direct offers and newsletters about services, future initiatives, and next events organized and sponsored by a|cube through traditional methods, by using the telephone operator and paper mail, and/or also through automated systems (e-mail, sms, mms, fax).

Data will be stored in a|cube platform/repository in order to permit them to analyze data and potentially get in contact with the data owners.

3. Processing method

The processing of your personal data is carried out with the aid of electronic means with appropriate measures to ensure the security of personal data, aimed at preventing unauthorized access, loss or destruction, in accordance with the provisions of Chapter II (Principles) and Chapter IV (Data Controller and Data Processor) of the GDPR.

4. Obligatory nature of the conferment

The conferment of personal data is necessary, a refusal will make it impossible to handle the request made through the contact form. For treatments that require consent, the interested party may at any time change it by contacting the Owner.

5. Transfer of data

4.1. National

Personal data will be processed by collaborators and/or employees of acube in their capacity as authorized subjects for processing, within the scope of their respective functions and according to the instructions given by acube.

In addition, the data may be processed by external legal or natural persons who may need to be involved in the management of the initiative or for organizational needs of the activities (e.g. suppliers of IT services, consulting companies). These individuals are appointed, where appropriate, as external data processors.

4.2 International

Personal data are stored on servers located in Italy. It is in any case understood that the Owner, if necessary, will have the right to move the servers outside the EU. In this case, the Owner assures as of now that the transfer of data outside the EU will be in accordance with the applicable provisions of law and in particular those referred to in Title V of the GDPR. Or subject to the signing of standard contractual clauses approved and adopted by the European Commission.

Apart from the above, the data provided will not be transferred outside the EU.

6. Period of data retention

Your data will be kept for the period necessary to achieve the purposes for which they were acquired, in accordance with the regulations of the sector and in any case no longer than 3 years from the date on which the data was provided.

7. Rights of the interested party

You have the right at any time to know the data that concerns you, to know how it was acquired, to verify whether it is accurate, complete, updated and well kept, to request its correction or cancellation under Articles. 16 and 17 GDPR. You will also have the right to receive the personal data provided by you and processed with your consent, in a structured, commonly used and machine-readable format and to revoke at any time any consent you may have given regarding the processing of your data. These rights may be exercised through a specific request to be addressed by registered letter or email to the data controller.

It also has the right to complain to the Guarantor for the Protection of Personal Data.

The Data Controller