Syschemiq policies and tools to enhance plastic waste: Turning waste into opportunity | march, 12th 2025

Pursuant to and for the purposes of Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, as well as on the free movement of such data (General Data Protection Regulation, hereinafter also referred to as the "Regulation" or "GDPR"), which repeals Directive 95/46/EC, we inform you that the personal data voluntarily provided by you to Lombardy Energy Cleantech Cluster will be processed in compliance with the current legislation on personal data protection and, in any case, in accordance with the principles of confidentiality that inspire the association's activities.

1. Data Controller

The Data Controller is LOMBARDY ENERGY CLEANTECH CLUSTER - LE2C (Tax Code 92040690155), with registered office in Milan (MI) at Via Pantano, 9, postal code 20122, Telephone: +39 02 58370814, e-mail: info@energycluster.it (hereinafter “LE2C”).

2. Types of Data

According to Article 4 of the Regulation, "personal data" means "any information relating to an identified or identifiable natural person." According to Article 9, paragraph 1 of the Regulation, "special categories of personal data" include data that "reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data concerning health, or data concerning a person's sex life or sexual orientation."

In this context, "personal data" refers to any information that concerns and can be linked to you (hereinafter the "Data").

Specifically, the following data will be processed:

• Data collected at the time of event registration. Your identification data, including name, surname, email address, and company, will be requested.

• Data collected through video recordings, audio recordings, and photographs. Videos, voice recordings, and images may be collected depending on the type of event organized.

Purposes and Legal Bases for Processing

Your personal data will be processed for the following purposes and based on the legal grounds indicated below:

1. The processing is aimed at managing invitations, event registration, sending organizational communications, access control, and participation in the event; the legal basis for this purpose is the necessity of processing for the conclusion and proper execution of the contract in which the data subject is involved and/or for the execution of pre-contractual measures requested by the data subject, as provided by Article 6, paragraph 1, letter b) of the GDPR;

2. The processing is aimed at communication with association partners who collaborated in organizing the event, exclusively to fulfill reporting obligations where required; aggregated data may always be shared for statistical purposes. The legal basis is the necessity to comply with a legal obligation to which the Data Controller and/or the partner involved in organizing the event is subject, as per Article 6, paragraph 1, letter c) of Regulation (EU) 2016/679;

3. The processing is aimed at the possible publication and/or dissemination of videos, voice recordings, and images in any form, for informational and/or promotional purposes, on the association’s website, printed materials, or any other media (depending on the type of event organized) to document the event and promote LE2C's activities. The legal basis for this processing is the legitimate interest of the Data Controller to document the event and promote its activities, as provided by Article 6, paragraph 1, letter f) of the GDPR;

4. The processing is aimed at sending emails and/or newsletters and communications regarding the services and activities offered and promoted by the Data Controller, of the same type previously used by the data subject, unless the data subject objects at any time. The legal basis for this processing is the legitimate interest of the Data Controller as per Article 6, paragraph 1, letter f) of the GDPR.

5. Nature of Data Provision and Consequences of Refusal

With reference to purposes 1, 2, and 3 of section 3 above, providing your Data is necessary for participation in the event and for reporting obligations by association partners who collaborated in organizing the event to the managing authority. Therefore, refusal to provide your Data will prevent your participation in the event.

With reference to purpose 4 of section 3, providing your Data is optional. Refusal will not prevent you from participating in the event but will prevent LE2C from processing your Data to send communications about similar events and services you have previously used.

6. Processing Methods

In compliance with Article 5 of the Regulation, personal data will be:

(i) processed lawfully, fairly, and transparently; (ii) collected for specified, explicit, and legitimate purposes and processed accordingly; (iii) adequate, relevant, and limited to what is necessary; (iv) accurate and, where necessary, updated; (v) processed in a way that ensures appropriate security; (vi) stored in a form that allows identification of the data subject for no longer than necessary for the purposes for which they are processed.

Processing will be carried out manually and/or through IT and telematic tools, ensuring security, integrity, and confidentiality, in compliance with applicable regulations.

LE2C highlights that event registration Data is processed through Eventbrite, an event management platform by Eventbrite. By registering for the event, you consent to your Data being stored on Eventbrite’s servers.

For newsletters, LE2C uses MailChimp, a communication platform by MailChimp. By subscribing to the newsletter, you also consent to your Data being stored on MailChimp’s servers.

7. Data Communication and Disclosure

Your Data may be communicated:

• to internal association personnel authorized to manage requested services;

• to specifically designated Data Processors;

• to association partners involved in organizing the event.

Your Data (videos, audio recordings, images) may also be published on the association’s website, social media (Facebook, YouTube, LinkedIn, Instagram, Twitter), or any other dissemination media. The Data Controller ensures that no use will be made that may harm the dignity, honor, reputation, and/or decorum of the person portrayed.

8. Data Retention Period

Personal Data will be retained only for as long as necessary to achieve the processing purposes, including the retention period required by applicable law, and in any case, for a maximum of 10 years after the termination of our relationship, unless required for legal defense.

9. Data Subject Rights

Under Articles 15 and following of Regulation (EU) 2016/679, you may exercise the following rights:

• Request confirmation of the existence of your Personal Data (right of access);

• Know its origin;

• Receive understandable communication about it;

• Obtain information on processing logic, methods, and purposes;

• Request updates, rectifications, integrations, deletions, anonymization, or blocking of unlawfully processed data;

• Exercise all other rights recognized by applicable law.

Requests can be made by contacting the Data Controller at the addresses provided above.

11. Complaints

If you believe your Data has been processed in violation of the Regulation, you have the right to lodge a complaint with the Data Protection Authority or take legal action.

12. Data Transfer Abroad

Personal Data will be processed within the European Economic Area (EEA). If transferred to non-EEA countries without an adequacy decision by the European Commission, appropriate safeguards will be applied, such as Standard Contractual Clauses.

13. Automated Decision-Making

Your Data will not be subject to automated decision-making processes.