Privacy Policy

Information on the processing of personal data of users who consult the website https://www.radica.earth/

The website https://www.radica.earth/ (the "Website") is owned by Alberami S.r.l. Società Benefit, which has acquired Esférico MRV Systems S.L. and, together with it, operates under the Radica brand through this Website. This privacy notice explains how personal data collected through the Website is processed.

In compliance with Article 13 of Regulation (EU) 2016/679 (the "GDPR") and the applicable cookie and tracking tools rules, we provide below the information relating to the processing of personal data collected through the Website.

1. DATA CONTROLLER

The Data Controller is the Alberami S.r.l. Società Benefit with registered office in Via Padre Bernardo Paoloni 10 - 73100 Lecce (LE), VAT number 05148380750, email: info@alberami.it certified email (PEC) Alberami@pec.it, and telephone number: +39 0832 1827840. Any requests for information regarding the processing of personal data or the exercise of your rights under the GDPR may be sent to dpo@radica.earth.

2. NATURE OF DATA PROVISION

To make use of the services offered through the Website, the user may be required to provide personal data necessary to ensure the use of such services. In particular, for the completion of forms on the Website, the provision of data marked with an asterisk (*) is necessary for managing and responding to user requests. It should be noted, however, that the user is free to provide the requested data, as there is no legal obligation to provide them. However, failure to provide the data indicated as necessary will make it impossible for the Data Controller to provide the requested service.

3. TYPES OF DATA PROCESSED – PURPOSES AND LEGAL BASIS OF THE PROCESSING

The Website processes the following categories of personal data:

• browsing and usage data collected through cookies and similar technologies, where applicable;
• personal data voluntarily provided by the user through forms, email messages, or other contact channels.

Users are responsible for any personal data of third parties that they disclose through the Website and confirm that they are entitled to communicate such data to the Data Controller.

3.1 Browsing and usage data

The computer systems and software procedures used to operate the Website automatically acquire certain personal data, the transmission of which is inherent in the use of Internet communication protocols.

These data are processed for purposes related to the provision of services offered through the Website, including ensuring the proper functioning of the services themselves.

This category of data includes:

• Visitor's IP address;
• Date and time of access;
• Page viewed;
• Referring page, if any;
• Browser and operating system used.

These are not collected to be associated with identified individuals, but by their very nature, they could allow the identification of users through processing and association with data held by the Data Controller or by third parties.

Browsing and usage data are processed for the following purposes:

• Ensuring the proper functioning of the Website and the usability of its services, including the display of content on external platforms and interaction with social networks and external platforms;
• Obtaining aggregate and anonymized statistical information about the use of the Website (e.g., most visited pages, number of visitors per hour or day, geographical areas of origin, etc.);
• Protecting our systems from possible cyber attacks.

In relation to such data, the legal basis for processing can be found, depending on the cases, in the performance of a contract of which the data subject is a party (pursuant to Article 6, paragraph 1, letter b) of the GDPR) or in the pursuit of a legitimate interest of the Controller (pursuant to Article 6, paragraph 1, letter f) of the GDPR).

For more information on the collection, use, and retention periods of navigation data, please refer to the cookie policy available on the website https://www.radica.earth/ .

3.2 Personal data provided by the data subject

Personal data voluntarily provided by the user through forms available on certain sections of the Website or by sending emails to the addresses indicated or made available through links on the Website are processed by the Controller for purposes related to managing and responding to the user's requests, as well as for providing the services offered through the Website.

In particular, the personal data provided by the data subject may be processed for the following purposes:

• a) to handle requests submitted by the user through the voluntary sending of emails to the addresses indicated on the Website, including the sender's email address and any other personal data contained in the message, in order to carry out the necessary activities to respond to the request;
• b) to manage requests submitted through the Website's contact forms, in order to provide information about Radica's services, business opportunities, and potential partnerships;
• c) where the user has given prior consent, to send periodic newsletter and/or informational communications about events, webinars, projects, and other initiatives of Radica.

The legal basis for the processing under points a) and b) is the performance of pre-contractual measures at the request of the data subject pursuant to Article 6(1)(b) GDPR, and, where applicable, the legitimate interest of the Controller pursuant to Article 6(1)(f) GDPR. The legal basis for processing under point c) is the data subject's consent pursuant to Article 6(1)(a) GDPR.

Specific information may be published on the Website's pages or on external platforms accessible through the Website, established to provide certain services or to participate in specific initiatives promoted by the Controller, including in collaboration with external partners (webinars, events, training initiatives, etc.).

4. MODALITIES OF THE PROCESSING

Personal data are processed using paper and/or electronic tools, by persons authorized to act under the direct authority of the Controller and in accordance with its instructions, in a manner strictly related to the purposes stated in this notice and designed to ensure the security and confidentiality of the data. The Controller and, where applicable, its processors implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access. These measures are regularly reviewed and updated in light of the nature of the data processed, the risks involved, and the state of the art.

5. DATA RETENTION

In accordance with Article 5(1)(e) GDPR, personal data are retained for no longer than is necessary for the purposes for which they were collected and subsequently processed, unless a longer retention period is required by law. In particular:

• personal data submitted through the optional and voluntary sending of emails to the addresses indicated on the Website are retained for the time necessary to handle and respond to the relevant request;
• personal data provided for newsletter subscription are retained for as long as the user remains subscribed to the service, and in any case until the user withdraws consent or unsubscribes, without prejudice to any legal retention obligation.

Where personal data are no longer necessary, they will be deleted, anonymized, or otherwise securely archived where required for legal compliance or the establishment, exercise, or defense of legal claims.

6. RECIPIENTS OF PERSONAL DATA

Personal data may be disclosed to:

• Authorized collaborators and employees of the Controller, within the scope of their respective duties;
• Providers of services offered through the Website or related to its functioning, who act as Data Processors pursuant to Article 28 of Regulation (EU) 2016/679, including:
  • Esférico MRV Systems S.L. for website management and technical support. It may also access and handle personal data as an authorized person acting under the direct authority of the Controller, solely for the purpose of following up contacts and requests in accordance with the Controller's documented instructions;
  • Vercel for hosting services;
  • Google Analytics to measure, collect, analyze and report on website visitors, while maintaining their anonymity and without any profiling activity, in order to understand and optimize our Website.

Further recipients of personal data collected through the Website, or in connection with specific services made available through external platforms accessible from the Website, will be identified in the relevant privacy information notices provided for those services. Personal data may also be disclosed where required by law or upon request of competent judicial or public security authorities.

7. TRANSFER OF DATA ABROAD

Personal data will not be transferred abroad to countries or international organizations outside the European Union that do not guarantee an adequate level of protection recognized under Article 45 of the GDPR, based on an adequacy decision of the EU Commission. In case it becomes necessary for the provision of Website services, the transfer of personal data to countries or international organizations outside the EU, for which the Commission has not adopted any adequacy decision under Article 45 of the GDPR, will only take place if adequate safeguards are provided by the recipient country or organization, in accordance with Article 46 of the GDPR, and provided that data subjects have enforceable rights and effective remedies. In the absence of an adequacy decision of the Commission under Article 45 of the GDPR, or adequate safeguards under Article 46 of the GDPR, including binding corporate rules, cross-border transfers will only take place if one of the conditions indicated in Article 49 of the GDPR is met.

8. RIGHTS OF THE DATA SUBJECT

Pursuant to Articles 15 et seq. of Regulation (EU) 2016/679, the data subject may exercise the following rights at any time: access to personal data and obtain a copy of it; rectification of inaccurate data or completion of incomplete data; erasure of personal data in the cases provided for by Article 17 GDPR; restriction of processing in the cases provided for by Article 18 GDPR; objection, at any time, on grounds relating to the data subject's particular situation, to the processing of personal data concerning them, where the processing is based on Article 6(1)(e) or (f) GDPR; and, where applicable, data portability.

9. EXERCISE OF RIGHTS

To exercise these rights, the data subject may contact the Controller at dpo@radica.earth and, if applicable, the certified email address Alberami@pec.it. Before providing any information or making any changes, the Controller may need to verify the identity of the data subject. The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) under Article 77 GDPR.