This policy describes the procedures followed by the Centre of Integrated Geomorphology for the Mediterranean Area, located in Via Francesco Baracca, 175 – 85100 Potenza (hereinafter “CGIAM” or the “Holder”) in relation to the processing of personal data collected through the site https://www.magnetproject.eu/ (hereinafter the “Site”).

Unless otherwise specified, this policy is also valid as information – pursuant to art. 13 of Regulation (EU) no. 2016/679 (hereinafter the ” GDPR “) – given to those who interact with the Site (hereinafter the ” User “).

Detailed information on the processing of personal data are reported, where necessary, in the pages relating to the individual services offered through the Site. These information are aimed at defining the limits and methods of processing the personal data of each service, on the basis of which the User can freely express their consent, where necessary, and possibly authorize the collection of data and their subsequent processing.

Data Controller Responsible for the treatment.

The Data Controller is CGIAM, e-mail privacy@cgiam.org. The updated list of any data processors is available at the headquarters of the Data Controller.

Data processed types

Through the Website, the following may be collected and processed:

• navigation data;
• personal data provided voluntarily by the User in the forms on the Site.

Cookies.

Cookies are small text files that the sites visited send to the user’s terminal, where they are stored, and then re-transmitted to the same sites on the next visit.

The Site uses technical cookies, both its own and those of third parties. These cookies, being of a technical nature, do not require the prior consent of the User to be installed and used.

The Site also uses third-party profiling cookies. With regard to these cookies, the User’s consent is assumed to be given whenever the user clicks on the “I accept” button, present in the banner that appears on the homepage. The User can, in any case, revoke his consent to the installation of these cookies at a later time.

In particular, the cookies used on the Site can be traced back to the following sub-categories:

• navigation or session cookies, which guarantee normal navigation and use of the Site. Not being stored on the user’s computer, they disappear when the browser is closed;
• analytical cookies, with which statistical information on the number of users and visits to the Site are collected and analysed;
• social widgets and plug-ins: some widgets and plugins made available by social networks can use their own cookies to facilitate interaction with the reference site;
• profiling cookies, which are used to collect information on the preferences and habits expressed by the user during their navigation and therefore make the advertisements provided by third parties more engaging and targeted.

The third-party cookies installed on the Site are listed below. For each of them there is a link to the relative information on the processing of personal data carried out and on the methods for deactivating the cookies used. With regard to third-party cookies, the Owner is only required to include the link to the third-party site in this policy. On the other hand, this subject is responsible for the obligation to provide information and indicate the methods for any consent and/or deactivation of cookies.

[cookie di terze parti installati sul sito]

Cookies can be disabled by the user by changing the browser settings on the basis of the instructions made available by the relative suppliers at the links listed below.

• Internet Explorer
• Mozilla Firefox
• Google Chrome
• Apple Safari
• Opera
• Edge

 

Purpose and legal basis of the processing.

Personal data collected through the Site will be processed:

1. for the management of requests for information sent by the User;
2. for sending commercial communications about products and services.

The processing of personal data for the purpose sub a) does not require the User’s consent as the processing is necessary to fulfill specific requests of the interested party pursuant to art. 6, c. 1, lett. b) of GDPR. The processing of personal data for the purpose sub b) requires the User’s consent pursuant to art. 6, c. 1, lett. a) of GDPR.

Provision of data and consequences in case of non-provision.

The provision of personal data for the aforementioned purposes is optional and their failure to provide it will result, as the only consequence, in the impossibility for the Data Controller to manage and process the requests of the interested party or to send commercial communications on products and services of the same.

Recipients or categories of recipients.

Personal data may be made accessible, brought to the attention of or communicated to the following subjects, who will be appointed by, depending on the case, as managers or agents:

• companies of the group to which the Controller belongs (parent companies, subsidiaries, affiliates), employees and/or collaborators in any capacity of the Controller and/or companies of the group to which the Controller belongs;
• public or private subjects, natural or legal persons, which the Data Controller uses to carry out the activities instrumental to achieving the aforementioned purpose or to which the Data Controller is required to communicate personal data, by virtue of legal or contractual obligations.

In any case, personal data will not be disclosed.

Storage period.

Personal data will be kept for 2 years from their registration.

Rights of access, cancellation, limitation and portability.

The interested parties are entitled to the rights referred to in articles from 15 to 20 of the GDPR. By way of example, each interested party may:

1. obtain confirmation as to whether or not personal data concerning him is being processed;
2. if a treatment is in progress, obtain access to personal data and information relating to the treatment as well as request a copy of personal data;
3. obtain the rectification of inaccurate personal data and the integration of incomplete personal data;
4. obtain, if one of the conditions set forth in art. 17 of the GDPR, the cancellation of personal data concerning him;
5. obtain, in the cases provided for by art. 18 of the GDPR, the limitation of the treatment;
6. receive personal data concerning him in a structured format, commonly used and readable by an automatic device and request their transmission to another holder, if technically feasible.

Right to object.

Each interested party has the right to object at any time to the processing of his personal data carried out for the pursuit of a legitimate interest of the Data Controllers. In case of objection, your personal data will no longer be processed, provided that there are no legitimate reasons for proceeding with the processing which prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court.

Right to withdraw consent.

In the case that consent is required for the processing of personal data, each interested party may also revoke the consent already given at any time, without prejudice to the lawfulness of the treatment based on the consent given before the revocation. Consent can be revoked by writing an email to privacy@cgiam.org.

Right of opposition and withdrawal of consent in relation to the treatment carried out for marketing purposes.

Regarding the processing of personal data for the purpose under b), each interested party may revoke any consent given at any time or oppose their processing, by writing an email to privacy@cgiam.org. The opposition to the treatment exercised through these methods also extends to the sending of commercial communications by means of the postal service or telephone calls with an operator, without prejudice to the possibility of exercising this right in part, by objecting, for example, only to the treatment carried out through systems automated communications.

Right to lodge a complaint with the Guarantor.

Furthermore, each interested party may lodge a complaint with the Guarantor for the Protection of Personal Data if he believes that the rights he holds under the GDPR have been violated, according to the methods indicated on the Guarantor’s website accessible at the address: www. garanteprivacy.it.

Updates. This Privacy Policy will be subject to updates. The Data Controller therefore invites Users who wish to know the methods of processing personal data collected through the Site to visit this page periodically.

Last update:01/03/2023