INFORMATION ON THE PROCESSING OF PERSONAL DATA OF USERS WHO CONSULT THE WEBSITE

pursuant to and for the purposes of articles 13 of EU Regulation 2016/679 and COOKIE POLICY

This information describes the methods of managing the processing of personal data of users who consult the official web portal of the Regional Agency for the Right to Higher Education and the Promotion of Knowledge – (hereinafter only DiSCo), as Data Controller (hereinafter also “Controller”) of your personal data (hereinafter, “personal data” or also “data”) of which you are the interested party, pursuant to EU Regulation 2016/679 (hereinafter “GDPR”),

This information is provided only exclusively for the official website of the Regional Agency for the Right to Higher Education and the Promotion of Knowledge – DiSCo (www.laziodisco.it)

1. Purpose of the Processing and the legal basis of the Processing

Your personal data will be processed for the following relevant purposes from time to time:

•  To ensure the correct functioning of the platform
• To allow for the use of all the features of the website

Your personal data will be processed by the Data Controller on the basis of the following assumption of lawfulness:

•  the legitimate interest of the Data Controller and legal obligations.

 

2. Type of data subject to Processing:

 

-  Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of devices used by users who connect to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the website and to check its correct functioning and are stored only for the amount of time that is strictly necessary. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.

 

COOKIES

What are cookies

Cookies are small text files that the sites visited send to the user's terminal, where they are stored, to then be retransmitted to the same sites upon the next visit.

Depending on the characteristics and use of cookies, various types of cookies can be identified:

Strictly necessary technical cookies.

These are cookies that are essential for the correct functioning of a website and are used to manage various services related to websites. The duration of cookies is strictly limited to the work session.

 

Analytics and performance cookies.

These are cookies used to collect and analyse the traffic and use of a website anonymously, intended to provide the website manager with purely statistical data, such as the total number of visitors to the website and each of its pages for each specific time slot. The deactivation of these cookies can be performed without any loss of functionality.

 

Profiling cookies.

These are permanent cookies used to identify (anonymously or not) the user’s preferences and improve their browsing experience.

As regards profiling cookies and, in general, third-party cookies, which are not essential for browsing the website itself, the website owner must request consent and must include a system that is also able to block these cookies before the visitor gives their consent to transmit them.

 

Use of cookies from the Website

In accordance with the provisions of the Italian Data Protection Authority’s General Policy of 8 May 2014 and the 2021 Guidelines, users are informed about how to manage cookies on this website.

When connecting to the website via the browser, cookies may be installed on the user’s device in order to recognise the device used, guarantee the use of the website for the duration of the period the cookies are valid and collect information on access to the website itself.

While browsing the website, the user may also receive cookies on their terminal that are sent from different websites or web servers (so-called "third parties").

 

There may therefore be, in this respect:

First-party cookies, sent directly by Porta Futuro Lazio to the user’s device.

Third-party cookies, originating from a third party but sent on behalf of Porta Futuro Lazio.

No personal user data is acquired by the website in this regard. No cookies are used to transmit personal information, nor are so-called session cookies or persistent cookies of any kind used, nor are profiling cookies used.

The Controller therefore informs users that the following are operational on the website:

technical and navigation cookies essential for the correct displaying or browsing of the website and necessary to navigate within the website, as they allow essential functions such as validation, management of a browsing session and fraud prevention and allow for example: the storage of data for access in secure mode or the functions of control and prevention of fraud. These cookies are essential for the correct functioning of the website.

Analytical cookies: to better analyse how users use the website and consequently optimise and improve it, and to ensure that it is always effective and efficient.

 

It is specified that this website uses the following types of cookies:

 

Technical cookies;

Analytics cookies;

Third-party cookies.

 

Obligation or option of consent for the use of cookies

It is not mandatory to acquire consent for the use of only technical or analytical cookies treated like technical cookies. Likewise, only with reference to anonymised third-party cookies, treated like a technical cookie, it will not be necessary to acquire consent.

Deactivating their operation will make it impossible to navigate the website correctly and/or to use the pages or content available therein.

For non-necessary cookies, the user’s consent is required, which they will have the right to revoke at any time by contacting the company.

 

3. Data processing and storage methods

The processing is carried out by the Controller through specifically appointed Data Processors and/or Data Managers.

Personal data are processed with automated tools, in accordance with reasoning strictly connected to the purposes of the processing and, in any case, in a way that guarantees their security and confidentiality, and are stored for the period of time strictly necessary to achieve the purposes for which they are collected.

No data provided freely and voluntarily by users to the web service is communicated or disseminated, except in cases expressly provided for by law.

4. Rights of interested parties

In your capacity as an interested party, you have the rights referred to in art. 15 - 22 GDPR and specifically:

- the right to access your personal data present in paper and/or electronic archives: the interested party has the right to obtain information on the data processed by the Controller, on certain aspects of the processing and to receive a copy of the data processed;

- the right to obtain the rectification of inaccurate personal data without unjustified delay: taking into account the purposes of the processing, the interested party can verify the correctness of their data and request their updating or correction;

-  the right to obtain the deletion of personal data concerning them without undue delay if one of the reasons set out in art. 17 of the GDPR exists;

- the right to obtain the restriction of processing: when one of the hypotheses set out in art. 18 of the GDPR applies, the interested party may request the restriction of the processing of their data. In this case, the Data Controller will not process the data for any purpose other than their storage;

- the right to object to data processing: the interested party may object to the processing of their data when it occurs on a legal basis other than consent;

-  the right to data portability within the limits and in the ways set out in art. 20 of the GDPR: the interested party has the right to receive their data in a structured, commonly used and machine-readable format and, where technically feasible, to obtain the transfer without hindrance to another Data Controller. This provision is applicable when the data are processed with automated tools and the processing is based on the consent of the interested party, on a contract to which the interested party is a party or on contractual measures connected to it;

- the right to withdraw consent to the processing of data: at any time, without prejudice in any way to the lawfulness of the processing based on the consent given before the withdrawal.

The interested party has the right to receive information relating to the action taken regarding one of the aforementioned requests or the effects arising from the exercise of one of the aforementioned rights, without unjustified delay and, in any case, at the latest within one month from receipt of the request itself, extendable, if necessary, by two months; they also have the right to lodge a judicial appeal and a complaint with the Supervisory Authority, i.e. the Guarantor for the protection of personal data (www.garanteprivacy.it: Piazza Venezia n. 11 - 00187 Rome; garante@gpdp.it, or protocollo@pec.gpdp.it).

The aforementioned rights may be exercised by making a request to the Data Controller.

 

5. Data Controller – DPO – Data Managers

The Data Controller is DiSCo Lazio - Regional Agency for the Right to Higher Education and the Promotion of Knowledge, whose registered address is Via Cesare de Lollis 22-24/B – Rome, and they can also be contacted at the following email address: privacydisco@laziodisco.it

 

The Data Protection Officer: The DPO can be contacted at the registered address of DiSCo, Via Cesare De Lollis 22 - 24/b, 00185 Rome and at the following email address: dpo@laziodisco.it

The updated list of Data Processors is kept at DiSCo Lazio’s headquarters at Via Cesare De Lollis, 22-24/b, 00185 - Rome