Privacy Policy

Last updated: July 05, 2025

This Privacy Policy is provided in accordance with Article 13 of Regulation (EU) 2016/679 (hereinafter “GDPR”) and describes how this website processes personal data of its users and visitors.

This website is managed jointly by three natural persons: Mariano Estevez, Renato Marelli, and Chiara Passarella, hereinafter referred to collectively as the “Data Controllers”, who act as co-owners of the processing pursuant to Article 26 of the GDPR. At the current stage, the three individuals have registered a trademark and are jointly managing a non-commercial, educational website. No company has been formally incorporated yet.

1. Identity and contact details of the Data Controllers

The data is jointly controlled by the following individuals:

Mariano Estevez
Renato Marelli
Chiara Passarella

For any inquiries regarding the processing of personal data or to exercise your rights under the GDPR, you may contact the Data Controllers at the following email address:

📧 info@iunu.it

2. Purposes of the processing and legal basis

Personal data is collected and processed for the following purposes:

Website navigation and technical operation
➤ Legal basis: Legitimate interest of the Controllers (Art. 6(1)(f) GDPR)
Managing contact form submissions
➤ Legal basis: Execution of pre-contractual measures requested by the data subject (Art. 6(1)(b) GDPR)
Sending informational content and/or newsletters (where applicable)
➤ Legal basis: Explicit consent of the data subject (Art. 6(1)(a) GDPR)
Statistical analysis and traffic monitoring (aggregated and anonymous)
➤ Legal basis: Legitimate interest of the Controllers (Art. 6(1)(f) GDPR)
Compliance with legal obligations
➤ Legal basis: Legal obligation (Art. 6(1)(c) GDPR)

3. Nature of data provision

Providing personal data is optional. However, failure to provide data marked as mandatory in forms may result in the impossibility of processing your request.

4. Methods of data processing

Personal data is processed using both automated and manual tools, strictly for the stated purposes and in compliance with the principles of lawfulness, fairness, transparency, accuracy, integrity, and confidentiality. Technical and organizational security measures have been implemented to prevent unauthorized access, loss, or unlawful use of personal data.

5. Data recipients

Personal data may be accessed and processed exclusively by:

The Data Controllers and any collaborators authorized by them;
External service providers (e.g., hosting providers, email services, analytics platforms), acting as Data Processors pursuant to Article 28 GDPR;
Authorities or public bodies when required by law.

The list of Data Processors is available upon request.

6. Data retention period

Data is retained only for the time strictly necessary to achieve the purposes for which it was collected. Specifically:

Data collected through contact forms: retained for the time necessary to respond and for a maximum of 12 months;
Newsletter or marketing data: retained until withdrawal of consent;
Navigation data: retained according to the terms indicated in the Cookie Policy.

7. Transfer of data outside the European Union

Some data may be processed by third-party services (e.g., Google, Meta, LinkedIn) that operate outside the European Economic Area (EEA). In such cases, transfers are carried out based on adequacy decisions or standard contractual clauses (SCCs) adopted by the European Commission pursuant to Articles 45 and 46 GDPR.

8. Rights of the data subject

As a data subject, you have the right to:

Access your personal data (Art. 15 GDPR)
Request rectification or erasure (Art. 16–17 GDPR)
Request restriction of processing (Art. 18 GDPR)
Object to processing (Art. 21 GDPR)
Exercise your right to data portability (Art. 20 GDPR)
Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
Lodge a complaint with a supervisory authority (Art. 77 GDPR)

You may exercise your rights by contacting the Data Controllers at:

📧 info@iunu.it

9. Changes to this Policy

The Data Controllers reserve the right to amend or update this Privacy Policy at any time, in compliance with legal and regulatory changes. Users are encouraged to consult this page periodically to stay informed.