pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR) regarding the processing of personal data
With this notice, Consorzio Campus Bio-Medico S.c.r.l. wishes to explain to all users what data and information are collected during navigation on the website www.kaleidostory.com (hereinafter the “Website”), which is aimed at conveying, in a simplified manner, current and multidisciplinary topics (art and culture, family and society, environment, technology, education and work, etc.), as well as the measures taken to keep the information secure.
The data processed are those provided by the user during navigation on the Website, as well as during the completion of the registration form on the Website and newsletter subscription.
By browsing the website www.kaleidostory.com, the user will be able to access certain additional features on the platform (e.g., modifying preferences related to thematic areas) but must first register on the Website by creating a personal account that they can manage autonomously.
The user may also decide to subscribe to the Kaleidostory newsletter, with the option to select the topics of their interest, which will guide the content of the newsletter they receive.
The data collected are first name, last name, email address, as well as navigation data; during the registration form the user may choose whether or not to provide additional data such as phone number, date of birth, gender, profession, country, city, and region of residence/domicile.
For processing related to navigation data, please refer to the cookie policy available on the website.
Every processing activity must be based on an appropriate legal basis, taking into account the purposes for which the personal data are processed.
The following table aims to clearly and concisely represent the purposes and legal bases of the processing carried out during the ongoing relationship with the users of the website www.kaleidostory.com
Processing
Purpose of the Processing Activity
Legal Basis
Retention Period
a) Registration and management of the personal profile
The website www.kaleidostory.com collects user data through the completion of a registration form for the creation of the user's personal account. No particularly sensitive data is sent or requested.
The collected data are retained for as long as the user remains registered on the Website and are deleted once a period of 1 (one) year has elapsed following the user's unsubscription from the Website and the subsequent deletion of the personal account.
b) Newsletter
The website www.kaleidostory.com allows the user to subscribe to the Kaleidostory newsletter. Following the newsletter subscription, by accessing their personal profile, the user can personalize the newsletter by selecting the topics of interest that will guide the content of the newsletter they receive. In this regard, the Data Controller does not perform any profiling activity of the user; in the scenario described above, it is the user who, during registration or profile modification, can autonomously express their preferences regarding the topics that will guide the content of the newsletter, without the intervention of automated processes.
The collected data are retained for as long as the user remains subscribed to the newsletter and until the user requests deletion.
c) Softspam
Where the requirements provided by the applicable regulations are met, the Consorzio reserves the right to send communications to those who have made a transaction (including donations) in favor of the Consorzio itself.
N.A
Please note that the consent referred to in letter b) of the table can be revoked at any time without affecting the processing carried out during its validity.
The user is in no way obligated to provide us with their personal data. However, the provision of the data necessary for the processing mentioned in letters a) and b) is required to enable us to satisfy the registration requests on the Website and subscription to the “Kaleido Story” newsletter.
The registered user on the Website will be able to access articles, interviews, and audio-video content from Kaleidostory related to current and multidisciplinary topics, such as art and culture, family and society, environment, technology, health, work, and education, etc.
Before proceeding with the collection of images, audio-video content, and written testimonials, the Consorzio provides the depicted and/or interviewed subject with a specific privacy notice regarding the processing of data related to images, audio-video content, and written testimonials concerning them, as well as a specific release for the use of the related rights.
Cookies are small text files that websites visited by users send to their devices, where they are stored to be then transmitted back to the same sites on subsequent visits.
In general, they can be installed:
Exactly, there are technical cookies (used to facilitate navigation), analytical cookies (used for statistical purposes), performance cookies, and profiling cookies (in order to monitor the user's behavior during navigation).
The website www.kaleidostory.com uses technical cookies, which are necessary for navigating within the Website as they allow the execution of essential functions such as authentication, validation, managing a navigation session, or fraud prevention (Legal basis: legitimate interest of the Controller);
In particular, the following types of cookies are used:
Name: persist:root
Expiration/Duration: no expiration date
Provider: kaleidostory
Category: Technical
Purpose: storage of anonymous token, storage of user data, storage of news and media saved by the user
Name: NEXT_LOCALE
Expiration/Duration: Session
Provider: kaleidostory
Category: Technical
Type: HTTP
Data sent in: EU Frankfurt
Purpose: stores the language in which the website is displayed
Name: viewport
Expiration/Duration: kaleidostory
Provider:kaleidostory
Category: Technical
Type: HTTP
Data sent in: EU Frankfurt
Purpose: stores the mode in which the site is visited, whether from a smartphone or a desktop
It is possible to disable/delete cookies using the most common browsers.
Chrome
Launch Chrome on your device.
At the top right, click the icon with three dots and then go to “Settings”.
In the window, at the bottom, click on “Advanced”.
Under the “Privacy and Security” section, click “Content Settings”.
Click on “Cookies”.
In this section you can disable all or only some cookies. More details at: https://support.google.com/accounts/answer/61416?hl=en
Mozilla Firefox
Launch Firefox on your device.
Click the “Menu” button (represented by a button with three parallel lines, located at the top right), and then select “Options”.
Select the “Privacy & Security” panel and then go to the “Cookies and Site Data” section.
In this section you can decide which cookies to receive and for how long to store them on your device. More details at: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Internet Explorer 10
Launch Internet Explorer.
Select the Tools button and then select Internet Options.
Select the Privacy tab, under Settings choose Advanced, and decide whether you want to allow, block, or be prompted for first or third party cookies. More details at: https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies
For further information regarding the processing of personal data, please consult the website's privacy policy.
Exclusively for the purposes indicated above, the user's data may be transmitted to:
AUTHORIZED PERSONS FOR PROCESSING: these are internal figures, specifically members, employees, and collaborators of the Consorzio, who collect or process the user's data in accordance with their respective duties and assigned profiles.
DATA PROCESSORS: these are third-party collaborators who process data on behalf of the Consorzio, through the stipulation of a specific appointment agreement as a Data Processor, which defines the operations delegated to the third party, as well as the security measures that must be adopted to best protect the information obtained from the Controller. In particular, they may process your data:
RECIPIENTS: these are those who receive personal data communications from the Controller, but who, as a result of such communication, act as independent Controllers. Among these:
Public administrations, agencies, and other authorities, in cases expressly provided for by law.
In any case, the user's data will not be transferred to countries outside the EU unless explicit consent is provided or the guarantees provided by the GDPR (adequacy decisions, signing of standard contractual clauses, etc.) are in place.
The list of third parties appointed as Data Processors is available to users at the premises, and can be provided to interested parties upon specific request.
The user shall always have the right to obtain from the Data Controller confirmation as to whether or not personal data concerning them are being processed and, if so, to obtain access to the personal data and the information specified in Art. 15 GDPR. Furthermore, the user is granted the right to obtain rectification, deletion, and restriction of the processing of their personal data held by the Controller. Finally, the user is granted the possibility to lodge a complaint with the supervisory authority of the Member State in which they reside/work or of the place where the alleged violation occurred.
Sincerely, Consorzio Campus Bio-Medico S.c.r.l.