Information on the Processing of Personal Data

Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR) — Website: www.reaclongevity.com

1. Data Controller

The Data Controller of the personal data collected through the website www.reaclongevity.com is:

the Rinaldi Fontani Institute
Via Belfiore, 44 – 50144 Firenze (FI), Italy
E-mail: info@irf.it

For any matter relating to the processing of your personal data, you can contact the Data Controller at the e-mail address indicated above.

2. Types of Data Collected

2.1 Data provided voluntarily by the user

Through the contact form on the website, the user can voluntarily provide the following data:

• Name and Surname
• E-mail address
• Phone number (if entered)
• Content of the message sent

2.2 Navigation data

During normal operation, the computer systems and software procedures used to operate the website acquire certain personal data, the transmission of which is implicit in the use of internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category includes IP addresses, the domain names of the computers used by users connecting to the site, the URI addresses of the resources requested, the time of the request, the method used, the size of the file obtained in response, the numerical code indicating the status of the response and other parameters relating to the user’s operating system and IT environment.

3. Purposes of the Processing and Legal Basis

3.1 Management of contact requests

Purpose: Respond to requests for information, clarifications or contact sent by the user through the form on the site.

Legal basis: Article 6(1)(b) of the GDPR – execution of pre-contractual measures taken at the request of the data subject; and/or Article 6(1)(f) of the GDPR – the Data Controller’s legitimate interest in responding to the communications received.

3.2 Compliance with the law

Purpose: Comply with obligations provided for by law, regulations or community legislation.

Legal basis: Art. 6(1)(c) GDPR – fulfilment of a legal obligation.

4. Methods of Treatment

The processing of personal data is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. The processing is carried out by authorized personnel and properly instructed by the Data Controller, in compliance with the principles of lawfulness, correctness, transparency, data minimization, accuracy, storage limitation, integrity and confidentiality.

5. Data retention period

The personal data collected through the contact form are kept for the time strictly necessary to manage the user’s request and, subsequently, for the time required by the applicable legal obligations.

In the absence of specific regulatory obligations, the data will be kept for a period not exceeding 24 months from collection, unless the continuation of the processing is necessary for the management of any disputes or to fulfill legal obligations.

6. Communication and Dissemination of Data

Your personal data are not transferred, sold, communicated or disseminated to third parties for commercial or other purposes.

The data may be communicated only in the following circumstances:

• To entities that provide technical and hosting services strictly necessary for the operation of the site (e.g. web hosting service providers), which operate as Data Processors pursuant to Article 28 of the GDPR and are bound by specific contractual agreements;
• To competent authorities, judicial or administrative bodies, only in cases where this is required by law or by measures of the authority.

In no case will the data be shared with third parties for marketing, profiling or promotional activities.

7. Data transfer outside the EU

Users’ personal data are processed and stored within the territory of the European Union. If, for technical needs related to hosting or infrastructure services, it is necessary to transfer data to third countries, the Data Controller guarantees that this transfer will take place in compliance with the provisions of Chapter V of the GDPR, adopting the appropriate guarantees (eg adequacy decisions of the European Commission, Standard Contractual Clauses).

8. Rights of the data subject

As a data subject, you have the right to exercise the following rights, recognised by Articles 15 to 22 of the GDPR, at any time:

• Right of access (Article 15): obtain confirmation as to whether or not personal data concerning you are being processed and, if so, obtain access to the data and information relating to the processing;
• Right of rectification (Article 16): obtain the rectification of inaccurate personal data or the integration of incomplete personal data;
• Right to erasure (Article 17): obtain the cancellation of personal data concerning you, in the cases provided for by law;
• Right to restriction of processing (Article 18): obtain the limitation of processing, in the cases provided for by law;
• Right to data portability (Article 20): receive the personal data provided in a structured, commonly used and machine-readable format, as well as the right to transmit such data to another controller;
• Right to object (Article 21): object at any time to the processing of personal data concerning you, in the cases provided for by law;
• Right to withdraw consent: where the processing is based on consent, withdraw consent at any time, without prejudice to the lawfulness of the processing carried out before the revocation.

To exercise these rights, you can send a written request to the following e-mail address: info@irf.it

The Data Controller will respond to the request within 30 days of receipt, unless further extension of 60 days in cases of particular complexity.

9. Right to Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority. In Italy, the competent authority is the Guarantor for the Protection of Personal Data, available on the website www.garanteprivacy.it.

10. Cookies and Tracking Technologies

The site www.reaclongevity.com may make use of technical cookies necessary for the proper functioning of the site. For detailed information on the use of cookies and tracking technologies, please refer to the appropriate Cookie Policy, available on the website.

11. Updates to this Notice

This information may be subject to updates over time, also in relation to the evolution of the applicable legislation or changes in the methods of data processing. Updates will be published on this page with an indication of the date of last modification.

Date of last update: May 2025