GDPR
Information on the processing of personal data pursuant to EU Regulation 2016/679
INTRODUCTION
This document explains what information is collected when you visit our website, as well as how and why this information is collected and used. We take your privacy seriously and are proactive in ensuring the necessary steps to protect your personal data.
This information is provided only for this site and not for other websites that may be consulted via links contained in this site.
This information complies with the Guidelines for Public Administration websites.
Hereinafter, Portlab refers to Portale Portlab.
Contacts
- Data Controller: National Research Council (CNR), Piazzale Aldo Moro, 7 - 00185 Rome, Italy, contact email: privacy@cnr.it;
- Data Processor of data protection CNR: Eng. Raffaele Conte, contact email: rpd@cnr.it;
- Internal CNR–IFAC Manager: the Director of the Institute, contact email: direttore@ifac.cnr.it.
TYPES OF DATA PROCESSED
Browsing data
The computer systems and applications dedicated to the operation of this website collect, during their normal operation, some data (the transmission of which is implicit in the use of internet communication protocols) not associated with directly identifiable users.
The data collected includes the IP addresses of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters regarding the operating system and the IT environment used by the user.
These data are processed for the time strictly necessary and for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its regular functioning.
USE OF COOKIES AND OF BROWSER STORAGE
What cookies are
Cookies are (name, value) pairs that a website has the browser store, and that the browser sends back with every later request. They serve, for instance, to keep the site from forgetting that you have already signed in to a restricted area while you move from one page to the next.
Which cookies this site uses
This site uses technical cookies only, that is, those strictly necessary to provide the service the user asked for. It does not profile users, does not collect browsing statistics, hosts no third-party cookies and uses no advertising or audience-measurement tool. This is the complete list:
| Name | Purpose | Created when | Lifetime |
|---|---|---|---|
PHPSESSID |
Holds together the requests of one visit: chosen language, access profile, protection of forms against forged submissions. | On the first page opened. | Until the browser is closed; data on the server expire after 12 hours of inactivity. |
remember |
Recognises those who asked to stay signed in, without asking for the credentials again. It holds two random values; only the digest of the second is kept in the database, so its content cannot be reused by anyone reading the database. The password never goes into a cookie. | Only if stay signed inis ticked when signing in. |
10 days, and it is deleted on sign-out. |
cookie_notice |
Remembers that the opening notice has been read, so it is not shown again on every page. | When the notice is closed. | 180 days. |
Browser local storage
Some pages keep display preferences in the browser's local storage. Unlike cookies, these data are never sent to the site: they stay on the device and only serve to find things as they were left.
| Item | Where | Content | Lifetime |
|---|---|---|---|
csrf_reload |
All pages. | One instant in time, to keep a page from reloading in a loop when the form protection expires. | Until the tab is closed. |
gestdb_load |
Restricted area, database management. | One query passed from a page to the next. | Deleted right after being read. |
cbWrapPos, titlePos,
func3d_autosave_v1 |
Restricted area, three-dimensional plot page. | Position of legend and title moved with the mouse, and a working copy of the current configuration, so a reload does not lose it. | Until the site data are cleared. |
They are cleared from the browser together with the site data.
Connections to other sites
Pages are served entirely by this site: scripts, stylesheets, fonts and images do not come from external services, so opening a page discloses the IP address to no third party. Two exceptions concern specific pages of the restricted area:
- pages with a map fetch the map tiles from OpenStreetMap
(
tile.openstreetmap.org), which therefore receives the IP address of whoever views them; - one example page embeds a service hosted on another machine of the Institute, which belongs to the same data controller.
Links to external sites appearing in the texts open only if the user chooses them.
Why no consent is requested
Technical cookies require no consent under Article 5(3) of Directive 2002/58/EC, Article 122(1) of the Italian Personal Data Protection Code and the Italian Data Protection Authority's cookie guidelines of 10 June 2021. Since no consent is collected, there is no choice to change or to withdraw, and the notice shown on the first visit is there only to inform. Should the site ever adopt non-necessary tools, a real consent request would appear, with the possibility of refusing and of changing one's mind at any time.
How to prevent storage
Anyone who prefers to have nothing stored can block cookies in their own browser, following the vendor's instructions:
Public pages remain readable. Access to the restricted area, however, is not possible without the session cookie: that is what keeps the sign-in valid from one page to the next.
Personal data: collection and use
While using our website, you may be asked to provide personal data (name, address, email, account details, etc.). If requested, we will use this data to administer our website processes and databases that ensure the possibility of using the program developed within the Portlab project. We will ensure that all personal data provided is kept securely in accordance with the General Data Protection Regulation (EU) 2016/679.
User Rights
As a user you can verify the details you have submitted to CNR-IFAC by contacting us at the following email address: direttore@ifac.cnr.it.
Our security procedures mean that we may request proof of identity before disclosing information, including your email address.
You can also contact us using the same method to change, correct or request that we delete your personal data in relation to the above accounts at any time. For your convenience, this can be done yourself by using the appropriate interface, by logging in with your email address.
Please note, however, that if you have shared data with others through social media channels, this data may remain visible, even if your account has been deleted on our site.
You can request a readable copy of the personal data we hold at any time and this request will be processed within one month (provided that there is no unreasonable burden and that it does not compromise the privacy of other people). To do this, please contact us at the following e-mail address: direttore@ifac.cnr.it.
As a user you can request that your data be transferred to another system.
What data do we collect?
We collect the following personal data from those who decide to register to use the processing programs:
- Name and surname
- Name and address of the Organization you belong to
- Telephone
Why are these data collected?
We collect personal information to allow the authenticated user, within the project Portlab:
- to access the sections of the site not open to the public
- to upload data into the database and on the CNR-IFAC server
- to consult confidential data
How will the data be archived?
The data will be archived in the project management database Portlab, which resides on our server.
Processing methods
CNR–IFAC adopts all the security measures provided for by Regulation (EU) No 2016/679 to protect the data collected, in order to avoid the risks of loss or theft of data, unauthorized access, illicit and incorrect use.
How will the collected data be used?
The names and addresses will be used exclusively for the purposes declared by CNR–IFAC and will not be made available for any other purpose or to any other party, excluding legal obligations.
How long do we keep your data?
CNR–IFAC will not keep your personal data for the performance of research activities and in any case for a period not exceeding 5 years from the closing date of the Portlab (31/12/2030) project. If required by law or if reasonably necessary to comply with regulatory requirements, resolve disputes, prevent fraud and abuse or apply our policies, we may retain some of your data for a limited period of time, even after you have closed your account.
Optional nature of data processing
Apart from what is specified for navigation data, the provision of data through this website, or communications transmitted on a voluntary basis by the user to CNR– IFAC, is always optional; however, if you do not provide the data marked as mandatory, CNR–IFAC will not be able to provide the User with the requested service, in this case participation in the Portlab project.
Right to update our privacy policy
Please note that in order to constantly adapt to the law and indications of the CNR headquarters, we are constantly reviewing how we process and protect data. Therefore, changes to our policy may occur at any time.
Complaints, disputes
Complaints or questions regarding data protection and privacy should be addressed to the CNR data protection officer, contact email: rpd@cnr.it.
You also have the right to lodge a complaint with the National Supervisory Authority (Guarantor for the Protection of Personal Data).
Keywords: GDPR