Privacy Policy of EIT Manufacturing South S.r.l.

Update: 10 June 2026

1. Who we are 

“We”, “us”, “our” or “EIT Manufacturing” refer to EIT Manufacturing South S.r.l. (the “Company”), an Italian company whose registered office is in Bastioni di Porta Nuova 21, 20121 Milan (MI), Italy. 

EIT Manufacturing South S.r.l. processes personal data in compliance with Regulation (EU) 2016/679 (“GDPR”) and the applicable Italian legislation on personal data protection, including Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018 (the “Italian Privacy Code”). 

If a Data Protection Officer (DPO) is appointed, the relevant contact details will be published in an updated version of this Privacy Policy and on the Company’s website. 

2. Scope of the Policy 

This Privacy Policy applies to the processing of personal data carried out by the Company in connection with: 

• visits to and navigation on the website https://www.eitmanufacturing-south.eu/;  

• use of the contact forms or contact details published on the website; 

• subscription to the Company’s newsletter or other information services; 

• registration for and participation in events and initiatives organised or co-organised by the Company, where no specific additional privacy notice is provided. 

This Privacy Policy should be read together with the website’s Cookie Policy, which explains the use of cookies and similar tracking technologies on the website and the related processing of personal data. 

This policy does not apply to third-party websites or services that may be accessed through links available on the Company’s website. Such third parties act as independent data controllers and provide their own privacy notices, which users are invited to review directly. 

3. Categories of Personal Data Processed 

In connection with the purposes described below, the Company may process the following categories of personal data: 

• identification and contact data, such as first name, last name, email address, telephone number, organisation, role/position and country; 

• data contained in messages and requests sent through contact forms or by email; 

• data relating to newsletter subscription and interaction with communications, such as subscription status, unsubscribe requests and, where permitted, aggregated information on openings or clicks; 

• data relating to registration for and participation in events, such as registration data, organisation, and type of participation; 

• browsing data and technical information automatically collected by the website, such as IP address, device identifiers, browser and operating system characteristics, date and time of access, pages visited, and information collected through cookies and similar technologies, as further described in the Cookie Policy. 

The Company does not intentionally request or ordinarily process special categories of personal data within the meaning of Article 9 GDPR, such as health data, political opinions or religious beliefs, in the context of the website, newsletter and ordinary events. If such data are voluntarily provided by the data subject, the Company will limit processing to what is strictly necessary and, where appropriate, delete such data. 

4. Purposes and Legal Bases of Processing 

Personal data are processed for the following purposes and on the legal bases set out below, in accordance with Article 6 GDPR. 

a) Website navigation, operation and security 

Purpose: to enable navigation on the website, ensure its security and proper functioning, monitor its regular operation, prevent and detect fraudulent or abusive activity, and compile aggregated statistics on website use, including through technical cookies and, where applicable, analytics tools as described in the Cookie Policy. 

Legal basis: the Company’s legitimate interest in ensuring the security, accessibility and improvement of its web services (Article 6(1)(f) GDPR) and, where non-essential cookies or similar tracking tools are used, the data subject’s consent (Article 6(1)(a) GDPR), collected in accordance with the Cookie Policy and applicable law. 

b) Management of contact requests 

Purpose: to respond to requests for information, support or contact sent through website forms or the email addresses published on the website, and to manage institutional and operational contacts with users and stakeholders. 

Legal basis: performance of pre-contractual measures taken at the request of the data subject or performance of a contract to which the data subject is party (Article 6(1)(b) GDPR), and, for general institutional contacts, the Company’s legitimate interest in organising and managing its activities and relationships (Article 6(1)(f) GDPR). 

c) Newsletter and information communications 

Purpose: to send newsletters and communications relating to the Company’s activities, events and initiatives by email or other electronic means. 

Legal basis: the data subject’s consent (Article 6(1)(a) GDPR), provided at the time of subscription to the newsletter or information service. 

The data subject may withdraw consent and unsubscribe at any time by using the unsubscribe link included in each communication or by contacting the Company at privacy.south@eitmanufacturing.eu, without affecting the lawfulness of processing carried out before the withdrawal. 

d) Organisation of events and initiatives 

Purpose: to manage registrations for and participation in events, workshops, webinars and other initiatives, including related communications such as confirmations, updates, materials and follow-up, and to produce aggregated statistics on participation. 

Legal basis: performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR) and the Company’s legitimate interest in organising and promoting its activities (Article 6(1)(f) GDPR). 

Where photographs or video recordings that clearly identify participants are taken during events and are intended for publication or promotional use, the Company will rely on consent (Article 6(1)(a) GDPR) or, where appropriate, legitimate interest, taking into account the context and the guidance of the Italian Data Protection Authority. 

5. Nature of the Provision of Data 

The provision of data marked as mandatory in website forms is necessary to handle the relevant request, such as responding to a contact request or registering for a newsletter or event. If such data are not provided, the Company may be unable to provide the requested service. 

Providing personal data for newsletter purposes is optional. Failure to provide such data, or withdrawal of consent, will only make it impossible to send the relevant communications. 

6. Methods of Processing and Security Measures 

Personal data are processed using manual and electronic tools, in compliance with the principles set out in Article 5 GDPR, and with the adoption of appropriate technical and organisational measures designed to ensure security and confidentiality and to prevent unauthorised access, disclosure, alteration or destruction. 

Processing is carried out by personnel expressly authorised and instructed by the Company and, where necessary, by third parties acting as data processors under written agreements pursuant to Article 28 GDPR. 

7. Categories of Recipients 

For the purposes described above, personal data may be disclosed to: 

• providers of IT, hosting, cloud, email and website support services, including providers of tools used for newsletter management, analytics, cookie consent management and event registration; 

• professional advisers, such as legal, administrative and accounting consultants, where necessary; 

• public authorities or bodies, upon request and where required by applicable law; 

• partners and co-organisers of specific events, limited to the data strictly necessary for managing the relevant initiative. 

These parties act either as independent data controllers or as data processors. In the latter case, they are appointed under specific agreements governing their data protection obligations. 

Personal data will not be disclosed to the public unless this is expressly stated and based on an appropriate legal basis. 

8. Transfers of Personal Data Outside the EEA 

Where, for technical reasons, including the use of cloud services, newsletter platforms, analytics tools or embedded third-party services, personal data are transferred to countries outside the European Economic Area, such transfers will take place in compliance with Chapter V GDPR, for example on the basis of an adequacy decision of the European Commission, standard contractual clauses or other appropriate safeguards. 

Further information on any such transfers and on the safeguards adopted may be requested by contacting the Company at privacy.south@eitmanufacturing.eu. 

9. Data Retention Periods 

Personal data are retained for no longer than necessary to achieve the purposes for which they were collected and, in any event, in accordance with applicable legal obligations and limitation periods. In particular: 

• browsing data are retained for limited periods, except where longer retention is required for security, dispute or legal compliance purposes; 

• data relating to contact requests are retained for the time necessary to handle the request and for up to 24 (twenty-four) months from the last relevant interaction; 

• data relating to newsletter subscriptions are retained until consent is withdrawn or the data subject unsubscribes, subject to periodic review of continued interest; 

• data relating to event participation are retained for the duration of the event and for a reasonable subsequent period, for example up to 5 years, for organisational, reporting and documentation purposes. 

Once the applicable retention period has expired, personal data will be deleted, anonymised or otherwise rendered unusable, in accordance with the Company’s procedures and applicable law. 

10. Rights of Data Subjects 

Data subjects may exercise the rights granted by Articles 15 to 22 GDPR, where applicable, including: 

• the right of access to personal data and information on the processing; 

• the right to rectification of inaccurate data and completion of incomplete data; 

• the right to erasure of personal data in the cases provided for by Article 17 GDPR; 

• the right to restriction of processing in the cases provided for by Article 18 GDPR; 

• the right to data portability, in relation to data processed by automated means on the basis of consent or a contract; 

• the right to object, on grounds relating to the data subject’s particular situation, to processing based on legitimate interest, and the right to object at any time to processing for direct marketing purposes, including any related profiling. 

Where processing is based on consent, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal. 

To exercise these rights, the data subject may contact the Company at: communication.south@eitmanufacturing.eu.  

The Company will reply within the time limits laid down by GDPR. 

11. Right to Lodge a Complaint 

Data subjects who consider that the processing of personal data concerning them infringes applicable data protection law have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) through the channels indicated on www.garanteprivacy.it, or with the supervisory authority of the Member State in which they habitually reside, work, or where the alleged infringement occurred. This is without prejudice to the right to bring proceedings before the competent judicial authority. 

12. Contact Details 

For any request or information concerning this Privacy Policy or the processing of personal data, as well as to exercise the rights described above, users may contact: 

EIT Manufacturing South S.r.l. 
Bastioni di Porta Nuova 21, 20121 Milan (MI), Italy 
Email: privacy.south@eitmanufacturing.eu; communication.south@eitmanufacturing.eu. 

If appointed, the DPO may be contacted using the details that will be published in this section. 

12. Updates 

This Privacy Policy may be amended and updated from time to time, including to reflect legal developments or changes in the data processing activities carried out by the Company. The updated version will be published on the website and will indicate the date of the latest revision.