Privacy Policy

The Users’ personal data will be lawfully processed by the Controller, pursuant to art. 6 GDPR, for the following purposes:

a) navigation of the Site, in relation to the possibility of acquiring User data, necessary at a technical level, such as the IP address, during navigation of the Site;

b) management of the scouting process, in particular, registration of the Users who apply to take part in the scouting phases by means of the dedicated form, subsequent evaluation of the startup and of its fit with the needs of the Loacker Group, and any management of pre-contractual relations.

The provision of personal data for the purposes of the data processing indicated above is voluntary but necessary, since the lack of providing of data will make it impossible for the User to navigate on the Site and, where provided, to take part in the scouting phases. With reference to the purposes in points 1/a and 1/b, the legal basis of the data processing is the execution of the services requested by the User who fills in the participation form (pursuant to art. 6 para. 1 lit b GDPR).

The Controller will process the personal data of Users utilizing manual and computer instruments, with logic strictly related to the same purposes and, in any case, in a way that guarantees the security and privacy of the data.

The personal data of Users taking part in the scouting process who are not selected will be held for a maximum period of 3 years, in order to assess a possible future collaboration or any subsequent investment rounds.

As regards the Users selected during the scouting process, the processing will continue for the duration of the contractual relationship and, thereafter, for the time necessary to fulfil legal obligations and to protect the rights of the Controller.

Employees and/or collaborators of the Controller and/or persons in charge of managing the Site may become acquainted with the personal data of the Users. These subjects, who are authorized by the Controller, will process the User data exclusively for the purposes indicated in the present disclosure and in compliance with the provisions of the GDPR.

The data of participating Users may be communicated to other companies of the Loacker Group in order to complete the activities referred to in point 1/b.

Third parties who may process personal data on behalf of the Controller may also become acquainted with the personal data of the Users as “Data Processors” pursuant to art. 28 GDPR.

Users have the right to obtain a list of any data processors appointed by the Controller, by making a request using the method indicated in paragraph 4 below.

The personal data of Users may be communicated to third parties to fulfill legal obligations, or to comply with orders from public authorities, or to exercise a right in court.

Users may exercise the rights guaranteed to them by the GDPR by contacting the Controller through

• return receipt certified mail to the registered office of the Controller;
• email to the address privacy@loacker.it.

Users, as parties to the data processing, have the right to:

a) obtain access, update, correction or, if they wish, integration of the data;

b) request and obtain the cancellation, transformation into anonymous form or the block of the data processed in violation of law, including data for which retention is not necessary relative to the purposes for which the data was collected and processed;

c) obtain certification that the operations referred to in letters a) and b) have been brought to the attention, even with regard to their content, of those to whom the data has been communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;

d) revoke consent at any time, when the data processing is based on their consent;

e) data portability (right to receive all the personal data pertaining to them in a structured, commonly used and machine-readable format), the right to restriction of processing of the personal data and the right to erasure (“right to be forgotten”);

f) object:

i. in full or in part, for legitimate reasons, to the processing of personal data pertaining to them, although relevant to the purpose of its collection;

ii. in full or in part, to the processing of personal data pertaining to them for the purpose of sending advertising materials or direct sales, or the execution of market research or commercial communications;

iii. at any time, when the personal data is processed for purposes of direct marketing, to the processing of their data for that purpose, including profiling, to the extent that it is connected to that direct marketing;

g) if they believe that the processing pertaining to them violates the GDPR, the right to lodge a complaint with a Supervisory Authority (in the member country in which they usually live, work or in the member country where the alleged violation has taken place). The Italian data protection authority is the Garante per la protezione dei dati personali, with office in Piazza Venezia no. 11, 00187 – Rome, tel.: +39 06 696771, e-mail: protocollo@gpdp.it, web: https://www.garanteprivacy.it.