PRIVACY POLICY

Information on the processing of personal data pursuant to art. 13 GDPR

 

All the processing operations of your personal data are carried out in compliance with the applicable legislation on the protection of personal data, including the Regulation (EU) 2016/679 ("GDPR") and the legislative decree 30 June 2003, n . 196, as amended by Legislative Decree 10 August 2018, n. 101 ("Privacy Code").

 

With this privacy policy ("Privacy Policy"), we wish to provide you with information on the processing operations of your personal data collected through our site u-earth.eu and through our applications for smartphones and tablets (jointly, the "Site") .

 

Remember that you will be able to use the services made available on our Site ("Services") only after having read and accepted the "Terms and Conditions of the Site" ("General Conditions").

 

WHO IS THE OWNER OF THE PROCESSING OF YOUR PERSONAL DATA?

 

The data controller of your data is U-Earth Biotech Ltd (“U-Earth”), VAT number GB311666618, incorporated and registered in the United Kingdom with no. 11599132 and with a registered office in Craven Street 38 - London WC2N 5NG. The use on the Site and in this Privacy Policy of expressions such as "we" and "our" must be understood as referring to U-Earth.

 

You can contact U-Earth and make any questions or comments regarding this Privacy Policy, by writing to the e-mail address legal@u-earth.eu.

 

WHICH CATEGORIES OF DATA DO WE TREAT?

 

For the pursuit of the purposes indicated in the next section, we process the following categories of data:

  1. Navigation data

Through the Site we acquire some personal data relating to your navigation.

This category includes:

  • the IP addresses of the computers and devices used to access the Site and to use the Services;

  • information relating to the device used to visit or access the Site (such as, for example, model, operating system and browser used, etc.).

   2. Data relating to the use of the Site

We collect data relating to your interactions with the Site, such as information regarding the products viewed and / or purchased and / or the Services you have selected, the history of searches carried out, etc.

 

   3. Data provided voluntarily by the user

We may collect the following information, provided by you directly (eg via the online registration form for sending our newsletter or requesting information or assistance):

  • name, surname, e-mail address, telephone number;

  • identification codes, such as username and password;

  • information provided as part of a request for assistance or clarification (reason for contact or complaint, etc.);

  • information provided as part of a request for information on our products and / or services, including for example information regarding the user's company and / or sector;

  • information provided when participating in user surveys and market surveys.

 

   4. Data collected through cookies and other tracking tools

In the event that you expressly consent to the installation and use of analytical and profiling cookies, we will collect data through the use of cookies, web beacons and other technologies, including advertising data. For more information, please consult our cookie policy.

 

FOR WHAT PURPOSES AND ON WHICH BASIS DO WE PROCESS YOUR PERSONAL DATA?

 

We process your personal data for the following purposes:

 

   (A) to provide you with the requested Services and, therefore, for purposes strictly connected and instrumental to the establishment and management of customer relations (Article 6, paragraph 1 letter b GDPR).

The processing of your personal data is necessary to execute the contract we have entered into with you or the pre-contractual measures adopted at your request. In particular, we process your personal data for:

  • allow you to browse and use the Site;

  • verify your identity;

  • manage your registration and account;

  • allow you to use, in compliance with the General Conditions, the Services requested from time to time. In particular, we will process your data to send you our newsletter via email, if you have expressly requested it;

  • provide you with assistance and/or follow up on your complaints through our customer service (through remote communication tools, such as email, chat, etc.) in relation to the requested Services and/or the products purchased;

  • contact you, as part of the pre-contractual requests submitted by you through the Site using the appropriate online form, to make an appointment and to give you a free consultation in relation to our products.

The treatments for the purposes referred to in this section do not require your consent as it is necessary to allow us to provide the Services and, therefore, if you do not intend to communicate your personal data for this purpose, we will not be able to provide you with any Service.

 

In particular, our newsletter information service is aimed at those who have explicitly requested it (by filling out the appropriate registration form or expressing this will in the context of other communications). You can request cancellation from the newsletter service at any time by sending a written communication to the address legal@u-earth.eu or by clicking on the unsubscribe link in each newsletter.

 

The data processed for this purpose belong to the following categories: navigation data and data provided voluntarily by the user.

 

   (B) to fulfill the legal obligations to which U-Earth is subject and, therefore, for purposes deriving from legal obligations, regulations, community legislation, provisions issued by authorities legitimated by the law or by supervisory and control bodies (art . 6, paragraph 1 letter c GDPR)

 

We also process your personal data for:

  • allow us to act in accordance with applicable legal and/or regulatory obligations;

  • to assert and defend the rights of U-Earth;

  • manage and respond to requests from competent authorities (administrative, tax and judicial).

Data processed for this purpose belong to the following categories: navigation data, data relating to the use of the Site and data provided voluntarily by the user. 

 

   (C) To pursue the legitimate interests of U-Earth (Article 6, paragraph 1 letter f GDPR)

 

We also process your personal data for:

  • purposes of improving products and/or services, internal management control, to operate and defend the rights of U-Earth;

  • carry out a sale of assets, a company or branch of a company as well as a potential merger or corporate and/or financial transactions, in this case communicating and transferring the data to the third party (s) involved in the 'operation;

  • identify or prevent fraud;

  • maintain and improve the security of the Site, our network and our information system.

 

These treatments are carried out on the basis of our legitimate interest and therefore do not require your specific consent. However, you can object to the processing at any time by sending a written communication to legal@u-earth.eu.

 

The data processed for this purpose belong to the following categories: navigation data, data relating to the use of the Site and data provided voluntarily by the user.

 

   (D) Subject to your express and specific consent (Article 6, paragraph 1 letter a GDPR), we may process your personal data to send you marketing communications (including discounts, special offers, market research and surveys) relating to our products and/or Services or to notify you of initiatives, contents and/or updates on our products and / or Services, also in light of your interests, your interactions with the Site.

 

This treatment requires your prior consent. You can revoke any consent given at any time by sending a written communication to legal@u-earth.eu or by clicking on the unsubscribe link in each direct marketing communication by email.

 

The data processed for this purpose belong to the following categories: navigation data, data relating to the use of the Site, data provided voluntarily by the user and data collected through the use of cookies and other tracking tools.

 

WHO CAN WE COMMUNICATE YOUR DATA TO?

 

Your data may be disclosed to the following categories of subjects:

  • parent companies and/or associates of and/or controlled by U-Earth;

  • suppliers, agents, sub-suppliers, business partners and all those who are part of our sales or assistance network or who offer us services of various kinds whose performance requires the processing of personal data. In particular, we use third-party providers to provide you with our newsletter service, to optimize our Services, to manage and maintain the Site and to provide IT and software solutions;

  • freelancers or professional firms that assist U-Earth in relation to legal, administrative and/or tax matters, including those of a contentious nature, as well as debt collection companies;

  • counterparties in the context of corporate transactions or sales of a company or business unit or of individual corporate assets and entities resulting from the merger or any other form of transformation concerning U-Earth;

  • public security and judicial authorities, subjects, bodies or other authorities to whom it is mandatory to communicate your data by virtue of legal provisions or orders of the same authorities.

 

WHO DO WE TRANSFER YOUR DATA TO ABROAD?

Your personal data may be freely transferred within the territory of the European Economic Area (EEA).

 

If, for the pursuit of the purposes referred to in this Privacy Policy, it becomes necessary to transfer your data outside the EEA and to countries or territories not subject to an adequacy decision by the European Commission pursuant to art. 45 GDPR, U-Earth (i) will carry out this transfer on the basis of the conditions set out in Articles 46 or 47 of the GDPR (adequate guarantees or binding corporate rules) and/or the exceptions referred to in art. 49 GDPR, and (ii) will adopt the technical-organizational and/or contractual measures from time to time necessary to ensure a level of protection of your personal data comparable to that guaranteed by the applicable legislation in the EEA.

 

HOW LONG DO WE KEEP YOUR DATA?

Your data will be kept for a period of time not exceeding that necessary to pursue the purposes for which it was collected, without prejudice in any case to the exercise of your rights referred to in the next section. In particular, the data processed to send our informative newsletter will be kept as long as the Service is active or as long as the interested party does not request cancellation from the Service.

 

U-Earth may retain some data even after the termination of the relationship with you relating to the provision of the Services, depending on the time necessary for the management of specific contractual or legal obligations, as well as for administrative, fiscal and/or contributory purposes, for the period of time imposed by laws and regulations in force, as well as for the time necessary to assert any rights in court.

 

Without prejudice to the foregoing, the data processed for marketing purposes on the basis of consent will be kept for a period of 24 months starting from the date on which the consent was given or renewed.

 

WHAT ARE YOUR RIGHTS?

You have the right to exercise, at any time, the rights recognized by art. 15-21 GDPR, as briefly summarized below:

 

  • Right of access: you can ask us for information about the treatments we carry out on your data or for confirmation that U-Earth processes your personal data. In this case, you can ask us to provide you with a copy of your data and check which data is in our possession.

  • Right of rectification: you have the right to request the rectification of your personal data if they are incorrect, including the right to request the integration of incomplete personal data.

  • Right to erasure: you have the right to request us to erase the data (or part of it) that you have provided to us, including those which do not need to be kept for the purposes for which the data were collected or otherwise processed.

  • Right of limitation: you can ask us to limit the processing of your personal data if the legal hypotheses occur.

  • Right to object: you can object to the processing of your data, without prejudice to the existence of a prevailing legitimate reason for the continuation of such processing.

  • Right to portability: you can obtain from U-Earth, in a structured format, commonly used and readable by an automatic device, the personal data you have communicated to us, in order to transmit them to another person. This right is applicable in the cases in which U-Earth carries out the processing of such data through automated tools, on the basis of your consent or for the purpose of providing the Services.

  • Withdrawal of consent: if the processing is based on your consent, you can withdraw it at any time, without prejudice to the lawfulness of the processing carried out prior to said withdrawal.

  • Right to lodge a complaint with the Guarantor: without prejudice to any other administrative or judicial appeal, you have the right to lodge a complaint with the Guarantor for the protection of personal data in the event that you believe that the treatments carried out by U-Earth violate current legislation regarding data protection.

 

You can exercise your rights at any time and free of charge by sending a written communication to legal@u-earth.eu.

 

Pursuant to article 2-tendencies of the Privacy Code, the rights listed above may be exercised, in the event of death, by those who have an interest of their own, or act to protect you (as your agent, or for family reasons worthy of protection). You can prohibit the exercise of all or some of these rights by the assignees by sending us a written declaration.

 

UPDATES TO THIS PRIVACY POLICY

We will periodically update this Privacy Policy to comply with the applicable legislation on the protection of personal data and/or adapt to the adoption of new systems or internal procedures, or in any case for any other reason that makes it appropriate.

 

The aforementioned changes will be promptly published on the Site and we will notify you with our communication tools. The changes will be binding as soon as they are made known. If you do not want to recognize or accept the changes made to this Privacy Policy, you can exercise one of the rights mentioned above.

 

We invite you to periodically consult this page. Version updated to May 2021.