Privacy Notice

Kaleido Story Privacy Notice

pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR) regarding the processing of personal data

With this notice, Consorzio Campus Bio-Medico S.c.r.l. wishes to explain to all users what data and information are collected during navigation on the website www.kaleidostory.com (hereinafter the “Website”), which is aimed at conveying, in a simplified manner, current and multidisciplinary topics (art and culture, family and society, environment, technology, education and work, etc.), as well as the measures taken to keep the information secure.

Data Controller

The Data Controller is Consorzio Campus Bio-Medico S.c.r.l., Tax Code and VAT number 17193741000, with registered office at Via Alvaro del Portillo, n. 21, 00128, Rome (hereinafter the “Controller” or the “Consorzio”), contactable via email at privacy@sccbm.it. In this capacity, the Consorzio decides which personal data to process, by which means, and for what purposes.
The Consorzio has appointed a Data Protection Officer (DPO), namely Avv. Diego Dimalta, who can be reached at the following email address: privacy@sccbm.it, and is available for all matters related to the processing of personal data and the exercise of rights provided by the GDPR.

Kaleido Story Data Processing

Types of Data Processed

The data processed are those provided by the user during navigation on the Website, as well as during the completion of the registration form on the Website and newsletter subscription.

By browsing the website www.kaleidostory.com, the user will be able to access certain additional features on the platform (e.g., modifying preferences related to thematic areas) but must first register on the Website by creating a personal account that they can manage autonomously.

The user may also decide to subscribe to the Kaleidostory newsletter, with the option to select the topics of their interest, which will guide the content of the newsletter they receive.

The data collected are first name, last name, email address, as well as navigation data; during the registration form the user may choose whether or not to provide additional data such as phone number, date of birth, gender, profession, country, city, and region of residence/domicile.

For processing related to navigation data, please refer to the cookie policy available on the website.

1. Website Registration and Newsletter Subscription and Softspam

Legal Bases, Purposes, and Retention

Every processing activity must be based on an appropriate legal basis, taking into account the purposes for which the personal data are processed.

The following table aims to clearly and concisely represent the purposes and legal bases of the processing carried out during the ongoing relationship with the users of the website www.kaleidostory.com

Processing

Purpose of the Processing Activity

Legal Basis

Retention Period

a) Registration and management of the personal profile

The website www.kaleidostory.com collects user data through the completion of a registration form for the creation of the user's personal account. No particularly sensitive data is sent or requested.

Execution of a contract to which the data subject is a party or execution of pre-contractual measures taken at the request of the data subject for the completion of the registration form and the management of the profile (Art. 6, para. 1, letter b, GDPR).

The collected data are retained for as long as the user remains registered on the Website and are deleted once a period of 1 (one) year has elapsed following the user's unsubscription from the Website and the subsequent deletion of the personal account.

b) Newsletter

The website www.kaleidostory.com allows the user to subscribe to the Kaleidostory newsletter. Following the newsletter subscription, by accessing their personal profile, the user can personalize the newsletter by selecting the topics of interest that will guide the content of the newsletter they receive. In this regard, the Data Controller does not perform any profiling activity of the user; in the scenario described above, it is the user who, during registration or profile modification, can autonomously express their preferences regarding the topics that will guide the content of the newsletter, without the intervention of automated processes.

Consent of the data subject for subscription to the Kaleidostory newsletter (Art. 6, para. 1, letter a, GDPR)

The collected data are retained for as long as the user remains subscribed to the newsletter and until the user requests deletion.

c) Softspam

Where the requirements provided by the applicable regulations are met, the Consorzio reserves the right to send communications to those who have made a transaction (including donations) in favor of the Consorzio itself.

• Pursuit of the legitimate interest of the data controller or third parties, provided that the interests or the fundamental rights and freedoms of the data subject, which require the protection of personal data, do not prevail (Art. 6, para. 1, letter f) and Art. 130 of the Privacy Code.

N.A

Please note that the consent referred to in letter b) of the table can be revoked at any time without affecting the processing carried out during its validity.

Consequences of Not Providing Data

The user is in no way obligated to provide us with their personal data. However, the provision of the data necessary for the processing mentioned in letters a) and b) is required to enable us to satisfy the registration requests on the Website and subscription to the “Kaleido Story” newsletter.

2. Articles, Interviews, and Audio-Video Content

The registered user on the Website will be able to access articles, interviews, and audio-video content from Kaleidostory related to current and multidisciplinary topics, such as art and culture, family and society, environment, technology, health, work, and education, etc.

Before proceeding with the collection of images, audio-video content, and written testimonials, the Consorzio provides the depicted and/or interviewed subject with a specific privacy notice regarding the processing of data related to images, audio-video content, and written testimonials concerning them, as well as a specific release for the use of the related rights.

The depicted subject may at any time exercise the rights provided in the “DATA SUBJECT RIGHTS” section of this privacy notice by sending a communication to the DPO appointed by the Consorzio at the email address privacy@sccbm.it.

3. Cookies

1. What are cookies?

Cookies are small text files that websites visited by users send to their devices, where they are stored to be then transmitted back to the same sites on subsequent visits.

In general, they can be installed:

  • directly by the owner and/or manager of the website (so-called first-party cookies);
  • by controllers other than the website visited by the user (so-called third-party cookies); information regarding their privacy and use can be found directly on the websites of their respective managers.

2. Are there different types of Cookies?

Exactly, there are technical cookies (used to facilitate navigation), analytical cookies (used for statistical purposes), performance cookies, and profiling cookies (in order to monitor the user's behavior during navigation).

3. Which Cookies does the website use?

The website www.kaleidostory.com uses technical cookies, which are necessary for navigating within the Website as they allow the execution of essential functions such as authentication, validation, managing a navigation session, or fraud prevention (Legal basis: legitimate interest of the Controller);

In particular, the following types of cookies are used:

Technical Cookies

  • Name: persist:root

    Expiration/Duration: no expiration date

    Provider: kaleidostory

    Category: Technical

    Purpose: storage of anonymous token, storage of user data, storage of news and media saved by the user

  • Name: NEXT_LOCALE

    Expiration/Duration: Session

    Provider: kaleidostory

    Category: Technical

    Type: HTTP

    Data sent in: EU Frankfurt

    Purpose: stores the language in which the website is displayed

  • Name: viewport

    Expiration/Duration: kaleidostory

    Provider:kaleidostory

    Category: Technical

    Type: HTTP

    Data sent in: EU Frankfurt

    Purpose: stores the mode in which the site is visited, whether from a smartphone or a desktop

4. How can I disable/delete cookies?

It is possible to disable/delete cookies using the most common browsers.

Chrome

  • Launch Chrome on your device.

  • At the top right, click the icon with three dots and then go to “Settings”.

  • In the window, at the bottom, click on “Advanced”.

  • Under the “Privacy and Security” section, click “Content Settings”.

  • Click on “Cookies”.

  • In this section you can disable all or only some cookies. More details at: https://support.google.com/accounts/answer/61416?hl=en

Mozilla Firefox

  • Launch Firefox on your device.

  • Click the “Menu” button (represented by a button with three parallel lines, located at the top right), and then select “Options”.

  • Select the “Privacy & Security” panel and then go to the “Cookies and Site Data” section.

  • In this section you can decide which cookies to receive and for how long to store them on your device. More details at: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Internet Explorer 10

  • Launch Internet Explorer.

  • Select the Tools button and then select Internet Options.

  • Select the Privacy tab, under Settings choose Advanced, and decide whether you want to allow, block, or be prompted for first or third party cookies. More details at: https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies

5. What are my rights as a user of the website?

Pursuant to San Marino or European privacy law, the user shall always have the right to obtain from the Data Controller confirmation as to whether or not personal data concerning them are being processed and, if so, to obtain access to the personal data and the information specified in the aforementioned article. Furthermore, the User is granted the right to obtain rectification, deletion, and restriction of the processing of the personal data held by the Controller. The possibility to lodge a complaint with the supervisory authority of the Member State in which they reside/work or where the alleged violation occurred is also recognized. To exercise these rights, simply contact the Data Controller at: privacy@sccbm.it

For further information regarding the processing of personal data, please consult the website's privacy policy.

Who We Share Data With

Exclusively for the purposes indicated above, the user's data may be transmitted to:

AUTHORIZED PERSONS FOR PROCESSING: these are internal figures, specifically members, employees, and collaborators of the Consorzio, who collect or process the user's data in accordance with their respective duties and assigned profiles.

DATA PROCESSORS: these are third-party collaborators who process data on behalf of the Consorzio, through the stipulation of a specific appointment agreement as a Data Processor, which defines the operations delegated to the third party, as well as the security measures that must be adopted to best protect the information obtained from the Controller. In particular, they may process your data:

  • companies and third-party professionals who provide consulting to the Data Controller;
  • other companies and professionals who carry out the maintenance and management of information systems, hosting providers, etc.

RECIPIENTS: these are those who receive personal data communications from the Controller, but who, as a result of such communication, act as independent Controllers. Among these:

  • Public administrations, agencies, and other authorities, in cases expressly provided for by law.

In any case, the user's data will not be transferred to countries outside the EU unless explicit consent is provided or the guarantees provided by the GDPR (adequacy decisions, signing of standard contractual clauses, etc.) are in place.

The list of third parties appointed as Data Processors is available to users at the premises, and can be provided to interested parties upon specific request.

Data Subject Rights

The user shall always have the right to obtain from the Data Controller confirmation as to whether or not personal data concerning them are being processed and, if so, to obtain access to the personal data and the information specified in Art. 15 GDPR. Furthermore, the user is granted the right to obtain rectification, deletion, and restriction of the processing of their personal data held by the Controller. Finally, the user is granted the possibility to lodge a complaint with the supervisory authority of the Member State in which they reside/work or of the place where the alleged violation occurred.

Sincerely, Consorzio Campus Bio-Medico S.c.r.l.

Created by

Università Campus Bio-Medico di Roma
Fondazione Policlinico Universitario Campus Bio-Medico
Fondazione Alberto Sordi
BioMedical University Foundation
Associazione Amici Campus Bio-Medico Roma ETS
Associazione Campus Bio-Medico
Campus Bio-Medico Spa
Logo

© 2025 Kaleido Story. All rights reserved.

Data controller: Consorzio Campus Bio-Medico S.c.r.l.

Legal address: Via Alvaro del Portillo, n. 21, 00128, Roma

VAT number / Tax identification number: 17193741000

Write us: info@sccbm.it

Branding, marketing, and web development: Corax Social Media Company