Privacy Policy of Elide – Contemporary Laboratory

This website collects some Personal Data from its Users.

Data Controller
Elide – Contemporary Laboratory
Via San Vincenzo, 26/4 16121
Genova GE – Italy
Controller’s email address: info@elidelab.com

Types of Data collected
Among the Personal Data collected by this website, either independently or through third parties, there are: Cookies; Usage Data; first name; last name; email address; phone number.

Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific informational texts displayed before the data collection itself. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically while using this website. Unless otherwise specified, all Data requested by this website is mandatory. If the User refuses to provide them, this website may be unable to provide the Service. In cases where this website indicates some Data as optional, Users are free to refrain from communicating such Data without it affecting the availability or operation of the Service. Users who have doubts about which Data are mandatory are encouraged to contact the Controller.

Any use of Cookies – or other tracking tools – by this website or by third-party service providers used by this website, unless otherwise specified, is for the purpose of providing the Service requested by the User, in addition to any other purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for third-party Personal Data obtained, published, or shared through this website and guarantees that they have the right to communicate or disclose them, releasing the Controller from any liability to third parties.

Methods and Place of Data Processing

Processing methods
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction of Personal Data. Processing is carried out using computerized and/or telematic tools, with organizational methods and logics strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other subjects involved in the organization of this website (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, also as Data Processors if necessary, appointed by the Data Controller. The updated list of Data Processors can always be requested from the Data Controller.

Legal basis for processing
The Data Controller processes Personal Data concerning the User if one of the following conditions exists:
– The User has given consent for one or more specific purposes; Note: in some jurisdictions, the Data Controller may be authorized to process Personal Data without the User’s consent or another legal basis specified below, until the User objects (“opts-out”) to such processing. This is not applicable, however, if the processing of Personal Data is regulated by European legislation concerning the protection of Personal Data.
– Processing is necessary for the performance of a contract with the User and/or for pre-contractual measures;
– Processing is necessary to comply with a legal obligation to which the Data Controller is subject;
– Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
– Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.

However, the User can always request the Data Controller to clarify the specific legal basis for each processing, particularly whether the processing is based on law, required by a contract, or necessary to conclude a contract.

Location
The Data is processed at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located. For more information, please contact the Data Controller. The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the location of the processing, the User can refer to the section related to the details of the processing of Personal Data.

The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization governed by public international law or consisting of two or more countries, such as the UN, as well as the security measures taken by the Data Controller to protect the Data.

The User can verify whether any of the described transfers take place by examining the section of this document regarding the details of the processing of Personal Data or by requesting information from the Data Controller using the contact details provided at the beginning.

Retention period
The Data is processed and stored for the time required by the purposes for which it was collected. Therefore:
– Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until such contract has been fully performed.
– Personal Data collected for purposes related to the legitimate interests of the Data Controller will be retained until such interests are fulfilled. The User can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
– When processing is based on the User’s consent, the Data Controller may retain Personal Data longer until such consent is revoked. Additionally, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, Personal Data will be deleted. Therefore, upon expiration of this period, the right to access, delete, rectify, and the right to data portability cannot be exercised anymore.

Purposes of Data Processing

The User’s Data is collected to allow the Data Controller to provide the Service, comply with legal obligations, respond to requests or executive actions, protect its rights and interests (or those of Users or third parties), identify fraudulent or malicious activities, as well as for the following purposes: Statistics, Contacting the User, Tag Management, Interaction with social networks and external platforms, Contact Management and sending messages, User database management, Payment processing, and Displaying content from external platforms.

For detailed information about the purposes of the processing and the Personal Data processed for each purpose, the User can refer to the section “Detailed information on the processing of Personal Data.”

Details on the Processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Contacting the User

Contact form (this website)
By filling in the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by the form’s header.
Processed Personal Data: last name; email address; first name.
Category of Personal Data collected under CCPA: identifiers.

Mailing list or newsletter (this website)
By subscribing to the mailing list or newsletter, the User’s email address is automatically added to a list of contacts to whom email messages containing information, including commercial and promotional information, regarding this website may be sent. The User’s email address may also be added to this list as a result of registering on this website or after making a purchase.
Processed Personal Data: last name; email address; first name; phone number.
Category of Personal Data collected under CCPA: identifiers.

Contact Management and sending messages
These types of services enable the Data Controller to build user profiles based on an email address, name, or any other information that the User provides to this website, as well as to track User activities through statistical functionalities. This Personal Data may also be cross-referenced with publicly available User information (such as social network profiles) and used to create private profiles that the Data Controller can view and use to improve this website.
Some of these services may also allow scheduled messages to be sent to the User, such as emails based on specific actions taken on this website.

SendinBlue Marketing Automation (SendinBlue SAS)
SendinBlue is a User database management service provided by SendinBlue SAS.
Processed Personal Data: Cookies; Usage Data; email address.
Processing Location: France – Privacy Policy.
Category of Personal Data collected under CCPA: identifiers; internet information.
This type of processing constitutes a “sale of data” under CCPA. In addition to the information contained in this clause, the User can refer to the section describing the rights of Californian consumers for information on opting out of the sale.

User database management
These types of services enable the Data Controller to build user profiles based on an email address, name, or any other information that the User provides to this website, as well as to track User activities through statistical functionalities. This Personal Data may also be cross-referenced with publicly available User information (such as social network profiles) and used to create private profiles that the Data Controller can view and use to improve this website.
Some of these services may also allow scheduled messages to be sent to the User, such as emails based on specific actions taken on this website.

SendinBlue Marketing Automation (SendinBlue SAS)
SendinBlue is a User database management service provided by SendinBlue SAS.
Processed Personal Data: Cookies; Usage Data; email address.
Processing Location: France – [Privacy Policy](link).
Category of Personal Data collected under CCPA: identifiers; internet information.
This type of processing constitutes a “sale of data” under CCPA. In addition to the information contained in this clause, Users can refer to the section describing the rights of Californian consumers for information on opting out of the sale.

Payment processing
Unless otherwise specified, this website processes all payments via credit card, bank transfer, or other means through external payment service providers. In general, and unless otherwise specified, Users are requested to provide payment details and personal information directly to these payment service providers. This website is not involved in the collection and processing of such information: it will only receive notification from the respective payment service provider regarding the completed payment.

PayPal (Paypal)
PayPal is a payment service provided by PayPal Inc., allowing the User to make online payments.
Processed Personal Data: Various types of Data as specified in the service’s privacy policy.
Processing Location: Refer to PayPal’s [Privacy Policy](link).
Category of Personal Data collected under CCPA: internet information.

Tag Management
These services are used for the centralized management of tags or scripts used on this website. The use of these services involves the flow of User Data through them and, if necessary, their retention.

Google Tag Manager (Google Ireland Limited)
Google Tag Manager is a tag management service provided by Google Ireland Limited.
Processed Personal Data: Usage Data.
Processing Location: Ireland – [Privacy Policy](link). Subject to Privacy Shield.
Category of Personal Data collected under CCPA: internet information. This type of processing constitutes a “sale of data” under CCPA.

Interaction with social networks and external platforms
This type of service allows interactions with social networks or other external platforms directly from the pages of this website. The interactions and information acquired by this website are in any case subject to the User’s privacy settings for each social network. This type of service may collect traffic data for the pages where the service is installed, even when Users do not use it.

Facebook Like button and social widgets (Facebook, Inc.)
The Facebook Like button and social widgets are services for interacting with the Facebook social network, provided by Facebook, Inc.
Processed Personal Data: Cookies; Usage Data.
Processing Location: United States – [Privacy Policy](link). Subject to Privacy Shield.

Twitter Tweet button and social widgets (Twitter, Inc.)
The Twitter Tweet button and social widgets are services for interacting with the Twitter social network, provided by Twitter, Inc.
Processed Personal Data: Cookies; Usage Data.
Processing Location: United States – [Privacy Policy](link). Subject to Privacy Shield.

AddThis (Oracle Corporation)
AddThis is a service provided by Oracle Corporation, displaying a widget allowing interaction with social networks and external platforms for sharing content from this website. Depending on the configuration, this service may display widgets belonging to third parties, such as social network managers, to share interactions. In this case, the third parties providing the widget will also be aware of the interaction and Usage Data concerning the pages where this service is installed.

Statistics

The services in this section enable the Data Controller to monitor and analyze traffic data, keeping track of User behavior.

Google Analytics (Google Ireland Limited)
Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”). Google uses Personal Data collected to track and examine the use of this website, compile reports, and share them with other Google services. Google might use Personal Data to contextualize and personalize ads within its advertising network.

Processed Personal Data: Cookies; Usage Data.
Processing Location: Ireland – [Privacy Policy](link) – [Opt Out](link). Subject to Privacy Shield.
Category of Personal Data collected under CCPA: internet information. This type of processing constitutes a “sale of data” under CCPA.

Displaying content from external platforms

Google Fonts (Google Ireland Limited)
Google Fonts is a font style display service managed by Google Ireland Limited that allows this website to integrate such content within its pages.

Processed Personal Data: Usage Data; various types of Data as specified in the service’s privacy policy.
Processing Location: Ireland – [Privacy Policy](link). Subject to Privacy Shield.
Category of Personal Data collected under CCPA: internet information. This type of processing constitutes a “sale of data” under CCPA.

Font Awesome (Fonticons, Inc.)
Font Awesome is a font style display service managed by Fonticons, Inc. allowing this website to integrate such content within its pages.

Processed Personal Data: Usage Data.
Processing Location: United States – [Privacy Policy](link).
Category of Personal Data collected under CCPA: internet information. This type of processing constitutes a “sale of data” under CCPA.

Additional information on Personal Data

Sale of goods and services online
The Personal Data collected is used to provide services to the User or for selling products, including payment and potential delivery. The Personal Data collected for payment processing may include credit card details, the bank account used for a transfer, or other payment methods. Payment Data collected by this website depends on the payment system used.

User rights
Users can exercise specific rights regarding their Data processed by the Data Controller. In particular, the User has the right to:

– Withdraw consent at any time.
– Object to the processing of their Data.
– Access their Data.
– Verify and seek rectification.
– Obtain the restriction of processing.
– Request erasure of their Personal Data.
– Receive their Data or have it transferred to another controller.
– Lodge a complaint.

Details about the right to object
When Personal Data is processed for public interest, in the exercise of public authority vested in the Data Controller, or for the purposes of legitimate interests pursued by the Data Controller, Users have the right to object to such processing for reasons related to their particular situation. Users can also oppose processing for direct marketing purposes without providing any reason.

How to exercise these rights
To exercise User rights, Users can send a request to the contact details of the Data Controller specified in this document. Requests are processed free of charge and by the Data Controller as soon as possible, within one month in any case.