Privacy policy

When users browse the Website or interact with the services made available through it, MindEarth may process different categories of personal data as described below.

Browsing Data

The IT systems and software procedures used to operate the Website automatically collect certain information, the transmission of which is inherent to the use of Internet communication protocols.

This information includes, for example: IP address, browser type and version, operating system, pages visited and time spent on each page, date and time of access, referring URL (where available), and technical information relating to the user's device.

Purpose of processing: to ensure the proper functioning, security, and administration of the Website, as well as to improve and develop the online services provided.

Legal basis: the processing is based on the legitimate interest of the Data Controller pursuant to Article 6(1)(f) of the GDPR.

Contact Form

When users submit a request through the contact form available on the Website, MindEarth collects the personal data provided by the user, including name, email address, affiliation, phone number, and the content of the message.

Such data are processed to manage and respond to users' requests, provide information about MindEarth's services, and handle any subsequent communications related to the request submitted. The information provided through the contact form is transferred to and managed through the Company's CRM system for the purpose of handling and tracking requests.

Purpose of processing: the personal data collected through the contact form are processed to manage and respond to users' requests, provide information about MindEarth's solutions and services, evaluate potential business opportunities, and manage any subsequent communications related to the request submitted.

Legal basis: the processing is necessary for the performance of pre-contractual measures taken at the request of the data subject pursuant to Article 6(1)(b) of the GDPR.

Newsletter subscription

Users may voluntarily subscribe to MindEarth's newsletter by providing their name, email address, and affiliation. Personal data collected through the newsletter subscription form are processed exclusively for sending newsletters, updates, and communications relating to MindEarth's activities, solutions, and services.

Purpose of processing: To send newsletters and marketing communications to users who have provided their explicit consent.

Legal basis: The processing is based on the user's consent pursuant to Article 6(1)(a) of the GDPR. Users may withdraw their consent at any time by using the unsubscribe link included in each communication or by contacting MindEarth.

Cookies

Certain personal data may be processed through cookies and similar technologies for analytical or other purposes. The processing of data collected through non-technical cookies is carried out in accordance with the information provided in the Cookie Policy.

Purpose of processing: Cookies are used to ensure the proper functioning of the Website, improve users' browsing experience, analyze Website usage, and, where applicable, support the provision of personalized content or services.

Legal basis: for non-technical cookies, the processing is based on the user's freely given consent pursuant to Article 6(1)(a) of the GDPR.

For further information, please refer to the Cookie Policy.

Personal data are processed using electronic and IT systems designed to ensure the security, confidentiality, and integrity of the data, in accordance with appropriate technical and organisational measures adopted by the Data Controller pursuant to Article 32 of the GDPR.

Processing activities may be carried out through electronic means, including email, telephone communications, and other digital communication tools, in compliance with the principles of lawfulness, fairness, transparency, and data minimisation.

Personal data may be accessed and processed by authorised personnel of MindEarth who need to process such data in connection with their professional activities. Personal data may also be disclosed to external service providers acting on behalf of the Data Controller, including providers of IT services, website management, cloud infrastructure, CRM systems, and other services necessary for the operation and maintenance of the Website and the management of user requests.

Such third parties process personal data either as Data Processors duly appointed pursuant to Article 28 of the GDPR or, where applicable, as independent Data Controllers.

Personal data may be transferred to countries outside the European Economic Area (EEA) only where such transfer is based on an adequacy decision adopted by the European Commission or on appropriate safeguards provided for under applicable data protection laws, including the Standard Contractual Clauses adopted by the European Commission where required.

The Website may contain links or references to third-party websites, platforms, or online services, including external resources available through the Website.

MindEarth does not control and is not responsible for the privacy practices, content, security measures, or processing activities carried out by such third parties. Any processing of personal data performed through third-party websites is governed by the privacy notices provided by the respective data controllers.

Users are encouraged to review the privacy policies of any third-party websites they access through links available on the Website.

Personal data are retained for the period necessary to achieve the purposes for which they were collected, in compliance with the applicable data protection laws and the principles of data minimisation and storage limitation.

In particular:

• Browsing data are retained for the time necessary to ensure the proper functioning, security, and maintenance of the Website, as well as for the purposes described in this Privacy Policy, unless a longer retention period is required by law.

• Personal data provided through the contact form are retained for the time necessary to manage and respond to users' requests, handle any follow-up communications, and evaluate potential business opportunities arising from such requests. Where no further relationship is established, such data are deleted or anonymised within a reasonable period, in accordance with applicable retention policies.

• Newsletter subscription data are retained until the user withdraws consent or unsubscribes from the newsletter service. Following withdrawal of consent or unsubscription, personal data will be deleted or anonymised, unless further retention is required by law or necessary to protect the rights of the Data Controller.

• Cookie-related data are retained for the periods specified in the Cookie Policy and in accordance with the duration of each individual cookie. For further information regarding the retention periods of cookies and similar technologies, please refer to the Cookie Policy.

Further information regarding specific retention periods may be provided upon request.

In accordance with Articles 15 to 21 of the GDPR, data subjects have the right to exercise the following rights at any time, under the conditions and within the limits established by applicable data protection laws:

Right of access (Article 15 GDPR)

The right to obtain confirmation as to whether or not personal data concerning them are being processed and, where applicable, access to such data, as well as information regarding the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients, the expected retention period or the criteria used to determine such period, the origin of the data, and any transfers to third countries.

Right to rectification (Article 16 GDPR)

The right to obtain the correction of inaccurate personal data or the completion of incomplete personal data.

Right to erasure (Article 17 GDPR)

The right to obtain the deletion of personal data where one of the conditions provided for by applicable law applies, including where the data are no longer necessary for the purposes for which they were collected, where consent has been withdrawn, where the data subject has objected to the processing, or where the processing is unlawful, subject to any legal obligations requiring the retention of such data.

Right to restriction of processing (Article 18 GDPR)

The right to request the restriction of processing in the cases provided for by applicable law, including where the accuracy of personal data is contested or where the processing is unlawful and the data subject opposes their erasure.

Right to data portability (Article 20 GDPR)

The right to receive personal data concerning the data subject in a structured, commonly used, and machine-readable format, and to request the transmission of such data to another data controller, where technically feasible.

Right to object (Article 21 GDPR)

The right to object, on grounds relating to the data subject's particular situation, to the processing of personal data carried out on the basis of legitimate interests, as well as the right to object at any time to the processing of personal data for direct marketing purposes.

Right to lodge a complaint (Article 77 GDPR)

The right to lodge a complaint with the competent supervisory authority if the data subject considers that the processing of personal data infringes applicable data protection laws. In Italy, the competent supervisory authority is the Garante per la Protezione dei Dati Personali.

You may exercise your rights under the GDPR by contacting us at privacy@mindearth.ch. You may also contact our Data Protection Officer at dpo@mindearth.ch.

The services provided through the Website are intended for a general audience and are not directed to individuals under the age of 14.

MindEarth does not knowingly collect personal data from children under this age. If personal data relating to a child under the age of 14 are provided through the Website, MindEarth will take appropriate steps to delete such data without undue delay.

This Privacy Policy applies from the date of its publication and supplements any specific privacy notices provided in connection with individual data collection activities.

MindEarth may update or amend this Privacy Policy from time to time, including to reflect changes in applicable laws, regulatory requirements, or the services and functionalities offered through the Website.

Users are encouraged to review this page periodically to remain informed about any changes.