Personal data protection in accordance with regulation EU 2016/679



Personal data processing policy

In line with the obligations deriving from the national norm (D. Lgs June 30, 2003 n. 196, the Code regarding the protection of personal data), the Community one (European Regulation for the protection of personal data n. 679/2016, GDPR) and subsequent modifications, WORLD SUSTAINABILITY ORGANIZATION S.R.L. A SOCIO UNICO tax code IT08630940966, with headquarters in Milan (MI) Corso Buenos Aires 45 (20124), in the person of its CEO Paolo Bray (hereinafter referred to as the “Data Controller”), declares that this site respects and protects the privacy of visitors and users, making every possible and measured effort not to infringe their rights.

This privacy policy applies exclusively to the activities of this site and is valid for the visitors/users of the site. It does not apply to information collected via channels different from this web site.

The purpose of this notice is to provide maximum clarity relating to information that the site collects and how it uses it.


Data Processing legal basis

This site uses data on the basis of consent. Using or consulting this site, users and visitors explicitly approve this privacy notice and consent to the processing of their personal data relating to the methods and ends described below, including any dissemination to third parties if necessary for providing a service.

The provision of data and therefore the Consent for the collection and processing of data is optional, the user can deny consent, and may revoke at any time consent already provided, writing to the Data Controller.

However denying consent may result in the impossibility of providing some services and the browsing experience on the site may be compromised.

This site uses some of the data according to the legitimate interests of the Data Controller.


Data collection and purposes

Like all websites, this site also makes use of log files in which information collected in an automated manner is kept during user visits. Information collected may be as follows:

. Internet Protocol (IP) address;
. Type of browser and parameters of device used to connect to the site;
. Name of internet service provider (ISP);
. Date and time of visit;
. Web page visitor comes from (referral) and exits;
. Possibly the number of clicks.

The above information is processed in an automated form and collected exclusively in aggregate form in order to verify the correct functioning of the site, for security reasons and according to the legitimate interests of the Data Controller.

For security purposes (spam filters, firewalls and virus detection), automatically recorded data may also include personal data such as IP address, which could be used, in accordance with applicable laws, for the purpose of blocking attempts to damage the site itself or cause harm to other users, or in any case harmful activities or which constitute crime. Such data is never used for the identification or profiling of the user, but only for purposes of the protection of the site and its users, on the basis of the legitimate interests of the Data Controller.

If the site permits the insertion of comments, or in the case of specific services requested by the user, the site automatically detects and registers some user identity data, including the e-mail address. This data is voluntarily provided by the user when requesting provision of the service. By inserting a comment or other information, the user explicitly agrees to the privacy statement, and in particular agrees that the content entered be freely disseminated also to third parties.

The data received will only be used to contact the user:

. to arrange an appointment for the management of the requested service;
. to arrange an interview for the purpose of launching a cooperative relationship.

The information that users of the site consider making public via the services and tools made available to them, are provided by the user consciously and voluntarily, exempting this site from any responsibility concerning any violations of laws. It is up to users to verify that they have permission for the entry of the personal data of third parties or of content protected by national and international norms.

Data collected by the site during its operation are used exclusively for the above mentioned purposes and kept for the time strictly necessary to carry out the specified activities. In any case the data collected by the site will never be provided to third parties, for any reason, unless there is a legitimate request by a judicial authority and only in cases provided for by law.

Data used for security purposes (blocking attempts to damage the site) are retained for the time required by law.


Place of data processing

Data collected by the site are processed at the headquarter of the Data Controller and at the datacenter of the web Hosting. The web Hosting Aruba Business (, which is responsible for processing the data on behalf of the Data Controller, is in the European Economic Community and acts in accordance with European norms.


What cookies are

As is usual on all websites, this site also makes use of cookies, small text files that allow one to keep information about the preferences of visitors, to improve the functioning of the site, to simplify its navigation by automating the procedures (e.g. log in and site language) and for the analysis of the site’s use.


The types of cookies we use


Technical cookies

These cookies are essential for allowing you to move around the site and fully utilise its features, like for instance to access the various protected areas of the site. Without these cookies, some necessary services, such as filling in a form, cannot be used.

Performance Cookies

These cookies collect information about how users use a web site, for example which pages are most visited, if you receive error messages from web pages. These cookies do not collect information that identifies a visitor. All information collected via cookies is aggregated and therefore anonymous. They are only used to improve the functioning of a website. By using our site, users accept that these cookies can be installed on their own devices.


Feature cookies

Cookies allow the site to record the choices made by the user (such as the name, language, or region of residence) and provide customised advanced features. These cookies can also be used to record changes made to the size of text, fonts and other parts of web pages that it it is possible to customise.

They can also be used to provide services that you have asked for like to watch a video or see comments on a blog. The information collected by these types of cookies can be made anonymous and unable to monitor your browsing activity on other websites. By using our site, users accept that these cookies can be installed on their own devices.


Third party Cookies

Google Analytics

This website uses Google Analytics, a service for web analysis provided by Google Inc. (“Google “).

These services use “cookies”, which are text files deposited on your computer to allow the website to analyse how users use the site. The information generated by the cookie about using the website (including your anonymous IP address) will be transmitted and deposited on the servers of third party suppliers. The Suppliers will use this information for the purpose of examining your usage of the website, compile reports on the site’s activities for its operators and provide other services related to the website’s activities and to use of the internet.

Suppliers may also transfer this information to third parties where this is required by law or where such third parties process the above information on behalf of suppliers. You can refuse to use cookies by selecting the appropriate setting on your browser, but please note that if you do this you may not be able to use all the features of this website. By using this website, you consent to the processing of your data by third party suppliers for the above mentioned methods and purposes.

Click here to learn more about Google Analytics.

Google AdWords, Bing Advertising, Facebook Advertising

This site may use, in a non constant way, the tools of advertising and remarketing of Google Adwords, Bing Advertising and Facebook Advertising that allow for advertising the same and publishing of personalised adverts on the basis of user visits. For this reason, some pages of the site may include a code called “remarketing code”. This code allows for the reading and configuration of the browser’s cookies for determining what type of advert to show users, depending on the data related to their visit to the site, such as the navigation circuit chosen, the pages actually visited or the actions carried out on the same. The remarketing lists thus created are stored in a database of the servers of the relative networks, in which all the cookie IDs associated with each list or category of interest are kept. Furthermore in some pages there may be inserted a conversion tracking code: a statistics service that links data coming from the single advert networks Google AdWords, Bing Advertising and Facebook Advertising with actions carried out within this site.

For more information on Google Adwords visit this page.

For more information on Google Remarketing visit this page

For more information on Bing Advertising visit this page.

For more information on Facebook Advertising visit this page.

Authorisation to collect and store data can be revoked at any time. The user can disable the use of cookies by Google, Bing and Facebook via the specific settings options of the various browsers.

For embedded Content

(all video players from social video networks, widgets, social buttons in general):

This site may use in a non-constant way the contents of Youtube, Vimeo, Twitter, Facebook, Linkedin, Google+, Skype, Pinterest and Instagram, widgets or elements for interaction with single social networks and can be embedded where necessary.

For more information on the third party cookie policies mentioned:

Google Fonts

This site may use fonts from the Google Fonts service.

For information about cookies visit this page.


This site may use, in a non constant way, the AddThis service that also allows for the sharing of the website’s articles via social platforms. AddThis may transmit information to third parties if required by law or if the said third parties process such information on behalf of Addthis. We have no control over the use of data by AddThis and/or third parties.

AddThis may make reference to various social platform providers, each of which has its own conduct regarding privacy. AddThis is a permanent cookie.

For more information visit this page.


Using the site the visitor explicitly consents to the use of cookies.


Disabling cookies

Cookies are linked to the browser used and can be disabled directly from the browser, thus refusing/revoking consent to the use of cookies. It should be noted that the disabling of cookies may impede the correct use of certain functions of the site itself.

Instructions for disabling cookies can be found on the following web pages:

Mozilla Firefox

Microsoft Internet Explorer

Microsoft Edge

Google Chrome

Apple Safari


Third party Cookies

This site also acts as intermediary for third party cookies, used to provide additional services and features to visitors and to improve the use of the site itself, such as social buttons, or videos. This site has no control over third party cookies, which are wholly managed by the third parties. As a consequence of this, information on the use of the said cookies and their purposes, as well as on ways of disabling them, are provided directly by the third third parties on the pages mentioned below.

In particular, this site uses the cookies of the following third parties:

Google Analytics

a Google analysis tool that via the use of cookies (performance cookies) collects anonymous browsing data (with IPs truncated at the last octet) and exclusively aggregated for the purpose of examining the use of the site by users, compiling reports on activities on the site and providing other information, including number of visitors and pages visited. Google may also transfer this information to third parties where required by law or where such third parties process the above mentioned information on behalf of Google. Google will not associate the IP address with any other piece of data owned by Google. Data transmitted to Google is deposited with Google’s servers in the United States.

On the basis of a specific agreement with Google, which is appointed as Responsible for processing the data, they undertake to use the data in line with the Data Controller’s requests, given via the software settings. Based on such settings, advertising and data sharing options are inactive.

More information on Google Analytics cookies can be found on the page Google Analytics Cookie Usage on Websites.

Users can disable by way of choice the collection of data by Google Analytics by installing the special component provided by Google (opt out) on their own browsers.


a platform owned by Google, for sharing videos, which uses cookies to collect information of users and navigation devices. Videos on the site do not convey cookies on access of the page, the “advanced privacy (no cookies)” option having been set, on the basis of which YouTube does not store information on visitors unless they voluntarily reproduce the video.


Test_cookie .doubleclick.nt is not a permanent cookie, but is used to test whether the user’s browser supports cookies.

For more information on the use of data and their processing by Google, we recommend you view the information on the special page made available by Google

and on the page on How data is used by Google when sites or app of partners are used.

Social Network Plugins

This site also incorporates plugins and/or buttons for social networks, in order to allow easy sharing of content on your favourite social networks. These plugins are programmed so as not to set any cookies when accessing the page, to safeguard users’ privacy. Cookies may be set, if provided for by the social networks, only when the user actually and voluntarily uses the plugin. Bear in mind that if users browse while logged into the social network, then they have already consented to the use of cookies conveyed via this site, when subscribing to the social network.

The collection and use of information obtained by means of the plugin are regulated by the respective privacy notices of the social networks, which you are invited to refer to.






Transfer of data to non EU countries

This site may share some of the data collected with services located outside the European Union area. In particular with Google, Facebook and Microsoft (LinkedIn) via social plugins and the Google Analytics service. The transfer is authorised on the basis of specific decisions of the European Union and the Guarantor for the protection of personal data, in particular decision 1250/2016 (Privacy Shield – here the link to the home page of the Italian Data Protection Authority), for which no further consent is required. The above mentioned companies guarantee their adherence to Privacy Shield.

Security measures

This site treats users’ data in a lawful and correct manner, adopting appropriate security measures aimed at preventing unauthorised access, disclosure, alteration or unauthorised destruction of data. Data processing is carried out by means of informatic and/or telematic tools, with organizational methods and with logic strictly related to the mentioned purposes. In addition to the Data Controller, in some cases, categories in charge involved in the organisation of the site (management, commercial, marketing, legal personnel and system administrators) as well as external entities (such as tertiary suppliers of technical services, postal couriers, hosting providers, computer companies and communications agencies) may have access to the data.

On line services subscription

Contents, information, rights and obligations set forth in this policy are valid only for the mere consultation of the website. In the event that, during browsing of the site, users provide personal data or conclude on line services, they will implicitly be fully informed of the content of the notice to customers in accordance with articles 13-14 of the GDPR which can be consulted at the following link and the contents, information, rights and obligations indicated therein will be applicable.

User rights

According to the European regulation 679/2016 (GDPR) and national law, Users can, in accordance with the methods and within the limits prescribed by current legislation, exercise the following rights:

a. of access to personal data in accordance with art. 15 of the GDPR;

b. to obtain rectification in accordance with art. 16 of the GDPR, cancellation of the same in accordance with art. 17 of the GDPR or limitation of processing their data in accordance with art. 18 of the GDPR;

c. to oppose to the data processing use in accordance with art. 21 of the GDPR;

d. of data portability in accordance with art. 20 of the GDPR;

e. to revoke consent, where provided for: revocation of consent does not prejudice the legality of data processing based on consent given before revocation in accordance with art. 7, point 3 of the GDPR;

f. to make complaint to the controlling authority (Privacy Guarantor).

They can exercise their rights by sending a request via email to

Revocation of consent, request for cancellation, opposition and request for porting of data will mean the impossibility of fulfilling obligations inherent to the contractual relationship and therefore render impossible its proceeding.

In the case of data being processed on the basis of legitimate interests, the rights of those concerned with their processing (except the right of portability is not provided for by the norms) are still guaranteed, in particular the right of opposition to processing, which may be exercised by submitting a request to the Data Controller.


Data Controller

The data controller in accordance with applicable laws is WORLD SUSTAINABILITY ORGANIZATION S.R.L. A SOCIO UNICO , tax code IT0863094, with headquarter in Milan (MI), Corso Buenos Aires 45 (20124) in the person of its CEO, Paolo Bray, who can be reached at this email address:

Responsible for processing the data

The web hosting Aruba Business ( is appointed responsible for processing the data on behalf of the data controller. Aruba Business is located in the European Economic Community and acts in conformance with European norms.

Click here for Aruba Privacy Policy.



This privacy policy is updated to May 24, 2018.