Notice pursuant to Article 13 of European Regulation 679/2016 and consent

Under Article 13 of the European Regulation (EU) 2016/679 (hereafter GDPR), concerning the personal data you have provided, we hereby inform you of the following:

Data Controller and Data Protection Officer

The Data Controller is QuantaBrain s.r.l., located at Largo Padre Renzo Spadoni, 1, Pisa – 56126, Italy. The Data Controller can be contacted via email at info@quantabrain.org. The Data Controller has not appointed a Data Protection Officer (DPO).

Purpose of data processing

Your data will be processed to provide information about QuantaBrain, our services, and our products, as requested by you.
Personal data may be processed both via paper archives and computerized systems (including portable devices) and handled in ways strictly necessary to meet the indicated purposes.

Legal basis for processing

Consent is not required for processing the data you have provided to the Data Controller as it is solely useful for supplying the information you have requested, even for the future.

Data retention

The data you provide will be stored for a period of ten years, unless it is necessary to retain them further to defend or assert a right or to fulfill any further legal obligations or orders from Authorities.

Data communication

Your personal data will not be communicated to third parties.

Profiling and Data Dissemination

Your personal data are not subject to dissemination nor to any fully automated decision-making process, including profiling.

Data subject’s rights

Among the rights granted to you by the GDPR are the following:

• to request access to your personal data and information from the Data Controller; to correct inaccurate data or complete incomplete data; to delete personal data concerning you (if one of the conditions specified in Article 17, paragraph 1 of the GDPR occurs and in compliance with the exceptions provided in paragraph 3 of the same article); to restrict the processing of your personal data (upon the occurrence of one of the hypotheses indicated in Article 18, paragraph 1 of the GDPR);
• to request and receive from the Data Controller your personal data in a structured, commonly used, and machine-readable format, also to transmit those data to another data controller (the right to data portability);
• to object at any time to the processing of your personal data in the occurrence of particular situations that concern you;
• to withdraw consent at any time, limited to the cases where the processing is based on your consent for one or more specific purposes and concerns common personal data (for example date and place of birth or place of residence), or particular categories of data (for example data that reveal your ethnic origin, political opinions, religious beliefs, health status or sex life). However, processing based on consent carried out before the withdrawal of consent remains lawful;
• to lodge a complaint with a supervisory authority (Data Protection Authority – www.garanteprivacy.it).