Cooperativa Regeneration · Legal
Privacy Policy
Last updated: 19 October 2026
This policy explains what personal data we collect when you visit the Cooperativa Regeneration website (cooperativaregeneration.it; cooperativaregeneration.eu and regenerationitalia.eu redirect here), write to us through the contact form or on WhatsApp, why we collect it, who we share it with and what your rights are. It is written under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Italian Personal Data Protection Code (Legislative Decree 196/2003). The Italian version is the reference text.
1. Who we are
The data controller is:
Regeneration Molise Società Cooperativa Sociale
Registered office: Via Giovanni Pascoli 52, 86100 Campobasso (CB), Italy
Office: Via Facchinetti 3, 86100 Campobasso (CB), Italy
VAT and tax code 01904170709 · REA CB-215413
Email: coop.regeneration@outlook.it · PEC: regeneration.molise@postecert.it
Write to these addresses with any question about your data or to exercise your rights.
2. What data we collect
- Contact form: your full name, organisation (optional), email, WhatsApp number and your message.
- WhatsApp: your name and number as they appear on WhatsApp, the messages and voice messages you send us and the information you choose to share in the conversation.
- Where your visit comes from: when you send the form or open WhatsApp from the website, we record the page you came from, the referring website and any campaign parameters in the link (utm, fbclid, gclid). WhatsApp messages started from the website include a short code (e.g. “ref COOP-EN”) that tells us which page you wrote from.
- Technical data: like any website, our server logs the IP address, date and time, requested page and browser type of each visit, for security and to fix errors.
Your name and at least one contact (email or WhatsApp) are needed to reply to you; everything else is optional. We do not use Google Analytics or advertising pixels. The website’s fonts and images are served by our own server: opening a page does not send your data to Google or other providers.
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to your request and, if you wish, starting a collaboration | Pre-contractual steps taken at your request (Art. 6(1)(b)) and our legitimate interest in replying to people who write to us (Art. 6(1)(f)). |
| Following up on your request | Our legitimate interest (Art. 6(1)(f)). You can ask us to stop at any time. |
| Understanding where contacts come from | Our legitimate interest (Art. 6(1)(f)), using only the data listed in section 2, linked to your request. |
| Security and preventing spam and abuse | Our legitimate interest (Art. 6(1)(f)) in keeping the website and our services secure. |
| Contracts, invoices and legal obligations | Contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)), only if a relationship with us begins. |
We do not sell your data and we do not use it to send you promotions.
4. WhatsApp and our virtual assistant
On WhatsApp, the first replies may come from Sofia, our virtual assistant, which uses artificial intelligence to answer questions about the cooperative and its projects. A person on our team reads the conversations, can step in at any time and always does so when you ask to talk to a person.
- Sofia uses your messages to reply to you and to record your request in our contact management system.
- Voice messages are converted to text on our server.
- Sofia does not make decisions about you: agreements, prices and contracts are always handled by people (no automated decision-making under Art. 22 GDPR).
- WhatsApp is a Meta service (WhatsApp Ireland Ltd.), which processes messages under its own privacy policy.
5. Who receives your data
Your data is visible to the members of our team who handle your request. We also use the following providers, who process data on our behalf and under our instructions:
- Hosting: KingHost / Locaweb (Brazil) — the server for the website and our contact management system.
- Artificial intelligence: Anthropic PBC (USA) — the language model behind our virtual assistant.
- WhatsApp: WhatsApp Ireland Ltd. / Meta Platforms Ireland Ltd.
- Email: the providers of our mailboxes (Microsoft Outlook, Google Gmail) and of our certified email (PEC).
If your request concerns one of our projects (for example Go For ITaly or Se Joga na Itália), we forward it to that project’s team within the cooperative. Otherwise we disclose data only when the law requires it.
6. Transfers outside the EU
- Brazil (hosting): the European Commission has recognised that Brazil provides an adequate level of data protection (adequacy decision of January 2026, Art. 45 GDPR).
- United States (Anthropic; Microsoft and Google for email): on the basis of the standard contractual clauses approved by the European Commission (Art. 46 GDPR) or the EU-US Data Privacy Framework (Art. 45 GDPR), depending on the provider.
- Meta (WhatsApp): may transfer data to Meta Platforms Inc. in the United States on the basis of the safeguards described in its privacy policy.
7. How long we keep it
| Data | Period |
|---|---|
| Requests and conversations | 24 months from our last contact with you, after which they are deleted or anonymised. Earlier, if you ask us to delete them. |
| Contracts and accounting records | For the duration of the relationship, plus 10 years (Art. 2220 of the Italian Civil Code). |
| Server logs | Up to 14 days. |
8. Your rights
At any time you can ask us to access your data and get a copy (Art. 15), correct it (Art. 16) or delete it (Art. 17), restrict its processing (Art. 18), receive it in a commonly used format (Art. 20) and object to processing based on our legitimate interest, including follow-ups (Art. 21).
Write to coop.regeneration@outlook.it: we reply within one month. You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the authority of the EU country where you live or work.
9. Cookies
The website uses no profiling or third-party cookies and does not need your consent. It only uses technical browser storage, valid for the open tab only:
| Name | Type | What it is for | Duration |
|---|---|---|---|
| coop_origem | Technical (browser storage, this tab only) | Keeps the first page of your visit and any campaign parameters, sent only if you fill in the form or open WhatsApp. | Until the tab is closed |
Technical storage does not require consent (Art. 122 of the Italian Privacy Code). Links to Instagram, WhatsApp, the press or our projects’ websites open external sites, which have their own cookie and privacy policies.
10. Other information
- Security: the website uses an encrypted connection (https) and access to our contact management system is restricted to our team, with personal passwords.
- Data Protection Officer (DPO): we have not appointed one, as the law does not require it for our activity.
- Changes: we may update this policy. The date at the top shows the latest version.