PRIVACY POLICY

Website of the project ‘CIRCULAR.BUILDINGS: TOOLS FOR CROSS-BORDER CIRCULAR CONSTRUCTION’

Information provided pursuant to European Regulation 2016/679 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and pursuant to Articles 13-14 of Legislative Decree 196/2003 ‘Personal Data Protection Code’ and subsequent amendments (Legislative Decree 101/2018).

1. DATA CONTROLLER

The Data Controller is ECIPA scarl, with registered office in Via della Pila, 3/b – 30175 Marghera (VE).

Contact details: Tel. 041.928638 / 041.5382462 – E-mail :info@ecipa.eu

2. DATA CONTROLLERS AND PROCESSORS
The updated list of data processors and persons in charge of processing is kept at the registered office of the Data Controller.

3. PURPOSE AND LEGAL BASIS OF THE PROCESSING

Personal data collected through this website is processed for the following purposes:

a) Website navigation: navigation data (IP address, browser, operating system, pages visited) is collected automatically to enable the technical functioning of the website. Legal basis: legitimate interest of the Data Controller (Art. 6, para. 1, letter f) GDPR).

b) Contact requests: data provided voluntarily via contact forms is processed in order to respond to user requests. Legal basis: request of the data subject (Art. 6, para. 1, letter b) GDPR).

c) Registration to the Network/Innovations: the data of companies that register to the NETWORK and INNOVATIONS sections are processed for the management of participation in the project network and, subject to specific consent, for publication on the website. Legal basis: request of the data subject (Art. 6, para. 1, letter b) GDPR).

d) Analytical cookies: subject to consent, for anonymous statistical analysis of browsing. Legal basis: consent of the data subject (Art. 6, para. 1, letter a) GDPR). For more information, please refer to the Cookie Policy.

4. TYPES OF DATA PROCESSED

Browsing data: IP address, browser type, operating system, pages visited, date and time of access.

Data provided voluntarily: first name, last name, company name, email address, telephone number, and other data that may be entered in contact or registration forms.

No data belonging to special categories (Art. 9 GDPR) is collected.

5. METHOD OF PROCESSING
Personal data collected during navigation will be processed in compliance with the aforementioned legislation and the confidentiality obligations to which the Data Controller and/or Data Processors are bound. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorised access. The data will be processed using IT tools, on paper and on any other suitable medium, in compliance with the appropriate security measures pursuant to Article 5(1)(f) of the GDPR.

How to exercise your rights

You may exercise your rights at any time by sending:

– a registered letter with return receipt to ECIPA Scarl, with registered office in Via della Pila, 3/b – 30175 Marghera (VE);

– an e-mail to privacy@ecipa.eu

6. DATA RECIPIENTS

The data may be disclosed to: project partners, technical and IT service providers appointed as Data Processors pursuant to Article 28 of the GDPR, public authorities for legal obligations. The data of companies registered with the Network may be published on the website with the specific consent of the data subject.

7. DATA TRANSFER

Personal data is stored on servers located within the European Union. No transfer of data to third countries or international organisations is envisaged.

8. STORAGE PERIOD

Personal data will be stored for the time necessary to achieve the purposes for which it was collected, unless otherwise required by law.

- Logs and technical data: for the time strictly necessary for technical and security purposes, unless it is necessary to investigate illegal activities (no longer than 6 months).

- Requests from the Contact Us form: for the time necessary to manage the request and, subsequently, for any administrative archiving obligations/needs (no longer than 5 years).

- Network/Directory files (if active): until a request for removal/update is made or for the time necessary to keep the platform up to date; in the event of termination of the service/project, in accordance with project policies and reporting obligations (no longer than 10 years).

9. RIGHTS OF THE DATA SUBJECT

Pursuant to Articles 15-22 of the GDPR, the data subject has the right to: access their personal data; obtain the rectification or erasure of such data; obtain the restriction of processing; object to processing; request data portability; withdraw consent at any time, without prejudice to the lawfulness of processing based on consent given prior to withdrawal; lodge a complaint with the Data Protection Authority.

Requests can be sent to: privacy@ecipa.eu

10. PROVISION OF DATA

The provision of data is optional. However, failure to provide the necessary data will make it impossible to use the requested services (e.g. response to contact requests, registration with the Network).

11. DATA PROTECTION OFFICER (DPO)

OTTO 20 Limited Liability Company, represented by Giuseppe Savi – Tel. +39 338 4473878 – E-mail: dpo@otto20.net

Last update: December 2025