Privacy Policy

POLICY ON THE PROCESSING OF PERSONAL DATA

This policy describes the processing of personal data belonging to users of the website “maize” owned by H-FARM S.p.A., located at the domain https://maize.io/ (the “Site”). Maize is H-FARM’s cultural factory for the evolution of people, which helps organizations become future-ready.
This policy is provided only in relation to the data processed through the Site and with reference to the purposes identified in point 3. It does not relate to any other websites consulted and/or that can be consulted through links and/or widgets (e.g. Eventbrite, social networks). These other websites will process personal data as independent controllers and in compliance with their respective policies, which users are strongly invited to consult.

H-FARM S.p.A. may alter this policy to adapt it to future expansions or future alterations made to the Site or to the services offered through the Site. In the event of substantial alterations, H-FARM S.p.A. will publish a notification on the Site to communicate the changes, share the new policy and gather any requests to exercise the rights granted by the legislation on the protection of personal data.

1. DATA CONTROLLER

The data controller is H-FARM S.p.A., with headquarters in Via Sile 41, Roncade (TV), tax and VAT no. IT 03944860265 (“H-FARM”).

2. SOURCE OF PERSONAL DATA AND CATEGORIES

2.1 Data collected from the data subject or received from third parties

The personal data processed through the Site are (i) the personal data that you entered by filling in the form you can find on the Site, for a contact request (section “Contacts”) or to subscribe the newsletter service, (ii) the personal data that you transmit to H-FARM when reporting any malfunctions or problems relating to the booking of maize.LIVE tickets through Eventbrite, and also (iii) the personal data that can be included in your communications sent to H-FARM (the “Data”).

In particular, the Data include the identifying data and contact details (e.g. first name, e-mail address, phone number and your company), any personal data included in communications sent to H-FARM, as well as other data that are needed to reply and follow up on your notifications.

If you are a maize.LIVE online event participant, your e-mail address have been transmitted to H-FARM also by Eventbrite, according to H-FARM privacy policy that you have already accepted during the ticket buying procedure, in order to allow H-FARM to enable you to access the maize.LIVE streaming platform.
H-FARM will process the Data that are strictly necessary and reserves the right to immediately erase or anonymise any unnecessary Data.

H-FARM invites you not to communicate third-party personal data, unless it is strictly necessary to fulfil the purposes of processing: in this case, you will be responsible for providing this policy to subjects to whom the communicated data refer.

2.2 Navigation data

With each access to the Site, the systems automatically record and analyse your navigation data (e.g. pages visited, date, time and duration of each visit). This information is automatically collected by the Site and does not require any action on your part.
The data collected are anonymised and aggregated data only, and they cannot, therefore, lead to your identification, neither indirectly. The information collected simply allows for any technical problems to be identified and solved and to improve the Site functionality.

3. PURPOSES OF PROCESSING

Your Data are processed by H-FARM, in strict compliance with the applicable data protection law and with the indications provided by the competent supervisory authority for the protection of personal data, for the following purposes.

3.1 To respond to users’ requests

Your Data will be processed to respond to requests that you may make via the contact details available in the “Contacts” section of the Site.

This processing has its legal basis in H-FARM’s legitimate interest to reply to you and thank you for your interest in the Maize world. H-FARM’s interest has been weighed against your own and is considered reasonably compatible with your expectation to receive a response.

Data is communicated on a voluntary basis but is necessary; any refusal will result in H-FARM being unable to recontact or reply to you.

You may object to processing at any time by writing to H-FARM at the addresses indicated in point 6 below or by contacting the Data Protection Officer at the addresses mentioned in point 7. Any objection shall not affect the lawfulness of the processing carried out by H-FARM up until that moment. Instead, it will make it impossible for H-FARM to follow up on any outstanding requests.

3.2 Subscription to Maize newsletter

The Data collected through the filling in the newsletter form (e-mail address) will be processed to send communications of an informative nature regarding the H-FARM activities, in particular related to the Maize world. These may include invitations to take part in surveys, promotional initiatives, events and/or conferences organised and/or sponsored by H-FARM, also in collaboration with third parties, or that involve H-FARM professionals as speakers.

The legal basis for this processing is your consent, that you can give by filling in the newsletter box that you can find on the Site. This consent may be withdrawn at any time by writing to H-FARM at the addresses mentioned in point 6 below, by contacting the Data Protection Officer at the addresses set out in point 7 or by clicking “unsubscribe”, which can be found at the bottom of each newsletter received.

Data is communicated on a voluntary basis: any refusal will not jeopardize the navigation on the Site.

3.3 Assistance with maize.LIVE registration – Troubles with Eventbrite’s booking
Your Data will also be processed to manage and respond to any assistance request, sent to H-FARM by filling in the specific form you can find on the Site, in case of troubles with Eventbrite’s booking of maize.LIVE events.
This processing has its legal basis in H-FARM’s legitimate interest to reply to you and give you the necessary help to allow you to buy the maize.LIVE tickets. H-FARM’s interest has been weighed against your own and is considered reasonably compatible with your expectation to receive a response and the required assistance.

Data is communicated on a voluntary basis but is necessary; any refusal will result in H-FARM being unable to recontact or reply to you.

3.4 Participation in maize.LIVE online event

If you have booked maize.LIVE tickets, your Data will also be processed to enable you to take part in the online event for which you have registered. In particular, processing of the Data will allow you to access and use the online platform where the event will take place.

The legal basis for this processing is the need to take pre-contractual and contractual measures at the request of the data subject, and to fulfil the relevant legal obligations.

4. METHODS OF PROCESSING AND RECIPIENTS OF THE DATA

The Data will be processed by H-FARM’s staff and partners, and/or companies expressly appointed as data processors, using manual and computerised tools. H-FARM has provided these parties with detailed operating instructions, with particular reference to the adoption of adequate technical and organisational security measures.

One of these companies is The Rocket Science Group (with headquarters at 1526 Dekalb Ave NE, Atlanta, GA 30307, United States), owner of the Mailchimp brand, which has been appointed by H-FARM to send its newsletters. In this context, the Data, limited to first names, surnames and e-mail addresses, may be transferred outside the European Union. Although the United States does not offer a sufficient level of personal data protection, the basis for the transfer is the standard data protection clauses established by the European Commission, which are incorporated in the Data Processing Addendum agreed with the Controller and available here, together with the organisational and technical security measures implemented by the processor.

The full list of recipients of your Data is kept at H-FARM’s headquarters and is available on request. This request can be sent to the addresses indicated in point 6 below or by contacting the Data Protection Officer at the addresses mentioned in point 7.

5. STORAGE PERIOD

The personal data collected and processed by H-FARM, for the purposes identified in point 3 above, may be stored in a form that allows the user to be identified for the period of time necessary to achieve the purposes of the processing. Specifically:

* for the purposes defined in point 3.1, or rather, to respond to your requests, for a maximum period of 12 (twelve) months from the last contact;
* for the purpose defined in point 3.2, or rather, for the newsletter service, for a maximum period of 24 (twenty-four) months from your subscription;
* for the purpose defined in point 3.3, or rather, to provide assistance in case of troubles with Eventbrite’s booking, for the period of time necessary to give you the required support and, in any case, for a maximum period of 2 (two) months from the last contact;
* for the purpose defined in point 3.4, or rather, to grant access to maize.LIVE online platform, for the entire duration of the online event and, in any case, for a maximum period of 1 (one) month after its conclusion.

Your personal data may be kept for longer periods of time where necessary to fulfil legal obligations, or to protect H-FARM’s rights, until the relevant limitation period expires.

6. YOUR RIGHTS AND H-FARM’S CONTACT DETAILS

At any time and in so far as the rights are applicable, you may: (I) obtain access to your personal data; (II) obtain the rectification, cancellation and restriction of processing of your personal data; (III) receive in a structured, commonly used and machine-readable format your personal data provided to H-FARM, as well as transmit such data to another data controller, without hindrance from H-FARM; (IV) object to processing, in accordance with the procedures set out in point 3, without affecting the lawfulness of the processing carried out by H-FARM up until that moment; (V) withdraw your consent (in any case, this shall not affect the lawfulness of the processing carried out by H-FARM on the basis of the consent given before its withdrawal); (VI) lodge a complaint with the competent supervisory authority for the protection of personal data, or appeal to the competent judicial authority.

You can send your requests to exercise the above rights to one of the following addresses or to the Data Protection Officer at the addresses mentioned in article 7 below:* via e-mail, to the address privacy@h-farm.com;
* via registered letter, to H-FARM S.p.A., Via Sile 41, 31056 Roncade (TV).

Requests relating to recipients of the Data, as well as requests for clarifications regarding this policy, may also be sent to these addresses.

7. DATA PROTECTION OFFICER

The Data Protection Officer (DPO) appointed by H-FARM is LCA SERVIZI S.r.l., which can be reached at the following address: Via della Moscova, 18, 20121, Milano; via e-mail: dpo@lcalex.it; or via certified electronic mail (PEC): lcaservizi@pec.lcaservizi.it.

***

COOKIE POLICY

Cookies are small text strings that the websites you have visited send to the terminal’s browser. Here, they are stored to then be retransmitted to the same websites when the user visits them again. While browsing a website, your terminal may receive “first-party” cookies, where they are managed directly by the owner and/or manager of the website, as well as cookies that are sent from different websites or web servers (i.e. “third parties”). This happens because there may be elements on the website visited (e.g. the icons that take you to the different social networks) that reside on servers other than the one where the website is located.
With regard to the purposes pursued, cookies may be technical, analytical and profiling. The Site uses the following cookies for the purposes indicated below.

Technical cookies

Technical cookies are used for the sole purpose of carrying out the transmission of a communication over an electronic communications network, or to the extent strictly necessary for the provider of an information society service to provide a service that has been expressly requested by the user.

The technical cookies present on the Site can be divided into: navigation or session cookies, which guarantee the normal navigation and use of the website (allowing, for example, authentication to access private areas).

These cookies include functional cookies, which allow the choices you have made on the Site to be stored (for example, the language), in order to improve the services offered.

Your prior consent is not required for the installation of these cookies. The Site uses the following technical cookies:

Cookie	Domain	Purpose	Duration
PHPSESSID	.maize.io	Technical cookies used to store the User session.	Session

Analytics cookies

Analytical cookies are used to collect information, in an anonymized and aggregate form only, regarding the number of users who browse the Site and how they visit it.

It should be noted that the Site uses the following third-party analytical cookies:

Cookie	Domain	Purpose	Duration
_ga	.maize.io	Cookie used by Google Analytics for statistical purposes.	2 years
_gat	.maize.io	Cookie used by Google Analytics for statistical purposes.	1 day
_gid	.maize.io	Cookie used by Google Analytics for statistical purposes.	1 day

The data collected through these cookies, being anonymized and aggregated only, does not consist in personal data pursuant to the Regulation (EU) 2016/679 – General Data Protection Regulation (the so called GDPR).