Last updated: October 24, 2026
This privacy notice is provided in accordance with Article 13 of EU Regulation 2016/679 (GDPR) and concerns the personal data processed as part of the newsletter service, in the manner described below.
DATA CONTROLLER
The Data Controller for the personal data collected is I-Com, Institute for Competitiveness, located at Piazza dei Santi Apostoli 66, 00187 Rome (RM), Italy; tel.: (+39) 064740746; e-mail: info@i-com.it.
The personal data provided may be shared with duly appointed recipients who will process the data as data processors and/or persons authorized to process data, for the purpose of fulfilling contractual obligations or related objectives.
A complete list of the data processors and persons authorized to process personal data may be obtained by sending a request to the e-mail address: info@i-com.it.
DATA TRANSFER
In the event that personal data is transferred outside the European Union—for technical or operational reasons and to ensure high service continuity—the Data Controller shall ensure that such transfer is based on an adequacy decision by the European Commission. This is to guarantee that the level of protection afforded to individuals under current legislation, and specifically under EU Regulation 2016/679, is not compromised.
DATA COLLECTED
The personal data processed is either provided directly by the data subject or collected automatically. Data provided directly by the data subject refers to any personal data supplied to the Data Controller by the data subject, through any means.
Technical data—such as IP addresses, user-agent strings, and information contained in system logs—may also be processed. Such processing is limited to what is necessary for technical requirements, security, the prevention of abuse, the identification of automated traffic, and the proper functioning of the service.
When newsletters are sent, the platform used—subject to the data subject’s consent—allows for the detection of whether a message has been opened (via a tracking pixel—a tiny, invisible image) and whether any links within the newsletter have been clicked, with such actions being linked to the specific recipient.
If tracking is disabled, opens and clicks are still recorded but are not linked to the individual recipient; this data is used solely to generate aggregate statistics regarding the quality of the mailing list and the mailings themselves.
PURPOSE OF PROCESSING
The legal basis for the processing of personal data is the fulfillment of contractual or pre-contractual obligations, or compliance with legal obligations to which the Data Controller is subject. Consequently, any refusal to allow such processing, or a failure to provide—or the provision of inaccurate or incomplete—data, may result in the inability to properly deliver the service or the inability of the Data Controller to respond to requests for information submitted by the data subject.
Providing data for the purpose of receiving newsletters—whether for promotional, commercial, informational, or research-related purposes—is optional. Refusing to provide consent for this processing means that you will not be kept informed about commercial initiatives and/or promotional campaigns, nor will you receive offers or other promotional material. Individual tracking of opens and clicks allows for the measurement of interest in communications, as well as the optimization of their content and frequency—including by reducing or ceasing mailings to recipients who show no interest over an extended period. The legal basis for this processing is the data subject’s consent, pursuant to Article 122 of the Personal Data Protection Code and Article 6, paragraph 1, letter a) of EU Regulation 2016/679. Providing consent is optional and distinct from consenting to receive the newsletter; data subjects may choose to grant it at the time of subscription by selecting the “Allow personal tracking” option (which is not pre-selected). Refusing or withdrawing consent does not prevent a user from receiving the newsletter.
WITHDRAWAL OF CONSENT
Data subjects may withdraw their consent to receive promotional and commercial communications at any time by sending a request to the email address info@i-com.it or by clicking the unsubscribe link provided in the footer of every promotional or commercial email received.
Furthermore, data subjects may withdraw their consent for individual tracking at any time—without unsubscribing—by using the “Manage preferences and tracking” link found in the footer of every newsletter. In such cases, they will continue to receive communications, subject only to the anonymous, aggregated statistical analysis described above. Withdrawing consent is as simple as granting it.
The withdrawal of consent does not affect the lawfulness of any processing carried out prior to such withdrawal.
RECIPIENTS
Personal data provided may be disclosed to appropriately appointed recipients, who will process such data in the capacity of data processors and/or persons authorized to process data.
The Data Controller does not disclose any information about data subjects to third parties without their consent, unless required by law. In any event, the dissemination of processed personal data is excluded. A complete list of data processors, joint controllers, and persons authorized to process personal data may be requested by sending an email to info@i-com.it.
PROCESSING METHODS
Personal data are processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected. A yearly review of stored data is conducted to delete any information deemed obsolete, unless legal requirements mandate its retention.
Data processing generally takes place at the Data Controller’s premises, carried out by staff or external collaborators duly designated as data processors. A complete list of data processors and persons authorized to process personal data may be requested by sending an email to info@i-com.it.
Specific security measures are implemented to prevent data loss, illicit or incorrect use, and unauthorized access.
Data related to subscriptions are retained until the user unsubscribes—an action the data subject may take at any time via the link provided in every newsletter. For recipients who have consented to individual tracking, their subscription and the associated data processing remain valid until they unsubscribe or until 12 months have passed since their last recorded direct interaction (click, open, or reply). Once this period has elapsed, the Data Controller will cease sending communications and delete the data, unless the data subject confirms that they wish to continue receiving such communications. For recipients who have not provided such consent—and whose interactions are therefore not linked to a specific profile—the Data Controller will request confirmation of their subscription every 12 months (calculated from the date of initial subscription or the most recent confirmation) and will delete the data if no such confirmation is received. Data related to individual tracking are retained until the consent is withdrawn or the subscription is cancelled. This is without prejudice to any legal obligations or the need to protect the rights of the Data Controller.
RIGHTS OF THE DATA SUBJECT
Pursuant to Articles 15–21 of EU Regulation 2016/679, every data subject is granted a number of rights.
- Right of access: Under Article 15, the data subject has the right to obtain confirmation as to whether or not personal data concerning them are being processed and, where applicable, to obtain a copy of such data. They also have the right to access their personal data and to receive further information, such as the purposes of the processing, the categories of recipients, the data retention period, and the rights that may be exercised.
- Right to rectification: Under Article 16, the data subject has the right to have inaccurate personal data concerning them corrected or to have incomplete data completed. – Right to erasure: the data subject has the right to obtain the erasure of personal data concerning them, without undue delay, should one of the grounds set out in Article 17 apply.
- Right to restriction of processing: the data subject has the right, in the cases provided for by Article 18 of Regulation 2016/679, to obtain a restriction on the processing of their data.
- Right to data portability: the data subject has the right to receive the personal data concerning them in a structured, commonly used, and machine-readable format, and has the right to transmit such data to another controller without hindrance, in accordance with Article 20 of Regulation 2016/679.
- Right to object to processing: the data subject has the right to object to the processing of personal data concerning them, in accordance with Article 21 of Regulation 2016/679.
- The data subject also has the right to lodge a complaint with the competent supervisory authority, the Italian Data Protection Authority (*Garante per la protezione dei dati personali*).
Requests regarding the above points must be submitted in writing to the Data Controller. The Data Controller will provide a prompt response to requests from data subjects to exercise their rights, within the timeframes established by applicable law.
Any requests for further information or clarification may be submitted in writing to the Data Controller.
UPDATES AND AMENDMENTS
The Data Controller reserves the right to periodically modify, supplement, or update this Privacy Policy in compliance with applicable law or decisions issued by the Italian Data Protection Authority (*Garante per la protezione dei dati personali*).
Such modifications or additions will be brought to the attention of the interested parties. We invite users to review the Privacy Policy regularly, in order to check the updated information and decide whether or not to continue using the services offered.