This notice describes how the personal data of users who visit and use the website herit4future.it (hereinafter, the “Website”) are processed, in accordance with EU Regulation 2016/679 (“GDPR”) and the applicable national legislation on the protection of personal data.
This document concerns exclusively the processing of personal data carried out through the Website and does not apply to external content that may be accessible through links.
1. Data Controller
Massimo Zupi
via Ponte Pietro Bucci 46B, 87036 Rende (CS) c/o Dipartimento di Ingegneria dell’Ambiente – Università della Calabria
E-mail: massimo.zupi@unical.it
DPO – Data Protection Officer
Requests concerning personal data processing may be sent to the Data Controller using the contact details provided above.
— TEMPORARY SECTION —
2. Types of Data Collected
During navigation on the Website, the following categories of data may be collected:
a) Navigation data
The Website automatically collects certain technical data necessary for its operation and security, including:
IP address
browser and device information
pages visited and time of access
traffic and navigation data
These data are used exclusively for anonymous statistical purposes and to ensure the proper functioning of the Website.
b) Data voluntarily provided by the user
If the Website includes contact forms, newsletter subscriptions, requests for information, or participation in initiatives, the following data may be collected:
first and last name
email address
any additional information included in the message
c) Cookies and similar technologies
The Website may use technical cookies and, subject to user consent, analytical or profiling cookies through third-party services (e.g., Google Analytics).
For detailed information, please refer to the dedicated Cookie Policy.
3. Purposes and Legal Bases of Processing
Personal data collected through the Website are processed for the following purposes:
Navigation and operation of the Website
Legal basis: legitimate interest of the controller (Art. 6.1.f GDPR)
Response to requests sent via forms or email
Legal basis: performance of pre-contractual measures requested by the user (Art. 6.1.b GDPR)
Communication and dissemination activities related to the HerIT4Future project
Legal basis: public interest and institutional tasks of the University (Art. 6.1.e GDPR)
Anonymous statistical analysis of Website usage
Legal basis: user consent, where required (Art. 6.1.a GDPR)
4. Methods of Processing
Data processing is carried out using electronic and digital tools, adopting appropriate technical and organizational measures to ensure data security and prevent unauthorized access.
5. Data Recipients
Data may be shared with:
authorized personnel of the University of Bologna
partners of the HerIT4Future project, limited to institutional purposes
third parties providing technical services (hosting, maintenance, analytics)
competent authorities, where required by law
All third parties are bound by data processing agreements compliant with the GDPR.
6. Transfer of Data to Non-EU Countries
If the project involves partners or providers located outside the European Economic Area (e.g., LATAM countries), data transfers will take place in accordance with Chapter V of the GDPR through:
adequacy decisions of the European Commission, or
Standard Contractual Clauses (SCC), or
other appropriate safeguards provided by the legislation.
7. Data Retention
Personal data will be retained for the time necessary to fulfill the purposes for which they were collected, in particular:
navigation data: for the technical time necessary to provide the service
data sent through forms: up to 24 months unless further contact occurs
cookies: according to the timeframes indicated in the Cookie Policy
8. Data Subject Rights
Users may exercise at any time the rights provided for by Articles 15–22 of the GDPR, including:
access to personal data
rectification
erasure (right to be forgotten)
restriction of processing
objection
data portability
Requests may be sent to the Data Controller or to the DPO using the contact details provided above.
Users also have the right to lodge a complaint with the Italian Data Protection Authority.
9. Links to External Websites
The Website may contain links to third-party pages or services. The Data Controller is not responsible for the processing of personal data carried out by such parties; users are encouraged to consult their respective privacy policies.
10. Changes to This Policy
The Data Controller may update this Privacy Policy at any time. Any changes will be published on this page.