Cookie policy and personal data processing notice pursuant to Art. 13 of the General Data Protection Regulation (EU Regulation 2016/679)
This page explains how the Energy Transition Hub website (energytransitionhub.eu) — a joint initiative of Politecnico di Torino and IIT, hosted by Environment Park — processes visitors' personal data, in accordance with Art. 13 of the GDPR and applicable Italian data protection law.
This policy applies only to this website. It does not cover third-party websites linked from here (including the individual sites of CO2 Circle Lab, iEntrance, CoSyET, SEASTAR, Politecnico di Torino, IIT or Environment Park), each of which has its own privacy policy
1. Purposes and methods of personal data processing
1.1 Cookies
Cookies are small text files sent by the website server to your browser and stored on your device. Most browsers accept cookies by default; you can change your browser settings to block or delete them (see section 1.1.4).
1.1.1 Technical / necessary cookies
This website uses session and technical cookies strictly necessary for the site to function correctly (e.g. remembering cookie consent preferences, enabling secure form submission). These cookies do not require prior consent under applicable law and are not used for profiling.
1.1.2 Analytics cookies
This website uses Google Analytics (Google Ireland Limited), a web analytics service provided by Google, to understand how visitors use the site (pages visited, time on site, traffic sources) in aggregated form.
Google Analytics cookies are activated only after you give consent through the cookie banner, and you can withdraw this consent at any time from the cookie settings panel. Data collected through Google Analytics may be transferred to the United States; Google adheres to the EU-U.S. Data Privacy Framework as a safeguard for such transfers. For more information, see Google's privacy policy: https://policies.google.com/privacy
1.1.3 Third-party content
Some pages may embed third-party content (e.g. maps, videos) that can set their own cookies, governed by the third party's own privacy policy.
1.1.4 How to manage or disable cookies (opt-out)
You can manage cookie preferences at any time through [the cookie settings link in the footer] or by changing your browser settings. Disabling technical cookies may affect the correct functioning of the website; disabling analytics cookies does not affect site functionality.
1.2 Internet traffic data (web browsing data)
The systems and software used to operate this website automatically collect certain data during normal operation (e.g. IP address, browser and device type, pages visited, date and time of access, referring URL). This data is not collected to identify specific individuals but could, in combination with other data, allow user identification.
This data is used for:
- ensuring the security and correct functioning of the website;
- anonymous, aggregated statistical analysis of site usage;
- ascertaining responsibility in case of hypothetical computer crimes against the website.
This data is retained only for the time necessary for these purposes and may be disclosed to competent authorities if legally required.
1.3 Data provided voluntarily by users
If you contact us by email or through any contact channel on this website, we will collect your email address and any other personal data you choose to include, in order to respond to your request. This data is processed lawfully, fairly and transparently, in line with GDPR principles, and only for the purpose of managing your specific request.
1.4 Data collected through the "Contact us" forms
The website provides three dedicated contact forms, each collecting data appropriate to the type of inquiry:
For Researchers: full name, email, university/research institution, country, area of interest, type of access requested, message/research proposal summary.
For Companies: full name, email, company name, country, company size, area of interest, type of collaboration requested, message.
For Investors: full name, email, organisation/fund, country, investment focus, area of interest, message.
This data is processed exclusively to:
- respond to your inquiry and manage the relationship that follows from it (e.g. evaluating a research proposal, a collaboration request or a partnership opportunity);
- where you have given specific consent, to store your submission so we can follow up.
Providing the fields marked as mandatory (*) is necessary to process your request; providing optional fields helps us respond more effectively but is not required.
Data submitted through these forms is retained only for as long as necessary to manage your inquiry and any resulting relationship, after which it is deleted or anonymised, unless a longer retention period is required by law or by a contract you have entered into with us.
1.5 Further optional data
You may be asked to provide additional personal data if you request specific information, materials or services beyond the standard contact forms. If you choose not to provide this data, we may not be able to fully process your request.
1.6 General methods of processing
Personal data is processed both manually and by electronic/automated means, in compliance with the principles of Art. 5 GDPR (lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality).
2. Communication and disclosure of personal data
Your data is not disclosed to third parties except:
- to staff and collaborators of Designgang Network S.r.l. (acting head) who process it within the scope of their duties, solely for the purposes described in this policy;
- to Aruba S.p.A., our website hosting provider (based in Italy), acting as data processor for the technical hosting of the site;
- to Google Ireland Limited, for the analytics service described in Section 1.1.2, acting as data processor for aggregated usage statistics;
- where required by law or by order of a competent authority.
Data submitted through the website's contact forms is managed directly by Energy Transition Hub and is not shared with third parties beyond what is described above.
Aruba's hosting infrastructure is located within the European Union, so no transfer outside the EEA occurs for hosting purposes. Google Analytics may involve a transfer of aggregated usage data to the United States, safeguarded under the EU-U.S. Data Privacy Framework (see Section 1.1.2).
3. Rights of the data subject
At any time, you may exercise the rights set out in Art. 15 et seq. of the GDPR, including the right to:
- access your personal data and obtain a copy of it;
- request rectification of inaccurate data or erasure ("right to be forgotten");
- request restriction of processing;
- object to processing;
- request data portability, where applicable;
- withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
- lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), following the procedures published on its official website (www.garanteprivacy.it).
To exercise these rights, please contact us using the details in Section 4.
4. Data Controller and contacts
Data Controller: Designgang Network S.r.l (acting head), with registered office in via Santa Giulia 4C, Torino, Italy.
Email: info@designgang.net
5. Data retention and security
Personal data is retained only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Appropriate technical and organisational measures are in place to prevent unauthorised access, loss, or unlawful use of personal data.
Last updated: 10/09/2026