Contact information

INFORMATION AND CONSENT TO THE PROCESSING OF USERS’ PERSONAL DATA FOR THE “CONTACTS” SERVICE OF BIOINSOUTH PROJECT PURSUANT TO ART. 13 and 14 OF REGULATION (EU) 2016/679 (“GDPR”)

Premise

The “contacts” service offered by the joint data controllers allows all those who request it, through the form (https://www.bioinsouth.eu/contact/), to send an e-mail to the contact address of BioINSouth Project. We inform you that the personal data you provide and, as well as the data acquired through the analysis of e-mails and requests sent by you, will be processed in compliance with the provisions of EU Regulation no. 2016/679 (for short, “GDPR”).

Joint controllers – contact information – single point of contact

The joint data controllers, specifically indicated in the Privacy Policy (https://www.bioinsouth.eu/privacy-policy/), have identified a single point of contact, a figure to which the data subject must address, as it is aimed at collecting any report relating to the data subject and all those concerning the joint controllership. The single point of contact is the SPRING Cluster “Sustainable Processes and Resources for Innovation and National Growth” (C.F. 97684680156 and P.IVA 12179510966) in the figure of the DPO for the project BioINSouth who can be reached at the following e-mail: privacy@bioinsouth.eu.

The user may send, at any time, requests for information, clarifications and exercise their rights, by communication to the address of the single point of contact, or through the additional methods indicated in the Privacy Policy (https://www.bioinsouth.eu/privacy-policy/).

Categories of data processed

The joint data controllers process personal data of a common nature (name, surname, e-mail address, other personal data and/or data relating to work, company name and other data that you may provide; browsing data such as IP address, addresses in URI/URL notation, etc.) which will be provided by the user when sending his e-mail through the appropriate contact form. The optional, explicit and voluntary sending of the e-mail on your part consequently involves the acquisition of your e-mail address and other data provided by you through your communication.

Purpose of the processing, legal basis of the processing and processing methods

The processing of your data by means of IT and telematic tools (and/or by manual tools) is aimed at sending answers to your questions, by way of example but not limited to, of an informative nature and/or technical-specialist requests relating to the BioINSouth Project, by e-mail and/or, if agreed or if expressly requested by you, also by certified email or telephone.

The legal basis for this processing is to be found in the consent expressed by the data subject pursuant to Article 6, paragraph 1, letter a) GDPR and in compliance with the legal obligations to which each of the joint controllers is subject pursuant to art. 6 para. 1 lit. c) GDPR. The communication of the common personal data indicated above is a necessary condition in order to be able to provide the requested service.

Your data will be processed by the joint controllers, by the members of the consortium who request access to the site, by their staff and their collaborators (internal or external, natural or legal persons), expressly authorized, for maintenance needs of the service and for the correct provision of the service itself.

Data retention period

The personal data collected for the purposes indicated in the previous paragraph will be processed to provide the requested service and, consequently, will be stored for the minimum period necessary to achieve the purposes pursuant to art. 5 lit. e) GDPR or in the event of your withdrawal of consent to the service. Once the purposes have been achieved or following your withdrawal of consent – before being able to provide you with the requested service or following the processing of your request – the technical procedures necessary for the cancellation of your data will be carried out, except for any need to ascertain crimes (and/or other types of offences) by the judicial authority.

Categories of recipients of personal data – Transfer of data to non-EU countries

The data subject to processing may be communicated, in addition to the subjects referred to the paragraph “Purposes of processing, legal basis of processing and processing methods“, also to the judicial authorities for the need to ascertain unlawful acts.

The data collected may be transferred to non-EU countries, in particular Turkey where the co-controller TUBITAK, a partner in the project, is based. We would like to point out that, for this country, the European Commission has not issued the adequacy decision, pursuant to art. 45 GDPR, i.e. Turkey is not counted among the “adequate” countries, able to guarantee an adequate level of protection of personal data, to European standards. For this reason, for the purposes of transferring your data to Turkey, pursuant to art. 49 paragraph 1 letter a), the explicit consent of the interested party is required.

Withdrawal of consent

You have the right to withdraw your consent at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.

Rights of the data subject

In relation to the data subject to the processing referred to in this policy, you are recognized, at any time, the right to:

Access (art. 15 EU Regulation no. 2016/679) – the right to request and obtain from the Data Controller confirmation that the processing of your data is being carried out and access to the data concerning the data subject (including to know the purpose of the processing, the categories of data processed);

Rectification (art. 16 EU Regulation no. 2016/679) – allows you to request the Data Controller to correct, modify, integrate your personal data;

Erasure (art. 17 EU Regulation no. 2016/679) – allows you to obtain the deletion of your data without justified delay (so-called right to be forgotten);

Restriction (art. 18 EU Regulation no. 2016/679) – the right to obtain a limitation on the processing of the data subject’s data, for example, in addition to the exercise of the right referred to in art. 16 for as long as necessary to ascertain the correctness of the data;

Portability (art. 20 EU Regulation no. 2016/679) – allows the data subject to receive personal data concerning him or her so that he or she can transmit them to another Data Controller;

Objection to processing (art. 21 EU Regulation no. 2016/679) – allows the data subject to object to the processing of personal data concerning him/her.

The exercise of your rights can be exercised by written communication to be sent to the contact point privacy@bioinsouth.eu.

Complaint

It should be noted that pursuant to art. 77 of EU Regulation no. 2016/679, you may lodge a complaint with the Guarantor Authority in the event of violation of the current legislation on the protection of personal data.

 

CONSENT TO THE PROCESSING OF PERSONAL DATA REGULATION (EU) 2016/679

The user having been informed:

– the identity of the data controller

– of the measure, the methods by which the processing takes place

– the purposes of the processing for which the personal data are intended

– the right to withdraw consent as indicated in this information prepared pursuant to art. 13 of Regulation (EU) 2016/679

by placing the flag in the appropriate box “I have read and accept the terms and conditions of the service

STATES

That the user has received and read this information and

AGREES

pursuant to and for the purposes of art. 7 et seq. of Regulation (EU) 2016/679, to the processing of personal data in the manner and within the limits set out in this policy.