PRIVACY NOTICE – Events and Communication

Dear User,

Pursuant to Art. 13 of the General Data Protection Regulation (GDPR), the following intends to inform the User (hereinafter the “Data Subject”) about the characteristics and means of processing of any personal data provided to Fondazione Toscana Life Sciences and MammoScreen Project Partners on the occasion of events, meetings or requests for general and detailed information.


The Controller is Fondazione Toscana Life Sciences(hereinafter Fondazione), with registered office at Via Fiorentina no .1 – 53100 Siena, email:

The Data Protection Officer (DPO) can be contacted at the following address:

Types of Personal Data Processed

The categories of personal data subject to processing include non-sensitive and contact personal data. These data are required to manage the event, share information regarding  MammoScreen Project and send press notes and press releases of an informative nature.

Purposes and Legal Grounds of the Processing

The processing of the requested personal data that the data subject shares with Fondazione during events, interviews or direct contact with Fondazione personnel are used by Fondazione for communications on the event itself or having a journalistic or informative nature.

The legal ground is the explicit consent to the processing of personal data

Scope of Communication and Dissemination of the Personal Data for the Pursuit of the Purposes of the Processing

The Controller may share your personal data with the project partners (Umbria Bioengineering Technologies S.r.l., Servicio de Salud de Castilla La Mancha, Scuola IMT (Istituzioni, Mercati, Tecnologie) Alti Studi di Lucca, ASSOCIACAO EVITA – CANCRO HEREDITARIO – EVITA, ELAROS 24/7 LIMITED), but the Fondazione shall not communicate the personal data to external project recipients, unless the communication is requested by mandatory orders of public and/or judicial authorities. Both external recipients, if any, and recipients within the Controller’s organization shall receive special written appointments with full instructions for proper handling of the personal data processed by the Controller. The personal data provided may be shared for the same purposes with collaborators act/shall act under the direct authority of the Controller, are/shall be appointed and duly authorized to process the personal data and have /shall have received appropriate operating instructions in this regard. The correct processing of personal data by the partners is entrusted to them and the Fondazione is not responsible for it.

Mandatory or Optional Provision of Personal Data

The provision of personal data is optional. However, failure by the data subject to provide the personal data needed as stated in the foregoing shall result in the impossibility to organize the event, communicate news or issue press notes.

Data Retention Time

Your personal data shall be kept on our files for the basic purposes and in respect of your authorizations for the time required to comply with civil law or for the time required to comply with your request to be kept updated on our activities. Requests for erasure or rectification should be forwarded using the form available
on the Site or by email at

Place of Data Processing and Transfer of Data Outside the European Union

Personal data shall be processed at the offices of the Controller and shall not be transferred outside the European Union without prior notice to the data subject.

Rights of the Data Subject

The data subject is entitled at any time to exercise the rights under Articles 15 to 22 of the GDPR by sending an email to

  • request from the Controller access to and rectification or erasure of his or her personal data, or restriction of the processing thereof, or object to processing, where envisaged;
  • obtain data portability allowing the data subject to receive the personal data provided to the Controller in a structured, commonly used and machine-readable format and – under given conditions – transmit those data to another controller without hindrance. Data portability applies only to personal data that (a) concern the data subject, (b) were provided to the Controller by the Data Subject, and (c) are processed electronically when entering into a contract;
  • lodge a complaint with the Italian Data Protection Authority for the protection of personal data, following the procedures and indications published on the official website of the Authority

The exercise of the rights is not subject to any formal requirements and is free of charge, in the time and manner stated on