DISCLOSURE PURSUANT TO ARTICLE 13 OF THE EUROPEAN DATA
PROTECTION REGULATION, NO. 2016/679 AND CONSENT TO DATA PROCESSING

This disclosure is provided, in compliance with art. 13 of EU Regulation 2016/679, for those who wish to support the “MIND THE STEM GAP” Manifesto to overcome the gender gap in STEM subjects.

1. Data Controller
Fondazione Bracco headquartered in Via Cino del Duca 8, Milan.

2. Data subject to processing and purposes
Personal identity data – such as name, surname, e-mail address – are required for the purposes set out below:
a) adherence to the Manifesto with publication of the names and surnames of supporters on the website for the initiative www.mindtheSTEMgap.fondazionebracco.com and filing;
b) transmission of material and/or information about the Manifesto campaign or related events.

3. Legal basis for data processing
In connection with the purposes described above, the legal basis is the acquisition of specific consent by the data subject through the placement of special flags on the Manifesto sign-up page.

4. Data storage
Data collected for the purposes set out above will be used and stored for the time required to complete the necessary data collection and storage operations, specifically, 10 years from the date of adherence to the Manifesto.

5. Personal data processing, recipients and communication
Personal data collected by the Data Controller will be processed in accordance with EU Regulation 2016/679 and the general obligations of fairness and confidentiality to which the Data Controller subscribes. Personal data will be processed with full confidentiality as required by law, by means of suitable electronic tools or automated, computer and telematic tools or by means of manual and paper-based processing and with all other suitable aids, in all cases in accordance with the security measures envisaged by the GDPR.

The data collected by the Data Controller may come to the knowledge of the employees of Fondazione Bracco, in the performance of their duties and, to the extent that they are required for execution of the purposes set out above, possibly of other parties, external managers and independent data controllers (for example, partners of Fondazione initiatives, service providers, IT service maintenance engineers, other providers who may be used by the Fondazione in connection with the above purposes, Bracco Group companies).

In all cases, all the personal data acquired, with the exception of the name and surname, which will be published in the list on the website www.mindtheSTEMgap.fondazionebracco.com, of persons who sign up to the Manifesto will not be disseminated. Specific security measures are followed to prevent data loss, unlawful or incorrect use and unauthorised access.
With regard to the possible transfer of data to other countries, including countries that might not guarantee the same level of protection as that envisaged by the General Data Protection Regulation (i.e., non-EU countries), the Data Collector states that in all cases processing will be conducted, depending on the particular situation, in accordance with one or more of the procedures allowed under EU Regulation 2016/679.

6. Rights of the data subject arts. 15-22 of European Regulation 679/2016 on Data Protection
With respect to the personal data provided, the data subject is entitled to exercise the rights envisaged by the EU Regulation set out below:

• right of access of the data subject [art. 15 of the EU Regulation];
• right to rectification [art. 16 of the EU Regulation];
• right to erasure (“right to be forgotten”) [art. 17 of the EU Regulation];
• right to restriction of processing [art. 18 of the EU Regulation];
• right to data portability [art. 20 of the EU Regulation];
• right to object [art. 21 of the EU Regulation].

The European Regulation also recognises the data subject's right to withdraw consent at any time. Pursuant to art. 7 of the EU Regulation, withdrawal of consent shall not affect the lawfulness of processing based on consent conducted before withdrawal of consent, specifically as regards, for example, publications in journals, books, brochures, booklets and digital documents.

To exercise these rights, the data subject may apply to Fondazione Bracco

a) via e-mail, at the address: segreteria@fondazionebracco.com;
b) via post, to the address: Fondazione Bracco Via Cino del Duca 8 - Milan;
c) via e-mail, to the Data Protection Officer at the address: dpo@bracco.com

Should the data subject deem that their rights have been compromised, they have the right to complain to the European Data Protection Supervisor, in the manner indicated by the Supervisor at the following web address: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524

Since processing for the purposes listed above is based on the consent of the data subject, should such consent not be provided the Data Controller will be unable to use the data for the purposes in question.

Consent is expressed through the placement of special “flags” on the Manifesto sign-up page.