NOTICE REGARDING THE PROCESSING OF PERSONAL DATA of users who visit the website https://www.ideab3.it pursuant to Article 13 of Regulation (EU) 2016/679
THE REASON FOR THIS NOTICE
Pursuant to Regulation (EU) 2016/679 (hereinafter “Regulation” or “GDPR”), this page describes how this Company handles users’ personal data that are collected during the IDEA project experimentation, more specifically using the IDEA project platform, publishing on it the materials developed by teachers involved in the experimentation, as foreseen into the open call for tenders art. 4.
For information on the processing of personal data resulting from the activation of credentials and the use of the site and platform, refer to https://www.ideab3.it/privacy-e-cookie-policy/
The data controllers are Autonomous Region of Sardinia, with registered office in Cagliari, Viale Trento, n. 69, and the Sardinian Agency for R&TD – Sardegna Ricerche with registered office in Cagliari, Via Palabanda, n. 9.
The co-ownership is governed by a cooperation agreement under art. 15 of Italian Law n. 241/1990 and following amendments and under art. 7 of Sardinian regional law n. 20/2015. The abovementioned agreement is aimed at implementing the action entitled “educational and technological experimentation, development of digital contents”. More over it provides that both co-owners must comply with all GDPR rules, and that Sardegna Ricerche, through the Center for Research, Development and Advanced Studies in Sardinia (hereinafter CRS4), must collect data from the data subjects, fulfill information requirements and support modalities for the exercise of the rights of the data subject. CRS4 is registered as data controller (ex art. 2 GDPR), and it will collect only the necessary data for the defined purposes and activities according to co-owners instructions. In any case, irrespective of the terms of the arrangement, the data subject may exercise his or her rights under this Regulation (described in paragraph “data subjects rights”) in respect of and against each of the controllers.
DATA PROTECTION OFFICER (DPO)
The DPO (RPD in Italian) can be contacted at firstname.lastname@example.org
THE LEGAL BASIS FOR PROCESSING
Personal data is processed by data controllers for the aforementioned purposes according to its official tasks carried out in the public interest or in the exercise of official authority vested in the controller, specifically official tasks of the Department of Education of the Autonomous Region of Sardinia (art. 20 Regional Law 1/1977) and of Sardegna Ricerche relating to promotion of research and technology transfer and to the development of a knowledge-based local economy(art. 2 Regional Law 20/2015).
THE TYPES OF DATA PROCESSED AND THE PURPOSES OF PROCESSING
Personal data (name, surname and e-mail) is processed for the purpose of providing and executing the registration procedures that are necessary to access the platform used for the IDEA project experimentation.
THE DATA RECIPIENTS
In accordance with art. 28 of the agreement, possible designated recipients of the data collected are:
- CRS4 S.r.l., with registered office in Località Piscina Manna, Edificio 1, 09050 Pula (CA – Italy), as controller;
- SiteGround Spain S.L. with registered office in Calle del Prim, 19, 28004 Madrid (Spain), as hosting service provider and Web platform maintenance;
- Amazon Web Service LLC (Ireland) as cloud service provider;
- Controllers employees and collaborators who have been explicitly appointed and authorized and who have received suitable operating instructions.
The data collected may be communicated to external parties operating as data controllers, for example supervisory bodies and authorities and public or private parties in general authorised to request data or for fulfillment of legal obligations.
THE HANDLING OF DATA AND THE DATA STORAGE PERIOD
Personal data will be retained for the strictly time needed (except when judicial authorities need the data to investigate crimes) to achieve the goals for which they have been requested and, in any case, no longer than the terms the data controller is subject to by law or regulation.
THE TRANSFER OF DATA
The data collected will not be disclosed, nor will it be transferred outside of the European Union.
THE CONSEQUENCES OF FAILING TO PROVIDE PERSONAL DATA
If the user fails to provide his/her personal data, he/she will not be able to use the services that require identification and registration.
THE AUTOMATED DECISION-MAKING PROCESS, INCLUDING PROFILING
Users’ personal data will not be subject to any automated decision-making processes, including profiling.
THE RIGHTS OF THE DATA SUBJECT
According to the current rules and regulations, data subjects exercise the following rights:
to request access to their own personal data and information; the modification of incorrect data or the integration of incomplete data; the erasure of personal data or the limitation of personal data processing (under one of the circumstances pursuant to art. 15 ff of GDPR).
These requests can be sent to the data controller or to the data protection officer (RDP/DPO) thorugh email at: email@example.com, or through regular mail at: Sardegna Ricerche – Via Palabanda n. 9 – 09123 Cagliari.
The form for exercising these rights is available at: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/9038275.
THE RIGHT TO LODGE A COMPLAINT
When a data subject believes that the processing of his/her personal data on this website is in violation of the Regulation, he/she has the right to lodge a complaint with the data protection authority (www.garanteprivacy.it), as required by Article 77 of GDPR, or to take legal recourse (Article 79 of GDPR).