The General Data Protection Regulation (GDPR)
The information is given in compliance with article 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation or GDPR) to individuals interested in receiving news, information, invitations to events and workshops, publications, announcements and newsletters relating to the activities conducted by STAR4BBS, managed by APRE (mail to email@example.com).
“Personal data” (article 4, paragraph 1 of the GDPR) means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Processing” (article 4, paragraph 2 of the GDPR) means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
For the purposes of the GDPR (article 24) the Data Controller is:
APRE – Agenzia per la Promozione della Ricerca Europea,
via Cavour 71 – 00184 Rome – Italy
Tel +39 6 48939993
Type of data processed
As part of our activities, APRE collect and use personal data provided by you, the data subject, e.g. name, surname, email, organization to the extent that is needed and helpful to attain the purposes set out below.
Purpose of processing and profiling
We may collect and use personal data for the following purposes:
- Applications, registrations, access and administrative management of Users;
- Communication and promotion of the activities of the project e.g. news, information, invitations to events and workshops, publications, announcements and newsletters via e-mail; as well as analysis and research;
Enabling the Service Provider to address and handle claims or litigations.
Personal data may be collected also for profiling purposes (off by default). Specifically, we may ask you to give information about your areas of interest so that you receive communications that are targeted to your preferences.
You can change your preferences at any time.
Legal basis for processing personal data
For the purposes set out above, the legal basis of processing is the consent you, the data subject, give to the processing of your personal data, [article 6.1.a) of the GDPR].
and for the legitimate interest of the Service Provider (i.e. security monitoring) [article 6.1.f) of the GDPR]
Data Subject Rights
In relation to your personal data you can exercise your rights as data subject under the GDPR, namely:
- Right of access [article 15 of the GDPR];
- Right to rectification [article 16 of the GDPR];
- Right to erasure (‘right to be forgotten’) [article 17 of the GDPR];
- Right to restriction of processing [article 18 of the GDPR];
- Right to data portability [article 20 of the GDPR];
- Right to object [article 21 of the GDPR].
You have the right to withdraw your consent at any time.
The rights set out above can be exercised in writing by sending an email to firstname.lastname@example.org.
You as data subject have also the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
For further information about data subjects rights visit our website www.star4bbs.eu.
Your personal data will be kept until the date of withdrawal of consent. Any longer storage periods remain unaffected, in the event that they are required due to legal, accounting and/or fiscal obligations.
After the storage period, as described above, the data you have provided will be erased.
Consent to data processing
You are free to give or withhold your consent to processing of your personal data for the purposes above. We need your freely given consent to send you news, information, invitations to events and workshops, publications, announcements and newsletters regarding our activities. Should you deny your consent, we will be unable to send you said communications.
Disclosure of data outside of the APRE
We may disclose your personal data outside of our Association for specific reasons. In particular, your personal data may be made available to entities providing IT system management on behalf of our Association, competent authorities and/or public bodies, European Commission, and supervisory authorities to comply with statutory requirements. Where appropriate, we shall formally appoint said third parties Data Processors pursuant to article 28 of the GDPR.
How data is processed
Your data will be processed our controller’s employees and other authorized individuals. Said employees, and other authorized individuals may consult, use, process, compare the data as well as carry out any other appropriate action, including using automated means, always in compliance with statutory requirements that ensure, inter alia, protection of the confidentiality and security of the personal data, as well as data accuracy, update and appropriateness to the purposes for which the data is collected and used, as stated above.
Transfer of data outside of the EU
Your Data will not be transferred outside the European Union.
Changes and updates
APRE may make changes and/or additions to this privacy notice including as a result of regulatory changes.
General Information about cookies
Definition of “cookies”. Cookies are short fragments of text (letters and/or numbers) that allow the web server to store in regard to the client (the browser, e.g. Internet Explorer, Chrome, Firefox, Opera, etc.) information to be reused during visits to the site (session cookies) or later, even after days (persistent cookies). Cookies are stored, according to user preferences, by the single browser on the specific device used (computer, tablet, etc.).
Technical cookies strictly necessary. These cookies are essential for the proper functioning of a website that are used to manage various services related to websites (for example, logins or access to the reserved functions in the sites). The duration of cookies is strictly limited to the work session Deactivation of strictly necessary cookies may compromise the user experience and navigation of the website.
CONSENT REQUEST PURSUANT TO ARTICLE 6 OF THE GDPR
By clicking on the “Sign up” button in the subscription form you give your consent to our processing of your personal data in accordance with the purposes described above.