Identity and Contact Details of the Data Controller
21 Invest S.p.A., hereinafter also referred to as "21" or "Controller", with registered office at Borgo Camillo Benso Conte di Cavour, 38, 31100 Treviso TV, reachable at the email address privacy@21invest.com or by phone at 0422316611.

Purposes and Legal Bases
A. Verifying the functioning of services and enabling browsing
The IT systems and software procedures responsible for the operation of this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes the IP addresses or domain names of the computers and terminals used by users, URI/URL addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response (success, error, etc.) and other parameters relating to the user's operating system and IT environment.

B. Statistics
Information is collected to understand how visitors interact with the website in order to obtain statistics.

C. Responding to communications sent via published contact details
When a visitor contacts the Controller at one of the contact addresses published on the website, the information spontaneously provided is collected in order to process and fulfil the request.

D. Defensive purposes
The Controller may need to process personal data for the management of disputes and out-of-court or judicial proceedings.

Purposes and Legal Basis (common data)

Purpose	Legal Basis
A	Performance of a contract
B	Consent
C	Performance of pre-contractual measures; legitimate interest of the Controller in responding to requests received.
D	Legitimate interest of the Controller in establishing, exercising or defending a right.

Cookies
Some of the purposes listed above may be pursued through the use of temporary markers (cookies).
For further information, visitors may consult the dedicated section: "Cookie Policy" https://www.21invest.com/en/cookie-policy/.

Retention Period

Purpose	Retention Period
A	See the Cookie section
B	See the Cookie section
C	Time required to fulfil the requests received and any subsequent correspondence.
D	10 years from the final resolution of the dispute.

Nature of Data Provision and Consequences of Refusal

Purpose	Nature	Consequences
A	Mandatory	Inability to access and use the website.
B	Optional	Inability for the Controller to carry out statistical processing.
C	Mandatory	Inability to receive the requested information.
D	Mandatory	Inability to manage the dispute.

Scope of Communication
All data collected and processed may be shared with internal figures authorised to process data by virtue of their respective roles, as well as with the following categories of external parties, in relation to the distinct processing purposes:

Purpose	Categories of External Recipients
A	Parties other than the Controller as indicated in the "Cookie" section
B	Parties other than the Controller as indicated in the "Cookie" section
C	Connected platforms and software, companies belonging to the same business group.
D	Law firms; Judicial Authority.

Since data is also processed using IT tools, it may also be visible to parties carrying out assistance/maintenance on such systems.

Transfer of Data to a Third Country or International Organisation

Purpose	Country	Lawfulness Condition for Transfer
A	See the Cookie section
B	See the Cookie section
C	NO
D	NO

Rights of Data Subjects
The individual to whom the personal data refers is recognised the following rights:

• Access: to know whether processing of their personal data is underway and, if so, to obtain it and request a copy.
• Rectification: to request the updating, correction or integration of personal data.
• Erasure: to obtain the deletion of personal data where certain conditions are met.
• Restriction: to request the restriction of data processing where certain conditions are met.
• Objection: to object to the processing of personal data for reasons relating to their particular situation.
• Portability: to receive their data in a structured format and transmit it to another controller.
• Withdrawal of consent: to withdraw consent for purposes that require it, without prejudice to the lawfulness of processing already carried out.

Rights Exercisable with Respect to Processing Activities

Purpose	Access	Rectification	Erasure	Restriction	Objection	Portability	Withdrawal of consent
A	X	X	X	X	X
B	X	X	X	X	X	X	X
C	X	X	X	X	X
D	X	X	X	X	X

To exercise these rights, the form available at the following link may be used:
https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924
and submitted to the following contacts: privacy@21invest.com or 21partners@legalmail.it.

The data subject may request further details (e.g. legitimate interest balancing test or list of data processors) at the same contacts.
A complaint may be lodged with the Italian Data Protection Authority: www.garanteprivacy.it.