Privacy Policy

The Data Controller is:

PROJECT SUSTAINABILITY HOLDINGS S.R.L.

Via San Crispino 32
63821 Porto Sant’Elpidio (FM)
ITALY

contact: hello@projectsustainability.com

For any request regarding the processing of your data or the exercise of your rights, you can write to the e-mail address above.

As part of the newsletter service we process:

• your e-mail address, which you provide when subscribing (necessary to deliver the service);
• your first and last name, if you choose to provide them (optional, used solely to personalise our communications);
• the date, time and IP address relating to your subscription and to the subsequent confirmation via double opt-in, kept as proof of the consent given;
• statistical data on your interaction with the e-mails (for example opens and clicks on the links they contain), collected through our service provider.

You are not asked to provide special categories of data (e.g. health data, opinions, etc.) and we ask you not to include any.

Your data is processed to send you our newsletter, i.e. communications relating to the Project Sustainability project, including updates, news and promotional and marketing communications about our content, products and initiatives.

The legal basis for the processing is your consent, freely given, specific, informed and unambiguous (Art. 6(1)(a) GDPR), which you provide when subscribing and confirm by clicking the link in the confirmation e-mail (double opt-in procedure).

Providing your data is optional, but failure to provide your e-mail address makes it impossible to send the newsletter.

Processing is carried out using IT and electronic tools, with security measures adequate to ensure the confidentiality and integrity of the data.

To manage our mailings we use the Brevo platform, provided by Sendinblue SAS (17 rue Salneuve, 75017 Paris, France), which processes the data on our behalf as Data Processor pursuant to Art. 28 GDPR, under a specific Data Processing Agreement. Data managed through Brevo is hosted on servers located within the European Union. Brevo’s Data Protection Officer can be contacted at dpo@brevo.com.

Your data is processed by the Controller’s authorised personnel and by the Data Processor indicated above. It is not disseminated or transferred to third parties for their own marketing purposes.

Data is hosted on servers located in the European Union. Should a transfer to third countries occur for technical or organisational reasons of the provider, it will take place only with the adequate safeguards required by the GDPR (for example the standard contractual clauses approved by the European Commission).

We keep your data until you withdraw your consent or unsubscribe from the newsletter. Following unsubscription, data is deleted or anonymised within a reasonable period, except for the data strictly necessary to demonstrate that consent was given, for the time strictly necessary to protect the Controller in the event of disputes.

At any time you may exercise the rights provided by Articles 15–22 GDPR, in particular:

• access to your personal data;
• rectification of inaccurate data or completion of incomplete data;
• erasure of data (“right to be forgotten”);
• restriction of processing;
• portability of data;
• objection to processing;
• withdrawal of consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights you can write to hello@projectsustainability.com. You can also unsubscribe at any time via the unsubscribe link at the bottom of each e-mail.

You also have the right to lodge a complaint with the Supervisory Authority — the Italian Data Protection Authority (“Garante per la protezione dei dati personali”, www.garanteprivacy.it) — if you believe that the processing of your data infringes applicable law.

You can unsubscribe at any time:

• by clicking the “Unsubscribe” link at the bottom of every newsletter e-mail; or
• by writing to hello@projectsustainability.com.

The newsletter service is not intended for children under the age of 14. Anyone under 14 is asked not to subscribe without the consent of the holder of parental responsibility.

The Controller may update this privacy policy, for example in the event of regulatory changes or changes to the services. The updated version will be published on this page together with the date of last update.