This Privacy Policy is provided in compliance with Article 13 of the GDPR 2016/679 (General Data Protection Regulation, European Regulation on the protection of personal data) and the Guidelines of the Data Protection Authority regarding cookies and other tracking tools – June 10, 2021 [9677876]. This information is provided solely for this website (www.iriss.cnr.it) and not for other websites that the user may reach through links.

Data controller

The data controller is the National Research Council (CNR) in its organizational structure of the General Directorate – Data Protection Officer.

• Registered office: Piazzale Aldo Moro, 7 – 00185 Rome
• Certified email (PEC): protocollo-ammcen@pec.cnr.it
• Data Controller contact point: rpd@cnr.it

Data protection officer

The Data Protection Officer (DPO) can be contacted at the following addresses:

• Email: rpd@cnr.it
• Certified email (PEC): rpd@pec.cnr.it

Recipients

Your personal data is processed by internally trained and designated personnel authorized for processing in support of the Data Protection Officer.

Purposes and legal basis of processing

The World Wide Web site of the Institute for Research on Innovation and Services for Development (IRISS) of the CNR contains tools and information concerning the theme of personal data processing within the activities conducted by the Entity. Your personal data is processed solely to ensure the security and functionality of the site, therefore the processing is conducted in the legitimate interest of the controller based on Article 6, paragraph 1, letter f of the GDPR.

Types of data processed and processing methods

The personal data collected concerns the browsing data normally received by the HTTP service (such as IP address, operating system, and any other data normally passed from the client to the server via the HTTP protocol). The data is received and stored through the so-called “logfiles” of the service.

Cookies are portions of code transmitted from the server to the client and used by the latter in subsequent access sessions to the site to identify themselves. This Site uses technical cookies to identify the user session and to perform activities strictly necessary for its operation. User profiling through third-party services is not foreseen. For their installation, prior consent of users is not required but information is sufficient, pursuant to Provision no. 231 of June 10, 2021, of the Data Protection Authority (GU General Series no. 163 of 09-07-2021). First-party technical identifiers are also used to produce aggregated statistics using internal tools of the Entity and in relation to a single site, equated to “Cookies and other technical identifiers” as per annex 1 to the provision “Guidelines on cookies and other tracking tools – June 10, 2021 [9677876]”.

It is possible at any time, through the browser functionality (the client) of the user, to remove all cookies installed by the server.

Data retention

Your data will be stored solely to ensure the security of the site for a period not exceeding 6 months.

Transfer to third Countries or international organizations

Personal data is not communicated or disclosed to third parties or transferred to third countries or international organizations in any way and for any reason.

Rights of data subjects

With reference to the processing of personal data, the data subject has the right to:

• access their data;
• oppose the processing of their data;
• obtain the deletion or removal of their personal data;
• submit a complaint to the competent data protection supervisory authority or take legal action pursuant to Articles 77 and 79 of the GDPR. Given the nature of the data (logfiles only), it is not possible to request their updating or correction.

To exercise one or more of these rights, interested parties can direct a request to the contact details of the controller indicated in this document.