Eu Regulation no. 2016/679 of 27th April 2016, on “Protection of natural persons with regard to the processing of personal data as well as the free movement of such data” (so called “General Data Protection Regulation” or “Regulation”), provides for the protection of personal data whose processing must take place in compliance with fundamental rights and freedoms with particular reference to the confidentiality of data. Pursuant to art. 12 of the Regulation, i-EM Ltd, Building R104, Rutherford Appleton Laboratory, Harwell Campus. Didcot Oxfordshire, OX11 0QX (UK), as Data Controller of the processing of personal data collected through the company website and all i-EM SAT web platforms (hereinafter “Website”), hereby wishes to inform you that the processing of your personal data will be based on principles of correctness, lawfulness and transparency, protecting your privacy and your rights. We therefore invite you, before communicating any personal data to the Data Controller, to carefully read this Privacy Policy because it contains important information on the protection of your personal data. In particular, pursuant to art. 13 of the Regulation, we inform you on the following points:

  • Identity and contact details of the Data Controller

The Data Controller of the processing of your personal data is i-EM Ltd, based in Building R104, Rutherford Appleton Laboratory, Harwell Campus. Didcot Oxfordshire, OX11 0QX (UK). The Data controller is available at the following e-mail address:

  • Purposes of the processing

The processing of personal data by i-EM SAT will be for the purpose of management and administration of the company website. In particular, the processing of personal data may be carried out for:

  • allow surfing on the website
  • statistic analysis of visits to the website in an aggregated form


  • Legal basis of the processing

The legal basis of the processing is represented by the art.6, let. f) of the Regulation f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. In relation to the categories of data processed, it is not required to give prior and informed consent (opt-in) since users have simple ways to object the processing (opt-out).

  • Methods of processing

These data will be processed both by computerized and paper based methods, observing the rules on the protection of personal data, including those relating to data safety. Specific security measures are observed to prevent data loss, illicit or incorrect use of data and unauthorized access.

  • Personal data subject to the processing

Session data: the computer systems and software procedures used for the functioning of this website, acquire, during their normal operation, some personal data (so-called log files) whose transmission is implicit in the use of Internet communication protocols. This is an information that is not collected with the purpose to be associated with identified data subjects, but by their true nature could, through specific processing and association with data held by third parties, allow the identification of the users. This category of data includes IP addresses or domain names of the computers used by users connecting to the website, the addresses in the Uniform Resource Identifier (URI) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. These data could be used to ascertain responsibility in the event of hypothetical IT crimes against the website and may be shown to the Judicial Authorities, if it explicitly requests it.   Data provided voluntarily by the user: the optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to answer to requests, as well as any other personal data included in the message. Specific summary information notices will be progressively reported or displayed on the pages of the site prepared for particular requested services.

  • Categories of parties to whom personal data will be disclosed          

The data collected on the website will not be disclosed or communicated to not authorized third parties.

  • Retention of personal data

Your personal data, processed for the above mentioned purposes, will be stored for the strictly necessary time to achieve those purposes.

  • Data Subjects Rights

You can exercise in every moment the rights of art. 13, letter b) and art. 15, 16, 17, 18 and 20 of the Regulation, addressing to DPO, at the contact provided in point n. 2 of this information. In particular, as a data subject, you will require:

  1. The access to the personal data concerning you, according with the art.15 of the Regulation.
  2. The rectification of inaccurate personal data concerning you, according with the art.16 of the Regulation.
  3. The erasure of personal data concerning you (“right to be forgotten”), according with the art.17 of the Regulation.
  4. The restriction of processing of data concerning you, according with art.18 of the Regulation.
  5. The right to the portability of data concerning you, according with art.20 of the Regulation.

We inform you, finally, that you will have the right to object in every moment, according with the art.21 of the Regulation, if one of the situations described by the art.6, paragraph 1, letters e) and f) of the same Regulation occurs.

  • Complaint to Supervisory Authority

With regard to art.77 of the Regulation, we remind you that you have the right to lodge a complaint to the supervisor authority if you think that the processing of your data is performed in violation of the provisions of the Regulation.

  • Nature of the processing and obligatoriness of personal data conferment

Many of the processed data are required to perform the obligations arising from legal requirements and to fulfil respective contractual obligations. In some cases, the failure to provide personal data may make it impossible for i-EM SAT Ltd. to continue the working relationship established.

  • Existence of automated individual decision making in the processing

It is specified that, for the processing of the data, there is NOT any kind of automated individual decision-making, according with the art.22 of the Regulation.