This privacy policy describes how personal data is processed for users who visit Innovora.org or use its services, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable national data protection laws.
Data Controller
The data controller is Innovora. Contact email: [email protected]
Types of data collected
Innovora.org collects different types of personal data depending on how users interact with the website:
- Contact form: name, email address and message sent. These data are used exclusively to respond to user requests.
- Newsletter: email address (required), name and surname (optional). These data are used to send informative or promotional emails, only with explicit consent.
- Post comments: name, email address, website (optional) and comment content. The data are collected to manage comment publication and prevent spam or abuse.
- Browsing data: technical information automatically collected by systems, such as IP address, browser type and pages visited, used anonymously for statistical purposes.
- Cookies and tracking tools: used to improve user experience and analyze traffic anonymously. See our Cookie Policy for more details.
Purpose of processing
Personal data are processed for the following purposes:
- to manage and respond to contact requests submitted through the website forms;
- to send newsletters and periodic updates, only with the user’s consent;
- to manage and moderate comments on posts;
- to improve navigation and website content, including through anonymous statistical analysis;
- to ensure site security and prevent misuse or unauthorized access attempts;
- to comply with legal obligations or requests from competent authorities.
Legal basis for processing
- Consent: for sending messages through the contact form, subscribing to the newsletter and publishing comments.
- Legitimate interest: to ensure IT security and improve the browsing experience.
- Legal obligation: to comply with regulatory or judicial requirements.
Processing methods
Data are processed electronically, following principles of lawfulness, fairness, transparency and data minimization. Adequate technical and organizational measures are applied to prevent loss, misuse or unauthorized access.
Data communication and transfer
Personal data are not shared with third parties. However, they may be processed by IT or communication service providers (e.g., hosting, email, newsletter platforms such as Brevo or Mailchimp, anti-spam services) acting as Data Processors pursuant to Art. 28 GDPR.
Data retention
Data are stored for the time necessary to achieve the purposes for which they were collected:
- contact form data: up to 12 months from receipt;
- newsletter data: until consent is withdrawn or deletion is requested (unsubscribe);
- comments data: as long as the comment remains published, unless removal is requested;
- technical and cookie data: according to the retention times specified in the Cookie Policy;
- legal obligations: for the period required by law.
Data subject rights
Users may exercise their rights at any time under Articles 15–22 of the GDPR, including:
- access, rectify or erase their personal data;
- restrict or object to processing;
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
- receive a copy of their data in a structured, commonly used format (data portability);
- file a complaint with the relevant Data Protection Authority.
Newsletter and communications
Subscribing to the newsletter is optional and based on explicit consent. Users can unsubscribe at any time via the link in each email or by contacting [email protected].
Comments
Comments on the website are moderated manually and automatically using anti-spam tools. Email addresses are never made public nor used for purposes other than managing comments.
Data protection
Innovora implements appropriate technical measures to protect personal data against unauthorized access, loss or misuse. Website hosting is located within the European Union, and data are not transferred outside the EU to countries lacking adequate protection.
Changes to this policy
This Privacy Policy may be updated to reflect legal or technical changes. Please review it periodically.