Information on the processing of personal data
Istituto Nazionale di Astrofisica, INAF,
IASF-Palermo, Istituto di Astrofisica Spaziale e Fisica Cosmica di Palermo
Information on the processing of personal data of users of the website of the National Institute for Astrophysics and for the use of its online services
What is this information?
Pursuant to Article 13 of the EU Regulation 2016/679 the information provided below describes the processing operations performed on the personal data::
- of the users visiting the website of the Istituto di Astrofisica Spaziale e Fisica Cosmica di Palermo of the National Institute for Astrophysics (hereinafter “INAF”), that can be accessed at www.ifc.inaf.it oppure www.iasf-palermo.inaf.it
- of those who use the online services, where avaible, provided through the website intranet.ifc.inaf.it.
The information provided does not concern other online websites, pages or services that can be accessed via hyperlinks on the above websites but relate to resources outside the IASF INAF’s domain.
The data controller is the National Institute for Astrophysics, located in Viale del Parco Mellini n. 84, IT-00136, Roma (PEC: email@example.com, centralino +39 06.355339).
Data Protection Officer
INAF has appointed a Data Protection Officer (DPO) who can be contacted at the following addresses:
- Istituto Nazionale di Astrofisica, Viale del Parco Mellini n. 84, IT-00136, Roma.
- Email: firstname.lastname@example.org
- PEC-certified mail: email@example.com.
Legal basis for the processing
The personal data are processed by the Data Controller in providing services through this website,
exclusively for the purposes that fall within the institutional goals of INAF and of public interest or for the
formalities required by law or regulation. As part of the aforementioned purposes,
the processing also concerns the personal data necessary to enable the users who requests it to use online services, where available,
provided through the website
Any refusal to provide personal data by the interested party makes it impossible for her/him to use the aforementioned services for which an identified registration is required. Registration for the institutional mailing list must be specifically requested, giving specific consent at the time of registration; consent can be revoked at any time, with consequent deactivation of the service, by accessing the restricted area.
Categories of personal data and purposes of the processing
The information systems and software procedures relied upon to operate this web site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols.
This data category includes the IP addresses and/or the domain names of the computers and terminal equipment used by any user, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user's operating system and computer environment.
These data are necessary to use web-based services and are also processed in order to:
- extract statistical information on service usage (most visited pages, visitors by time/date, geographical areas of origin, etc.);
- check functioning of the services.
However, due to their nature, they could allow the identification of the users through processing and association of data held by third parties, especially where it is necessary to ascertain responsibility in the event of cyber-attack against the website.
Data communicated by users
Sending messages, on the basis of the user’s free, voluntary, explicit choice, to the INAF’s contact addresses entail the acquisition of the sender’s contact information – which is necessary to provide a reply – as well as of any and all the personal data communicated in that manner.
Furthermore, in relation to the services that can also be used online through the website intranet.ifc.inaf.it, must collect the following personal data:
- name and surname
- date of birth
- home address
- fiscal code
- email address and phone number
- identity document parameter
The provision of the above listed data is necessary to use the services provided through this website.
Cookies and other tracking devices
So-called session (non-persistent) cookies are used exclusively to the extent this is necessary to enable secure, efficient browsing.
No sensitive data is exchanged via cookies.
The cookies created by intranet.ifc.inaf.it it do not store personal data that allow to trace and / or know directly the identity of the user and that do not represent a risk to the privacy or integrity of the devices and systems used to access the network or the website.
Data processing and storage methods
The personal data shall be processed even through automated means by the Data Controller, by the Data processor and/or by persons who, under the direct authority of
the controller or processor, are authorised to process personal data, in compliance with the aforementioned legislation.
In compliance with the principles of lawfulness, limitation of purposes and minimization of data, pursuant to Article 5 of EU Regulation 2016/679, the personal data shall be processed for no longer than required for the purposes for which they are collected, prior free and explicit consent of the user expressed at the time of registration.
For the purposes above indicated, the Data Controller Data my disclose the personal data to companies, organizations or associations expressly appointed as
data processors by the INAF IASF Palermo, pursuant to Article 28 of the Regulation.
The personal data may also be disclosed to persons who, under the direct authority of the controller or processor, are authorised to process personal data.
The personal data collected as above are also processed by staff from the INAF IASF Palermo, acting on specific instructions concerning purposes and arrangements of such processing.
Transfer of personal data outside the EU
The personal data shall not be transferred outside the EU.
Rights of data subjects
Data subjects have the right to obtain from the INAF, where appropriate, access to their personal data as
well as rectification or erasure of such data or the restriction of the processing concerning them, and to object to the processing
(pursuant to Articles 15 to 22 of the Regulation).
Please contact the INAF’s DPO (Istituto Nazionale di Astrofisica - Responsabile della Protezione dei dati personali, Viale del Parco Mellini, 84, IT-00136, Roma, email: firstname.lastname@example.org) to lodge all requests to exercise these rights.
Right to lodge a complaint
If a data subject considers that the processing of personal data relating to him or her as performed via this website infringes the Regulation, he or she has the right to lodge a complaint with the Garante pursuant to Article 77 of the Regulation, or else to bring a judicial proceeding against the INAF pursuant to Article 79 of the Regulation.