Who we are
Our website address is: http://migra.iit.cnr.it.
In accordance with EU Regulation 2016/679, the “General Data Protection Regulation” (“GDPR”), and Italian Legislative Decree No. 196/2003, the “Personal Data Protection Code”, we provide the following information on the processing of personal data.
Parties involved in data processing
- Data controller:
- National Research Council (CNR), Piazzale Aldo Moro 7, 00185 Rome, Italy
- Internal data-processing manager:
- Director of the Institute of Informatics and Telematics (IIT–CNR), direttore@iit.cnr.it
- Data Protection Officer for the data controller:
- rdp@cnr.it
- Contact:
- andrea.marchetti@iit.cnr.it
Comments
When visitors leave comments on the website, we collect the data shown in the comments form, together with the visitor’s IP address and browser user-agent string, to help detect spam.
An anonymised string created from your email address, also known as a hash, may be provided to the Gravatar service to determine whether you use it. The Gravatar privacy policy is available at https://automattic.com/privacy/. Once your comment has been approved, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images containing embedded location data (EXIF GPS). Visitors can download images from the website and extract any location data they contain.
Cookies
If you leave a comment on our website, you may choose to save your name, email address and website in cookies. These are provided for your convenience so that you do not have to enter your details again when leaving another comment. These cookies last for one year.
If you visit the login page, a temporary cookie will be set to determine whether your browser accepts cookies. It contains no personal data and is deleted when you close your browser.
When you log in, several cookies will be set to store your login information and screen-display preferences. Login cookies last for two days and screen-option cookies for one year. If you select “Remember me”, your login will remain active for two weeks. Login cookies are removed when you log out.
If you edit or publish an article, an additional cookie will be stored in your browser. It contains no personal data and merely identifies the article you have just edited. It expires after one day.
Embedded content from other websites
Articles on this website may include embedded content such as videos, images and articles. Embedded content from other websites behaves in exactly the same way as if the visitor had visited the other website.
These websites may collect data about you, use cookies, add further third-party tracking and monitor your interaction with the embedded content, including tracking your interaction if you have an account and are logged in to those websites.
Who we share your data with
If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This allows us to recognise and automatically approve subsequent comments rather than holding them in a moderation queue.
For users who register on our website, if any, we also store the personal information they provide in their user profile. All users may view, edit or delete their personal information at any time, except for their username, which cannot be changed. Website administrators may also view and edit this information.
Your rights concerning your data
If you have an account on this website or have left comments, you may request an exported file containing the personal data we hold about you, including data you have provided. You may also request that we erase any personal data concerning you. This does not include data we are required to retain for administrative, legal or security purposes.
Legal basis for processing
The data controller processes personal data in the performance of tasks carried out in the public interest pursuant to Article 6(1)(e) GDPR.
Special categories of personal data (sensitive data) are processed for scientific-research purposes pursuant to Article 9(2)(j) GDPR and on the basis of your explicit consent under Article 9(2)(a) GDPR and Article 110 of the Italian Privacy Code.
Where your data is sent
Visitor comments may be checked using an automated spam-detection service.
Purposes and methods of processing
The personal data requested from users—first name, surname and email address—to use the application will be processed in compliance with applicable personal-data protection law and the general authorisations issued by the Italian Data Protection Authority.
All safeguards required by personal-data protection legislation and other applicable rules are implemented. Data will be processed exclusively by the data controller, the scientific coordinator and/or persons authorised within the project, using automated and non-automated tools, solely to fulfil the stated purpose and all related operations and activities.
The Suoniamo application and its supporting database are hosted on IIT-CNR servers. Data is processed electronically using security measures consistent with the principles laid down in Article 5 GDPR, including:
- Access to data through the application is protected by password-authentication mechanisms.
- Use of the HTTPS protocol, with authentication, encryption and data-integrity guarantees.
- Updates to the hosting server and installed software, with appropriate application of security patches.
- Use of firewalls.
- VPN tunnelling for remote access to the server.
- Backup systems.
- The database contains pseudonymised data and is protected by encrypted passwords.