Privacy Policy

Last updated: 9 October 2026

1. Data controller

The data controller is Fondazione SED Enrico Mattei, registered office at Via Umberto I no. 9, 62024 Matelica (MC), Italy, tax code 92040700434 (the “Foundation” or “Controller”). For any request concerning personal data, please write to info@fondazionesedenricomattei.org.

2. Personal data we process

Through this website we may process:

• data submitted through the contact form: first name, last name, institution or organisation, email address, message and any additional information voluntarily provided;
• technical browsing data: IP address, date and time of the request, requested page, browser, operating system and technical information required for the website’s operation and security;
• communications data exchanged with the Foundation and data relating to any subsequent organisational or contractual relationship.

We do not ask users to submit special categories of personal data under Article 9 GDPR. Please do not include such data unless strictly necessary.

3. Purposes and legal bases

We process personal data to:

• reply to requests and manage contacts concerning the Forum, delegations and partnership opportunities, on the basis of steps taken at the data subject’s request prior to entering into a contract (Article 6(1)(b) GDPR) and, where applicable, the Foundation’s legitimate interest in managing its institutional and organisational relationships (Article 6(1)(f) GDPR);
• comply with legal, accounting or tax obligations and requests from public authorities (Article 6(1)(c) GDPR);
• ensure the website’s operation, security, abuse prevention and maintenance, on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR).

The form checkbox confirms that this notice has been read. It is not consent to processing where one of the legal bases above applies.

4. Required information

Fields marked as required are necessary for us to receive and handle the request. Without them, we cannot reply. Other information is optional.

5. Processing and security

Data is processed by electronic means and, where necessary, on paper, in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy and storage limitation. Appropriate technical and organisational measures are adopted to prevent unauthorised access, loss, disclosure or alteration.

6. Recipients and processors

Data may be processed by authorised Foundation staff and collaborators and by providers of hosting, email, maintenance, security and technical support services, appointed as processors where required. It may also be disclosed to professional advisers, public authorities or other parties where necessary to comply with a legal obligation or protect a right. Data is neither made public nor sold.

7. External services and international transfers

The website uses Google Fonts to display typefaces. Loading these resources may disclose technical data, such as the IP address, to Google Ireland Limited and other Google group companies. Some providers may process data outside the European Economic Area. In that event, transfers are made in accordance with Articles 45-49 GDPR, relying on an adequacy decision, standard contractual clauses or another safeguard recognised by applicable law. Links to external websites, such as LinkedIn, transfer data to those services only when the user chooses to open them. Subsequent processing is governed by the relevant provider’s privacy notice.

8. Retention periods

• contact-form requests and related correspondence: up to 12 months after the request is closed, unless a relationship is established or longer retention is required by law or for the protection of rights;
• technical and security logs: generally up to 30 days, unless they are needed to investigate security events or unlawful conduct;
• contractual, administrative, tax or accounting documents: for the periods required by law, normally 10 years.

At the end of the applicable period, data is erased or irreversibly anonymised.

9. Cookies

As of the last update, the website uses only technical cookies and similar technologies necessary for operation, security and the session management of authorised users. No analytics, advertising or profiling cookies for visitors are currently active. If non-essential tools are introduced, this notice will be updated and, where required, consent will be collected in advance through an appropriate banner.

10. Your rights

Where the conditions of Articles 15-22 GDPR are met, you may request access, rectification, erasure, restriction of processing, data portability and object to processing based on legitimate interests. You may also withdraw any consent at any time, without affecting the lawfulness of processing carried out before withdrawal. Requests may be sent to info@fondazionesedenricomattei.org. You may also lodge a complaint with the Italian Garante per la protezione dei dati personali or with the supervisory authority in your Member State.

11. Automated decision-making

Data collected through this website is not subject to solely automated decision-making or profiling producing legal or similarly significant effects.

12. Updates

This notice may be amended to reflect legal, organisational or technical changes. The current version is published on this page together with its revision date.