INFORMATION ON PERSONAL DATA PROCESSING
for users who visit the CIRA – Italian Aerospace Research Centre www.cira.it
In accordance with Article 13 of (EU) Regulation n.679/2016
THE AIM OF THIS INFORMATION
In accordance with (EU) Regulation n.679/2016 (hereinafter referred to as "Regulation"), this page describes the processing methods of the personal data of users who visit the CIRA www.cira.it website, by telematic link.
This information does not regard other sites, pages or online services that can be reached via any hyperlinks published on the website, but it refers to external sources outside the CIRA domain.
DATA CONTROLLER
After visiting the website data relating to identified or identifiable natural persons may be processed.
The Data Controller is CIRA S.c.p.a., with its registered offices in CAPUA (Caserta, Italy), Via Maiorise, s.n.c. (E-mail: presidenza@cira.it PEC: cirascpa@legalmail.it, switchboard +39 0823.623001).
DATA PROTECTION OFFICER
The Data Protection Officer (DPO) can be contacted at this address: CIRA, Italian Aerospace Research Centre – Data Protection Officer, e-mail: rpd@cira.it.
PERSONAL DATA PROCESSED
We collect the following categories of personal data:
-
Common data: name and surname, sex, e-mail address, residence/domicile address, date of birth, nation of birth, contact language.
PURPOSES OF THE PROCESSING, LEGAL BASIS AND DATA RETENTION PERIOD
a. Collection of navigation data
The information systems and software procedures used to operate the Website acquire certain elements of personal data during the course of their normal operation. This is information that is not collected in order to be associated with identified data subjects, but which could, through processing and association with data retained by third parties, enable the identification of users.
IP addresses or domain names of computers used by users to connect to the Website, URI (Uniform Resource Identifier) of the requested resources, the time the request was made, the method used to submit the request to the server, the size of the file obtained in response, the numerical code specifying the status of the response given by the server (successful, error, etc.) as well as any other parameters relating to the operating system and the user's IT environment fall into this category.
Such data, necessary to use web services, are also processed with the aim of:
-
Obtaining statistical information on the use of the services (the most visited webpages, the number of visitors per time-slot or per day, geographical area of origin, etc.);
-
Checking the correct functioning of the services offered.
Navigation data is not stored for more than seven days and is immediately eliminated after their aggregation (without prejudice to the need to investigate into computer-related crimes committed to the detriment of the Website on behalf of the competent Judicial Authority).
The legal basis that legitimises the processing of personal data is the Data Controller's legitimate interest; data is immediately deleted after processing.
b. Use of cookies
Cookies are data that has been created by a server and is memorised in text files on the hard disk of your computer and enable the Website to be aware of your behaviour.
The Website uses only technical cookies, divided into:
-
Navigational or session cookies, that guarantee the normal browsing and use of the Website (to enable you, for example, to maintain your preferences, so that you do not have to enter your user name and password every time you access the Website);
-
Cookie analytics are used only to collect information, in an aggregate form, on the number of users and how these visit the Website itself, so as to be able to assess and improve its functioning. For example, it makes it possible to know which pages are most and least visited, the number of visitors and how long the users have spent on the Website. All the information collected by these cookies is anonymous and not linked to the user's personal data;
The Website does not use profiling cookies.
Third party cookies, sent by websites or web servers other than ours are present on the Website, on which certain elements may be stored (for example, images, maps, sounds, specific links to pages on other domains) present on the website that the same is visiting. More specifically, on the website there are Google Analytics cookies. The third party cookies present on the Website are exclusively technical cookies.
You can oppose to the registration of cookies on your hard disk by configuring your browser (Internet Explorer, Mozilla Firefox, Safari etc.) so as to disable cookies. However, after having carried out this operation, certain webpage functions may not work properly.
c. Provision of assistance to the data subject
The data is processed so as to fulfil a contact request sent by the data subject, by filling in the contact form in the Website sections; in particular, the data is processed in order to enable the recognition of the data subject with regards to specific requests relating to products and services provided by the Company.
The legal basis of this processing activity is the need to fulfil a request made by the data subject, so as to improve the service provided to the user and to satisfy the expectations of the same. The data shall be stored for ten years as from the data of collection.
d. Registration relating to popular science events or initiatives
The data is processed in order to enable the data subject to register to participate in events such as seminars, workshops, conferences or other initiatives of a scientific nature promoted by the Company through its Website.
The legal basis of this processing activity is the need to fulfil a request made by the data subject. The data shall be stored for the duration of the event.
e. Sending of newsletters
The data is processed in order to enable the Data Controller to send, via e-mail, communications of an informative nature ("Newsletter") to those who have made an explicit request to receive such, by entering their name, surname and e-mail in the appropriate data collection form.
The legal basis of this processing activity is the need to fulfil a request made by the data subject. The data shall be stored until the data subject requests to be unsubscribed from the newsletter service.
f. Legal obligations
In order to fulfil obligations foreseen by regulations as well as applicable national and supranational legislation (laws, regulations, also of a sectoral nature).
The legal basis for this processing activity is the fulfilment of legal obligations with which the Company must comply. The data shall be stored until the legal obligations for which they have been processed, have been fulfilled.
g. Defending rights before a Court of Law
The processing of data by the Data Controller may be carried out, in case of need, in order to ascertain, exercise or defend the rights of the Data Controller him/herself before a Court of Law.
The legal basis of this processing activity is the legitimate interest of the Company to defend itself before a Court of Law against the data subject. In the case of litigation, the data shall be stored for the entire duration of the legal proceedings, until the terms of enforceability of the actions can no longer be appealed against.
PROVISION OF DATA
The provision of data for the purposes as of the following letters:
-
a) is automatic; it is acquired by the system while browsing on the Website;
-
b) is optional; failure to provide data may lead to the non-fulfilment or partial fulfilment of certain webpage functions;
-
c) is compulsory in order to guarantee the provision of feedback to the data subject with regards to requests made;
-
d) is compulsory in order to enable the data subject to register to participate in events organised by the Data Controller;
-
e) is compulsory in order to enable the data subject to receive the Newsletter;
-
f) is compulsory in order to enable the Data Controller to fulfil obligations foreseen by regulations as well as applicable national and supranational legislation (laws, regulations, also of a sectoral nature).
-
g) is compulsory in order to guarantee the Data Controller's legitimate interest to defend him/herself before a Court of Law in proceedings against the data subject.
DATA RECIPIENTS
Your personal data shall be processed by employees and/or collaborators of the Data Controller who have received appropriate operational instructions and have been expressly authorised to carry out data processing activities.
Your data may be communicated to individuals, autonomous Data Controllers, for example, in case, the communication must be given due to the fulfilment of legal or regulatory obligations or if such is of significant public interest.
The data may also be processed, on behalf of the Company, by external individuals appointed as external Data Processing Officers in accordance with Art. 28 of the Regulation, for example, Companies that deal with the development and maintenance of the web platform.
DATA SUBJECTS' RIGHTS
In relation to the processing of personal data carried out by the Data Controller, you can request the same to grant you access data that regards you, the relative erasure, the rectification of incorrect data, the integration of incomplete data, the restriction of data processing activities in the cases foreseen by Art. 18 of the GDPR, as well as the opposition to data processing, for reasons linked to a particular situation, in the case of the Data Controller's legitimate interest.
In the case in which the processing activities are based on consent and have been carried out using automated means, you have the right to receive your data in a structured, commonly-used format, legible by an automatic device and, if it is deemed technically feasible, to transmit it to another Data Controller without any hindrance.
At any time whatsoever, you can lodge a complaint with both the Italian Data Protection Authority, and resort to using any other judicial remedy foreseen by applicable legislation.
In order to exercise your rights, you can contact the Data Controller by sending written communication of such to the abovementioned address or an e‐mail to: rpd@cira.it.