Information notice for users
Why do we need an information notice?
This page describes how the RURITAGE project web site is managed as concerns the processing of users’ personal data. This information is provided in pursuance of the EU General Data Protection Regulation (Reg. EU No. 2016/679, shortly GDPR) to any entity having to do with the web-based services that are made available by the RURITAGE consortium via electronic networks as from the following address: https://www.ruritage.eu which corresponds to the home page of our official web site.
The information provided here only applies to our web site and does not concern any other web sites that may be visited by users via external links.
The information is also based on the guidelines contained in Recommendation no. 2/2001, adopted on 17 May 2001 by the European data protection authorities within the Article 29 Working Party on certain minimum requirements for collecting personal data on-line in the European Union and on the Article 29 WP Guidelines on Transparency
Identity and contact data of the controller
Visiting this site may result into the processing of personal data concerning identified or identifiable persons.The data controller is the web site owner and RURITAGE project partner: Alma Mater Studiorum University of Bologna, Address: via Zamboni 33 – 40126 Bologna, Italy, E-mail: privacy@unibo.it, Registered e-mail (PEC): scriviunibo@pec.unibo.it.
Contact data of the Data Protection Officer
The University of Bologna DPO contacts are: E-mail: privacy@unibo.it, Registered e-mail (PEC): scriviunibo@pec.unibo.it.
Categories of processed data
Navigation data
The information systems and software procedures relied upon to operate this web site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols. Such information is not collected in order to relate it to identified data subjects, however it might allow user identification per se after being processed and matched with data held by third parties.
This data category includes IP addresses and/or the domain names of the computers used by any user connecting with this web site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, the returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user’s operating system and computer environment. These data are only used to extract anonymous statistical information on website use as well as to check its functioning; they are erased immediately after being processed. The data might be used to establish liability in case computer crimes are committed against the website; except for this circumstance, any data on web contacts is currently retained until the end of the project.
Data provided voluntarily by users
Sending e-mail messages to the addresses mentioned on this website and/or filling in the information form is done on the basis of a freely chosen, explicit, and voluntary option. This implies the acquisition of the sender’s e-mail address, which is necessary in order to reply to any request, as well as of such additional personal data as is contained in the message(s) and/or in the form. Specific information notices are provided on the pages made available to users for sending messages and requests.
Cookies
The RURITAGE website uses Universal Analytics plugin developed by Google. This plugin uses these 2 cookies:
- _ga – Used to distinguish users;
- _gat – Used to throttle request rate.
More information can be found here.
Place where personal data are processed
The processing operations related to the web-based services that are made available via this website are carried out at the above-mentioned UNESCO office, exclusively by duly authorised staff in charge of said processing, or else by persons tasked with such maintenance activities as may be necessary from time to time. Data are hosted at UNESCO virtual servers located in UNESCO’s premises.
Purposes, scope and legal basis of the processing
As concerns data voluntarily provided by users, they will be processed only for the specific and legitimate purposes indicated in the information notice. Personal data sent by e-mail or via on-line forms will only be processed to reply to senders and to comply with their requests. Any personal data that are provided by users requesting information, answers to questions and materials such as brochures, DVD, newsletters, etc. is only used to provide the service and/or discharge the tasks requested and is disclosed to third parties only if this is necessary for the said purposes. Only data strictly necessary to achieve the above-mentioned purposes will be processed. The legal basis for the processing will be the users’ informed consent.
Modalities of processing
Personal data are processed with electronic and manual means, for no longer than is necessary to achieve the purposes for which they have been collected; the logic involved in this will be strictly consistent with the above-mentioned purposes. Specific security measures are implemented to prevent the data from being lost, used unlawfully and/or inappropriately, and accessed without authorisation.
Recipients or categories of recipients of the data
Personal data resulting from web-based services may be communicated to other RURITAGE partners, only for the purposes specified in this information notice. The complete list of partners with contact details is available here.
Data may be communicated to competent authorities (e.g. police, Courts) upon request, in compliance with applicable law, e.g. for the prevention of crimes or to defend a right in legal proceedings.
Data will be processed by duly authorised personnel by UNESCO or by other RURITAGE partners.
Data may be processed by technical personnel, whether internal or external to UNESCO, only to the extent that it is strictly needed to solve technical (e.g. IT) problems and/or to provide technical assistance.
No personal data will be disseminated, unless foreseen for project dissemination and with the consent of the data subjects.
Voluntary nature of the provision of personal data
Subject to the specifications made with regard to navigation data, the provision of personal data to the RURITAGE website (e.g. via e-mail and/or on-line forms) is free and fully voluntary.
Consequences of failure to provide personal data
If users fail to provide the personal data needed to achieve the above-mentioned purposes, it may be impossible to reply to their requests.
Data storage period
Personal data will be stored only for the period strictly necessary to achieve the above-mentioned purposes and, in any case, no longer than the end of the project.
Transfer of personal data to third countries
No personal data will be transferred to countries outside the European Union or to other international institutions.
Data subjects’ rights
Users, as data subjects, have the right to obtain at any time from the controller, without constraint, at reasonable intervals and without excessive delay or expense:
- confirmation as to whether or not data relating to them are being processed and information as to the purposes of the processing, the categories of data concerned, all available information on the source of the data, and the recipients or categories of recipients to whom the data are disclosed;
- communication to them in an intelligible form of the data undergoing processing and of any available information as to their source;
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- knowledge of the logic involved in any automatic processing of data concerning them at least in the case of automated decisions;
- the character of the automated processing in relation to its use for decision-making, including profiling;
- as appropriate the rectification, anonymization, pseudonymisation, erasure or blocking of data the processing of which does not comply with the provisions of applicable laws, in particular because of the incomplete or inaccurate nature of the data;
- as appropriate the rectification, anonymization, pseudonymisation, erasure or blocking of data the processing of which does not comply with the provisions of applicable laws, in particular because of the incomplete or inaccurate nature of the data;
- notification to third parties to whom the data have been disclosed of any rectification, erasure or blocking carried out in compliance with the previous paragraph, unless this proves impossible or involves a disproportionate effort;
Users have the right to object in all cases, on legitimate grounds, to the processing of their personal data.
The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form. The right to obtain such copy shall not adversely affect the rights and freedoms of others.
Requests should be e-mailed to info@ruritage.eu .
Data portability
Users have the right to receive their personal data in a structured, commonly used and machine-readable format and to transmit them to another controller.
Withdrawal of consent
Users have the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of processing before its withdrawal. Users can exercise this right by contacting info@ruritage.eu .
Automated decision-making
No decisions on users are made solely on the basis of the automated processing of their personal data, including profiling.
Updates
This Privacy Policy may be updated as necessary, for instance following updates in applicable laws. Users are kindly invited to check it periodically.
Visiting this site may result into the processing of personal data concerning identified or identifiable persons.The data controller is the web site owner and RURITAGE project partner: Alma Mater Studiorum University of Bologna, Address: via Zamboni 33 – 40126 Bologna, Italy, E-mail: privacy@unibo.it, Registered e-mail (PEC): scriviunibo@pec.unibo.it.
Contact data of the Data Protection Officer
The University of Bologna DPO contacts are: E-mail: privacy@unibo.it, Registered e-mail (PEC): scriviunibo@pec.unibo.it.
Categories of processed data
Navigation data
The information systems and software procedures relied upon to operate this web site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols. Such information is not collected in order to relate it to identified data subjects, however it might allow user identification per se after being processed and matched with data held by third parties.
This data category includes IP addresses and/or the domain names of the computers used by any user connecting with this web site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, the returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user’s operating system and computer environment. These data are only used to extract anonymous statistical information on website use as well as to check its functioning; they are erased immediately after being processed. The data might be used to establish liability in case computer crimes are committed against the website; except for this circumstance, any data on web contacts is currently retained until the end of the project.
Data provided voluntarily by users
Sending e-mail messages to the addresses mentioned on this website and/or filling in the information form is done on the basis of a freely chosen, explicit, and voluntary option. This implies the acquisition of the sender’s e-mail address, which is necessary in order to reply to any request, as well as of such additional personal data as is contained in the message(s) and/or in the form. Specific information notices are provided on the pages made available to users for sending messages and requests.
Cookies
The RURITAGE website uses Universal Analytics plugin developed by Google. This plugin uses these 2 cookies:
- _ga – Used to distinguish users;
- _gat – Used to throttle request rate.
More information can be found here.
Place where personal data are processed
The processing operations related to the web-based services that are made available via this website are carried out at the above-mentioned UNESCO office, exclusively by duly authorised staff in charge of said processing, or else by persons tasked with such maintenance activities as may be necessary from time to time. Data are hosted at UNESCO virtual servers located in UNESCO’s premises.
Purposes, scope and legal basis of the processing
As concerns data voluntarily provided by users, they will be processed only for the specific and legitimate purposes indicated in the information notice. Personal data sent by e-mail or via on-line forms will only be processed to reply to senders and to comply with their requests. Any personal data that are provided by users requesting information, answers to questions and materials such as brochures, DVD, newsletters, etc. is only used to provide the service and/or discharge the tasks requested and is disclosed to third parties only if this is necessary for the said purposes. Only data strictly necessary to achieve the above-mentioned purposes will be processed. The legal basis for the processing will be the users’ informed consent.
Modalities of processing
Personal data are processed with electronic and manual means, for no longer than is necessary to achieve the purposes for which they have been collected; the logic involved in this will be strictly consistent with the above-mentioned purposes. Specific security measures are implemented to prevent the data from being lost, used unlawfully and/or inappropriately, and accessed without authorisation.
Recipients or categories of recipients of the data
Personal data resulting from web-based services may be communicated to other RURITAGE partners, only for the purposes specified in this information notice. The complete list of partners with contact details is available here.
Data may be communicated to competent authorities (e.g. police, Courts) upon request, in compliance with applicable law, e.g. for the prevention of crimes or to defend a right in legal proceedings.
Data will be processed by duly authorised personnel by UNESCO or by other RURITAGE partners.
Data may be processed by technical personnel, whether internal or external to UNESCO, only to the extent that it is strictly needed to solve technical (e.g. IT) problems and/or to provide technical assistance.
No personal data will be disseminated, unless foreseen for project dissemination and with the consent of the data subjects.
Voluntary nature of the provision of personal data
Subject to the specifications made with regard to navigation data, the provision of personal data to the RURITAGE website (e.g. via e-mail and/or on-line forms) is free and fully voluntary.
Consequences of failure to provide personal data
If users fail to provide the personal data needed to achieve the above-mentioned purposes, it may be impossible to reply to their requests.
Data storage period
Personal data will be stored only for the period strictly necessary to achieve the above-mentioned purposes and, in any case, no longer than the end of the project.
Transfer of personal data to third countries
No personal data will be transferred to countries outside the European Union or to other international institutions.
Data subjects’ rights
Users, as data subjects, have the right to obtain at any time from the controller, without constraint, at reasonable intervals and without excessive delay or expense:
- confirmation as to whether or not data relating to them are being processed and information as to the purposes of the processing, the categories of data concerned, all available information on the source of the data, and the recipients or categories of recipients to whom the data are disclosed;
- communication to them in an intelligible form of the data undergoing processing and of any available information as to their source;
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- knowledge of the logic involved in any automatic processing of data concerning them at least in the case of automated decisions;
- the character of the automated processing in relation to its use for decision-making, including profiling;
- as appropriate the rectification, anonymization, pseudonymisation, erasure or blocking of data the processing of which does not comply with the provisions of applicable laws, in particular because of the incomplete or inaccurate nature of the data;
- as appropriate the rectification, anonymization, pseudonymisation, erasure or blocking of data the processing of which does not comply with the provisions of applicable laws, in particular because of the incomplete or inaccurate nature of the data;
- notification to third parties to whom the data have been disclosed of any rectification, erasure or blocking carried out in compliance with the previous paragraph, unless this proves impossible or involves a disproportionate effort;
Users have the right to object in all cases, on legitimate grounds, to the processing of their personal data.
The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form. The right to obtain such copy shall not adversely affect the rights and freedoms of others.
Requests should be e-mailed to info@ruritage.eu .
Data portability
Users have the right to receive their personal data in a structured, commonly used and machine-readable format and to transmit them to another controller.
Withdrawal of consent
Users have the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of processing before its withdrawal. Users can exercise this right by contacting info@ruritage.eu .
Automated decision-making
No decisions on users are made solely on the basis of the automated processing of their personal data, including profiling.
Updates
This Privacy Policy may be updated as necessary, for instance following updates in applicable laws. Users are kindly invited to check it periodically.