Emilia-Romagna Regional Authority and ART-ER Joint Stock Consortium Company (from here on “ART-ER”) are firmly convinced that website emiliaromagnaexpodubai.it (from here on “Website”) users personal data protection is of fundamental importance. Therefore, ART-ER Joint Stock Consortium Company and Emilia-Romagna Regional Authority have decided to share their policy on personal data processing by this Policy, made in accordance with Art. 13 of the EU Regulation 2016/679 (General Data Protection Regulation)
Data Controller and Data Protection Officer, Data Supervisor
Data Controller for personal data collected via this website is Emilia-Romagna Regional Authority, based in Bologna, Via Aldo Moro n. 30. Data Protection Officer for Emlia-Romagna Regional Authority can be contacted at the following e-mail addresses: firstname.lastname@example.org email@example.com.Emilia-Romagna Regional Authority avails itself of ART-ER Joint Stock Consortium Company, appointed Data Supervisor, as per art. 28 EU Regulation 2016/679 for the website management emiliaromagnaexpodubai.it, aimed at disseminating the initiatives promoted by the Emilia-Romagna Region and by other actors of the regional ecosystem that will take place during the six months of Expo Dubai as part of the activities of the 2020 Annual Consortium Plan (PAR2020) for the activity: Participation to Expo Dubai C2B and has assigned to ART-ER the related personal data processing.
Personal data processed by this website, purposes and legal basis.
IT systems and software procedures involved in the running of this website acquire in the normal website operation, certain items of personal data (such as internet domain, IP protocol, browser type, operative system of the computer used, date, time and permanence on the website, pages viewed, eventual search engine used to access the website) whose transmission is implicit in the use of data exchange protocols in the internet. The above-mentioned information, although not collected for the purpose of being associated with any identified interested party/user in particular, however, by their very nature could be associated and combined with data held by third parties, by means of processing operations, and thereby be used to identify users
In this data category are enclosed IP addresses or domain names of computers used by users connecting to the website, addresses in URI (Uniform Resource Identifier) for the resources requested, any time stamps for the request, method used to submit the request to the server, the size of the file obtained in response, numerical code indicating the response status given by the server (success, failure etc.) and other parameters related to the user’s operating system and IT environment. These data are used solely for the purpose of obtaining anonymous statistical data concerning the use of the website and will be immediately delated after processing, without prejudice to the need of the judicial authority to carry out any criminal investigation.
Users information requests
Should the user request information, informational material and/or provision of services by using different access channels and/or by filling the “forms” on this website, ART-ER will acquire personal data of the person concerned. These data will be processed by ART-ER solely for the purpose of providing a response to the requests made and/or to deliver services requested. Provision of personal data for the above-mentioned purpose is voluntary, nevertheless, failure to provide data or incorrect provision will make it impossible for ART-ER to deal with the requests made.
Specific information on data processing may be displayed in certain forms on the website pages.
Data processing modes
In accordance with what is prescribed by Art. 32 of the EU Regulation 2016/679 and with the “Guidelines for the Regional IT system governance”, The Data Controller and ART-ER Joint Stock Consortium Company have adopted adequate technical and organizational measures in order to grant processed personal data security and confidentiality.
Authorized subjects for processing.
Personal data provided by the interested parties will be processed, on behalf of Emilia-Romagna Regional Authority, by ART-ER personnel, previously appointed as authorized for data processing, who received appropriate instructions with regards to measures, precautions and way of working, aimed at the effective protection of personal data processed.
Context of Data Communication
Personal data provided by users could also be communicated, in accordance with the scopes of the subtended processing, to third-party companies or professionals, appointed as Data Supervisor, pursuant to and for the purposes of Art. 28 EU Reg. 2016/679 or in their capacities as persons in charge of data processing which ART-ER makes use of to perform its activity.
Data Supervisors List is available upon request to the Data Controller or to the Data Supervisor. It is expressly stated that users personal data will not be transferred to third countries (Extra-UE) and will not be object to diffusion on platforms other than those used for data collection.
Data retention period
ART-ER will retain personal data of the interested party for the duration strictly necessary to achieve the purposes underlying the data processing itself
Interested parties rights
In accordance with art 15 and followings of EU Reg. 2016/679, at any time the interested party may exercise his/her rights towards the Data Controller or ART-ER to: access to his/her personal data and to obtain copy [access right]; to obtain correction of data when resulting inaccurate, or to obtain integration of the data when resulting incomplete [right to rectification]; to obtain cancellation of data in cases foreseen by art. 17 EU Reg. 2016/679 [right to cancellation]; to obtain limitation to data processing in cases foreseen by art. 18, EU Reg. 2016/679; [Right to limitation to object at any time, for reasons connected to his/her particular situation to processing of personal data regarding the interested party, as per art. 6 c.1 lett.e) and f) of EU Reg. 2016/679 [right of opposition].
In order to exercise his/her own rights, the interested party can contact:
- Data Controller: Regione Emilia-Romagna, Ufficio per le relazioni con il pubblico (Urp), in writing or going directly to URP Desk. URP Desk is open from Monday to Friday from 9 to 13 in Viale Aldo Moro 52, 40127 Bologna (Italy) , e-mail: firstname.lastname@example.org .
- ART-ER Joint Stock Consortium Company with Head Office c/o CNR – Area della Ricerca di Bologna Via P. Gobetti, 101 – 40129 Bologna, email email@example.com , pec firstname.lastname@example.org, or contact ART-ER DPO at the email address: email@example.com.
It is pointed out that before supplying or changing any information, it could be necessary to verify the interested party identity
If one person thinks that processing of his/her personal data is performed in breach of the provisions of what is established by EU Reg. 2016/679, one has the right to make a complaint to “Autorità Garante per la protezione dei dati personali” (Personal Data Protection Authority) as per Art. 77 EU Reg. 2016/79 or start legal proceedings at the competent court as per art. 79 EU Reg 2016/679.