Privacy Notice

You are exploring Collection:

Discover the other Museum Collections

EVOLUTIO PRIVACY NOTICE
Privacy notice pursuant to Article 13 of the GDPR

Data Controller: Webuild S.p.A. ("we", "us" or "Webuild"), located at Centro Direzionale Milanofiori Strada 6 - Palazzo L - 20089 Rozzano (Milan); e-mail: privacy@webuildgroup.com; Tel: +39.02.44422111.

We collect and process your personal data with the utmost care and in accordance with the GDPR (EU Regulation 2016/679) and the Privacy Code (Consolidated Legislative Decree 196/2003) (collectively, the "Privacy Law").

This Privacy notice applies to the Evolutio website; (the "Site" or the "Portal").

This Privacy notice (the "notice") explains what kind of personal information we collect, how we use it, for how long we keep it, with whom we may share it, and your rights in relation to the information we collect. We may also collect information about your internet browsing using cookies and other tracking technologies. Our cookie policy is available here.

Introduction

This notice applies to the processing of personal data collected on the Portal, which is the digital museum of the infrastructure built by Webuild. When you browse the Portal or use our services, including subscribing to our newsletter and using social networking channels, we collect personal data (hereinafter the "Data") about you. For this reason, in accordance with the provisions of the Privacy Law, we have created this notice to describe what data we collect, the purposes and methods of processing it, and the security measures we take to protect it. This notice does not apply to third party websites that may be accessed through links or banners on the site, for which we invite you to consult their privacy policies. This notice should be read in conjunction with the Site's Cookie Policy and Site Disclaimer.

As part of this notice, we will cover the following topics:

    What information do we collect and how do we process it?
    Why we collect your information and the legal basis for processing it.
    How long do we keep your information?
    With whom do we share your information?
    How do we protect your information?
    How can you exercise your privacy rights?
    How can you contact Webuild?
    The Data Protection Officer (DPO)
    Minors.

This notice was updated on Octber 2025.
Before submitting any personal data, please read this notice carefully to understand how we process your personal data and the characteristics of such processing, and we encourage you to consult it regularly to note any updates.

By using or accessing the Site, you acknowledge that you have read this notice and understand how we collect, process, use and disclose your personal information as described below. We may update this notice from time to time. If we change the text of this notice, we will notify you of such changes by means of a special banner when you access the Site so that you are properly informed about the processing of your personal information.

1. What data do we collect? How do we process it?
We collect your data directly from you or from other sources, as described below.

1.1 Browsing Data
The computer systems used to operate our services collect some of your data as part of their normal operation, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected for the purpose of identifying you, but could lead to your identification if, for example, it is combined with data held by third parties. This category of data includes, for example, the IP address and domain name associated with your computer, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response provided by the server, and other parameters related to your operating system. We use this data solely to obtain anonymous statistical information on the use of the services and to check that they are working properly. We delete the data collected in this way immediately after processing.

The data may be used to establish liability in the event of computer crimes committed against the services.

The optional and voluntary sending of e-mail messages to the addresses listed on this site involves the acquisition of the sender's address, which is necessary to respond to requests, as well as any other personal data contained in the message.

When you visit the Site, we automatically collect information through cookies and other tracking technologies. For more specific information about the cookies and other tracking technologies we use, please see our Cookie Policy

1.2 Identifying data
In some parts of the Site, we may ask you to provide certain data in order to fulfill your requests. In such cases, we will only process the data that you provide as a user, such as: your first name, last name, email address and other personal data that you may provide in connection with your requests.

In particular, you may subscribe to our newsletter, and we will process the following data provided by you: first name, last name and email address. Additional data you may provide (optional data) are company and address book of interest. Once you have registered, our system will send you an email with an activation link to confirm your subscription to the newsletter and that you are the actual owner of the email address used to send the newsletter. The newsletter will only be sent after confirmation of the activation link. You can unsubscribe at any time by clicking on the unsubscribe link at the bottom of each newsletter.

We may also process your contact details and any other data you voluntarily provide to us in order to respond to your enquiries when you contact us using the contact details set out in section 7. How can you contact Webuild?

We process your data mainly by electronic means.

2 Why do we collect your data and what is the legal basis for the processing?
We process your data for the purposes set out below; for each purpose, we specify the data processed and the legal basis that legitimises our processing:

Purpose of Data processing	Legal basis of data processing	Personal data processed
To ensure the proper functioning of the Site, to enable you to browse the Site and to resolve any technical problems with the Site.	The data processing is based on our legitimate interest in ensuring the proper functioning of the Site, troubleshooting technical problems and improving your experience on the Site.	Technical information, such as your IP address and other navigational information, collected during your interaction with the Site and is necessary for the proper functioning of the Site.
For marketing purposes, to send you notices of events and initiatives that we organise or in which we take part, through our newsletter.	The processing is based on your consent. This consent is optional and may be revoked at any time.	First name, last name, email address and any other optional personal data you provide.
Responding to your request for information after you have contacted us	The processing of personal data is based on the execution of the service of handling your requests for information.	Your contact details and any other personal information you voluntarily provide through your request.
To Comply with applicable laws and regulations.	The processing of personal data is based on fulfilling a legal obligation to which we are subject.	Your personal data necessary to comply with applicable legal obligations.
For the purpose of the defence or exercise of a right in court, including any related investigations.	The processing of personal data is based on our legitimate interest in exercising or defending our legal rights.	Your data necessary to exercise and defend our rights.
Management of extraordinary corporate transactions such as reorganisations, mergers and acquisitions or other extraordinary transactions.	The processing is based on our legitimate interest in managing our business activities.	Your data necessary from time to time in relation to the specific social operations.

When processing data is based on our legitimate interests, we carry out a balancing test to ensure that your interests, fundamental rights and freedoms are adequately protected. You can request further details by contacting us. Our legitimate interests include exercising and defending our rights, preventing the misuse of the site, ensuring IT and network security, and managing exceptional social operations.

When is it necessary to provide your personal data? Providing your data is necessary to enable us to fulfil our legal and regulatory obligations and respond to your requests for information. If you do not provide it, we will not be able to follow up on your requests. If processing is based on our legitimate interests and your consent, providing your data is optional and not providing it will have no consequences.

3. How long do we keep your data?
We will keep your data for as long as is strictly necessary to achieve the purpose for which it was collected and in accordance with the principles of retention limitation under the Privacy Laws. With respect to your subscription to our newsletter, we will keep your data for two years from your request to unsubscribe or withdrawal of consent, whichever is earlier.

4. With whom do we share your data?

4.1 Internal and external disclosure of your data
Your data will be processed within Webuild by our duly authorised personnel based on their respective needs. Your data will also be shared with our suppliers for technical and organisational services functional to the processing purposes set out in 2 above. Why do we collect your data and what is the legal basis for the processing such as providers of technical support services for the site, providers of services for sending our newsletter. These companies act as our data controllers on our behalf and in accordance with their contracts with us.

We may disclose your data to authorities, public bodies and other legitimate recipients in accordance with the law. In this case, the recipients act as autonomous data controllers for their respective institutional purposes.

In the event of extraordinary corporate transactions, such as reorganisations, acquisition or sale of Webuild or parts of it, or other extraordinary transactions, we may disclose your data to third parties affected by the transaction in accordance with the Privacy Laws and applicable regulations.

If you would like to receive an updated list of the recipients of your data and our data controllers, you can send an email to privacy@webuildgroup.com or you can contact Webuild or our Data Protection Officer using the contact details in 7 How can you contact Webuild? And 8. The Data Protection Officer (DPO).

4.2 Transfer of data abroad
In the event of a transfer of your data to third countries, i.e. countries that do not guarantee the same level of data protection as recognised by the Data Protection Act, we will ensure that the transfer is carried out in accordance with the provisions of the Data Protection Act. We do not currently transfer your data to third countries.

5. How do we protect your data?
We take, and require our service providers to take, appropriate technical and organisational security measures to prevent loss or destruction of data, including accidental loss or destruction, unlawful or incorrect use of or unauthorised access to data, in accordance with applicable law. In addition, computer systems are configured to use personal and identifying information only when necessary to achieve the specific processing purposes. Please note that no electronic transmission or storage of information is 100% secure and therefore, despite the security measures we have taken to protect your data, we cannot guarantee that loss, misuse or alteration of data will not occur. We do not use automated individual decision-making processes that could have legal effect on you or otherwise significantly affect you.

6. How can you exercise your privacy rights?
You can contact Webuild or our Data Protection Officer at any time using the contact details in 7. How can you contact Webuild? And 8. The Data Protection Officer (DPO). [INSERT LINK] to exercise your rights under the Data Protection Act, including:

Request for access to your data: you have the right to obtain confirmation from Webuild as to whether or not your data is being processed and, if so, to obtain access to it. Access requires knowledge of certain information, including the purposes of the processing, the categories of data processed and the recipients to whom the data is disclosed. However, there is no absolute right of access and the interests of others may limit your right of access. You also have the right to obtain a copy of the data being processed. A charge may be made for additional copies.
Correction of your data: you have the right to have inaccurate data corrected and incomplete data completed.
Deletion of your data: you have the right to obtain the deletion of your data without unjustified delay.
Limitation of processing your data: In certain circumstances, including where the accuracy of your data is disputed, you have the right to request that the processing of your personal data be restricted.
Portability of your data: you have the right to receive the data you have provided to Webuild in a structured, commonly used and machine-readable format, in the manner prescribed by the Data Protection Act.
Right to object to the processing of your data: you have the right to object to the processing of your data for marketing purposes and, where required by a particular situation, you may object to the processing of your data on the basis of Webuild's legitimate interest, unless it is demonstrated that there are compelling legitimate grounds for Webuild to proceed with the processing (e.g. the exercise or defence of a legal right).

You may also lodge a complaint with the relevant supervisory authority (the Data Protection Authority - www.garanteprivacy.it).

7. How can you contact Webuild?
If you have any questions or comments about this noticeor our privacy practices, if you wish to exercise your privacy rights, if you wish to receive an updated list of our data processors and third parties to whom your data may be disclosed, or if you wish to receive further information about the balancing test we apply when relying on our legitimate interest in processing data, you may contact our Data Protection Officer using the contact details set out in Section 8 below. Data Protection Officer (DPO) or you may contact Webuild as follows:
Webuild S.p.A., Centro Direzionale Milanofiori Strada 6 - Palazzo L - 20089 Rozzano (Milan), e-mail: privacy@webuildgroup.com.

8. The Data Protection Officer (DPO)
The Data Protection Officer (DPO) of Webuild S.p.A. can be contacted at the following e-mail address DPO@webuildgroup.com.

9. Minors.
The Site is not designed to attract minors, in particular persons under the age of 14. Webuild does not knowingly collect personal data from persons under the age of 14, who should not use the Site without the permission of their parents or guardians. If you are the parent or guardian of a child under the age of 14, please contact us if you are aware that the child has used the Site. We will promptly delete the minor's personal information within a reasonable time.