INFORMATION ON THE PROCESSING OF PERSONAL DATA OF USERS WHO CONSULT THE WEBSITE portafuturolazio.it

pursuant to and for the purposes of articles. 13 of EU Regulation 2016/679

This information describes the methods used for managing the processing of the personal data of users who consult the web portal of the Porta Futuro Lazio project, managed by the Regional Agency for the Right to Higher Education and the Promotion of Knowledge – (hereinafter only DiSCo), as Data Controller (hereinafter also “Controller”) of your personal data (hereinafter, “personal data” or also “data”) of which you are the interested party, pursuant to EU Regulation 2016/679 (hereinafter “GDPR”),

This information is provided exclusively for the official website of the Regional Agency for the Right to Higher Education and the Promotion of Knowledge – DiSCo (/)

1. 1. Purpose of the processing and the legal basis for the processing

The personal data provided by users are used for the sole purpose of performing the service requested.

No data provided freely and voluntarily by users to the web service is communicated or disseminated, except in cases expressly provided for by law.

Your personal data will be processed for the following relevant purposes from time to time:

• To ensure the correct functioning of the platform
• To allow for the use of all the features of the website

1.2.   Type of Data Subject to Processing:

-  Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the devices used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the website and to check its correct functioning, and is stored only for the amount of time that is strictly necessary. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.

-   Data provided voluntarily by the user.

The optional, explicit and voluntary sending of email to the addresses indicated on this website entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Specific information on the processing of personal data will be published progressively on the website’s pages that are set up for particular requestable services.

 

Optional provision of data: apart from what is specified for browsing data, the user is free to provide the Organisation with the personal data requested in the service request forms. Failure to provide said data may make it impossible to obtain the information or service requested.

1. 3.       Data processing and storage methods

The processing is carried out by the Controller through specifically appointed Data Processors and/or Data Managers.

Personal data are processed with automated tools, in accordance with reasoning strictly connected to the purposes of the processing and, in any case, in a way that guarantees their security and confidentiality, and are stored for the period of time strictly necessary to achieve the purposes for which they are collected.

1. 4.       Rights of interested parties

In your capacity as an interested party you have the rights referred to in art. 15 - 22 GDPR and specifically:

-       the right to access your personal data present in paper and/or electronic archives: the interested party has the right to obtain information on the data processed by the Controller, on certain aspects of the processing and to receive a copy of the processed data;

-       the right to obtain the correction of inaccurate personal data without undue delay: taking into account the purposes of the processing, the interested party can verify the accuracy of their data and request their updating or correction;

-       the right to obtain the deletion of personal data concerning them without undue delay if one of the reasons set out in art. 17 GDPR exists;

-       the right to obtain the restriction of processing: when one of the hypotheses set out in art. 18, GDPR occurs, the interested party can request the restriction of the processing of their data. In this case, the Controller will not process the data for any purpose other than their storage;

-       the right to object to data processing: the interested party can object to the processing of their data when it occurs on a legal basis other than consent;

-       the right to data portability within the limits and in the manner set out in art. 20 GDPR: the interested party has the right to receive their data in a structured, commonly used and machine-readable format and, where technically feasible, to obtain the transfer without hindrance to another Data Controller. This provision is applicable when the data are processed with automated tools and the processing is based on the consent of the interested party, on a contract to which the interested party is a party or on contractual measures connected to it;

-       the right to withdraw consent of the processing of data: at any time, without prejudice in any way to the lawfulness of the processing based on the consent given before the withdrawal.

The interested party has the right to receive information relating to the action taken regarding one of the aforementioned requests or the effects arising from the exercise of one of the aforementioned rights, without unjustified delay and, in any case, at the latest within one month from receipt of the request itself, extendable, if necessary, by two months; they also have the right to lodge a judicial appeal and a complaint with the supervisory Authority, in other words the Italian Data Protection Authority (www.garanteprivacy.it: Piazza Venezia n. 11 - 00187 Rome; garante@gpdp.it, or protocollo@pec.gpdp.it). The aforementioned rights may be exercised by making a request to the Data Controller.

 

1. 5.       Data Controller – DPO – Data Managers

The Data Controller is DiSCo Lazio - Regional Agency for the Right to Higher Education and the Promotion of Knowledge, whose registered address is Via Cesare de Lollis 22-24/B – Rome, and they can also be contacted at the following email address: privacydisco@laziodisco.it

The Data Protection Officer: The DPO can be contacted at the registered address of DiSCo, Via Cesare De Lollis 22 - 24/b, 00185 Rome and at the following email address: dpo@laziodisco.it

The updated list of Data Managers is kept at the DiSCo Lazio headquarters at Via Cesare De Lollis, 22-24/b, 00185 – Rome

Legal Notices

These legal notices have been drafted in accordance with the 2011 Guidelines for websites by the Minister for Simplification and Public Administration.

The Porta Futuro LAZIO website provides information on the network’s activity and on the services reserved for its users. Any inaccuracies can be reported by sending an email to info@portafuturolazio.it; staff will respond within 24 hours (from 20 January 2016).

Any unauthorised access, alteration, falsification, modification or deletion in whole or in part of the content of the information published, or impediment or disturbance of the functioning of this website or the services provided, is strictly prohibited and the authors will be prosecuted pursuant to the Criminal Code and Law 23 December 1993, no. 547.

Any failure to comply with these provisions, unless explicitly authorised in writing, will be prosecuted in the competent civil and criminal courts.