In compliance with Article 13 of European Regulation 2016/679, we wish to inform you that in its role as Data Controller, the MAST Foundationelectronically processes the data of users who have subscribed to the newsletter and the relative mailing list enabling subscribers to be updated periodically on activities that have taken place and on new projects promoted or organised by the Foundation, in full observance of the principles of lawfulness and fair practice, and in compliance with legal provisions. 

This service is provided by means of email. The provision of any personal data on the part of the user is always optional; however, should the data marked as "required" on the subscription form be missing, the service will not be activated. The user's personal data will be processed by electronic and/or computerised means through the use of cookies (as indicated in the privacy and cookie policy document available on the website, and using automated systems in observance of the procedures set out in Articles 6 and 32 of the GDPR and by adopting the appropriate security measures provided for). 

In order to compare and potentially improve the results of its communications, the Controller uses systems for sending newsletters and notifications with reports. Through the reports, the Controller will be able to see, for example, the number of readers and of emails opened, the details of the emails sent by date/hour/minute, the details of emails received or not, those that were forwarded, etc. All these data are used so as to compare, and potentially improve, the results of communications.  

The data will be stored on the Controller's premises, at the external provider's premises, and on the platform used for sending the newsletters (Click Dimension); they will only be processed by persons who have been duly authorised to process the data and will be disclosed to external entities solely and exclusively to perform the services required for managing the operation properly, guaranteeing that the rights of those involved will be protected (to see the list of the external entities, please contact the data processor). 

The user's data may also be viewed by the company that manages the website, only as regards technical access for web server maintenance and management needs. The data will not be shared with third parties. Please be advised that, in observance of principles of lawfulness, limitation of purpose, and reduction of data, pursuant to Article 5 of the GDPR, the personal data will be stored for a period of time no longer than that required to perform the services provided.

Data Controller: The Data Controller, pursuant to law, is the MAST Foundation – Via Speranza, 40-42 Bologna - in the person of its pro tempore legal representative. 

Each user is entitled to obtain from the Personal Data Protection Manager/Data Controller the erasure (right to be forgotten), limitation, updating, rectification, and transfer of his/her data, may object to their processing, and in general may exercise all the rights set out in Articles 15, 16, 17, 18, 19, 20, 21, and 22 of EU Regulation 2016/679 by writing to comunicazione@mast.org.

THE DATA CONTROLLER
MAST Foundation