Legal document
Privacy Policy
Last updated: March 15, 2025
Data controller
The data controller for the processing of personal data pursuant to EU Regulation 2016/679 (GDPR) is Founders Media S.r.l., with registered office at Via Tortona 27, 20144 Milan (MI), Italy, registered with the Milan Companies Register under tax code and VAT number 11894720966. The Controller can be contacted by email at [email protected] or by registered letter with return receipt to the registered office address. For any matter relating to data processing, the user can address the Controller directly, who undertakes to respond within the terms provided by applicable law.
Types of data collected
Founders.it collects various types of personal data, both automatically during navigation of the site (traffic data, IP addresses, browser and device information, pages visited), and through explicit user interaction, such as on subscription to the newsletter (name, email address), sending a message through the contact form (name, email, message content) or participation in events or initiatives promoted by the newsroom. All data is collected in compliance with the principles of minimisation and necessity provided by European law.
Purposes of processing
The personal data collected is processed for the following purposes: delivery of the requested editorial service, sending the periodic newsletter to users who have explicitly requested it, management of contact requests, compliance with legal obligations, prevention of abuse and fraudulent activities, aggregate statistical analyses on the use of the site in order to improve its content and usability. Each purpose has a specific legal basis, which may consist in the consent of the data subject, the performance of a contract, the fulfilment of legal obligations or the pursuit of a legitimate interest of the Controller.
Processing methods
Personal data is processed with electronic tools and organised in databases protected by technical and organisational measures appropriate to the risk, as provided by article 32 of the GDPR. Access to data is limited to authorised personnel, properly trained on the topic of personal data protection. The site uses secure transmission protocols (HTTPS) for all communications and adopts internal procedures for incident management and periodic security evaluation of the systems.
Data retention
Personal data is retained for the time strictly necessary to pursue the purposes for which it was collected and in any case in compliance with the retention periods provided by applicable law. In particular, data relating to newsletter subscription is retained until the user requests deletion, while data relating to contact requests is retained for a maximum period of 24 months from the last interaction, except for different documentary or legal needs.
Rights of the data subject
The user has the right, pursuant to articles 15 et seq. of the GDPR, to obtain from the Controller access to their personal data, their rectification, deletion (right to be forgotten), limitation of processing, opposition to processing for legitimate reasons and data portability. The user also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if they believe that the processing of their data takes place in violation of the applicable law.
Communication and dissemination
The personal data collected is not disseminated and is communicated exclusively to specifically identified parties, such as providers of technical services (hosting, newsletter sending, statistical analyses), which act as Data Processors pursuant to article 28 of the GDPR on the basis of specific contracts that require them to comply with the same security guarantees adopted by the Controller.
Changes to the privacy policy
The Controller reserves the right to make changes to this notice at any time, communicating them to users by publication on the site. The date of the last update is indicated at the bottom. Users are therefore invited to consult this page regularly to be always updated on the methods of processing their personal data.