Subject: INFORMATION pursuant to Articles 13 and 14, European Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data (in short, the “Information Notice” and the “Regulation” or the “GDPR” respectively.

General Introduction

The purpose of this Privacy Policy is to describe how the website www.eng.alteritas.it is managed with regard to the processing of personal data of users/visitors consulting it (hereinafter, the “Site”).

The Policy is provided only for this website and not for any other websites that may be consulted by the user through links.

The purpose of this statement is also to allow users of the Site to learn about the purposes and methods of the processing of personal data by the Site Owner in the event of their being provided.
Users must read this policy carefully before submitting any personal information and/or filling in any electronic form that may be present on the Site.

A. About us

ALTERITAS – Interaction between Peoples, founded in Verona in 2009 and now an accredited research body, studies forms of contact and exchange between cultures and peoples of different origins, languages, cultures and traditions (hereinafter, “Alteritas” or the “Owner”). By analysing and classifying typologies of exchange and interaction between peoples observed at different moments in history and from different disciplinary perspectives, relational databases are created and made available to the scientific community and the general public.

For years, Alteritas has considered the protection of the personal data of its associates and users to be of fundamental importance, guaranteeing that the processing of personal data, carried out by any means, whether automated or manual, takes place in full compliance with the protections and rights recognised by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data (hereinafter, the “Regulation”) and on the free movement of such data and by D. Legislative Decree No. 196/2003, as amended and supplemented by Legislative Decree 101/2018 (hereinafter, the “Code”) and by any other applicable national and/or EU legislation.

For the purposes of this document, the data controller is:

Alteritas – Interaction between Peoples, in the person of its pro-tempore legal representative, with registered office in via Seminario 8, Verona 37129. F.C. 93222050234. Email address: info@alteritas.it

This information refers to the website: www.eng.alteritas.it

B. Why this document

For the purposes of this document, the term personal data refers to the definition contained in Article 4(1) of the Regulation i.e. “any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity’ (hereinafter, ‘Personal Data’).

The Regulation provides that, before processing Personal Data – by which is meant, according to the relevant definition contained in Article 4(2) of the Regulation, ‘any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration extraction, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction’ (hereinafter referred to as the ‘Processing’) – it is necessary that the person to whom such Personal Data belong (hereinafter referred to as the ‘Data Subject’) is informed about the reasons why such data are required and how they will be used.

The purpose of this document is therefore to provide you, in a simple and clear manner, with all the information that will be useful to allow you to communicate your Personal Data to us in a conscious and informed manner and, at any time, request and obtain clarifications and/or corrections and exercise your rights.

If necessary, this information notice may be accompanied by an appropriate form (i.e. web form) for the granting of consent as provided for in Article 7 of the Regulation, which is structured according to the use that Alteritas intends to make of your Personal Data.

C. To whom you can address your requests

For all matters relating to the Processing of your Personal Data and/or if you wish to exercise your rights, you may send a written communication to the e-mail address info@alteritas.it.

D. For what purposes will your Personal Data be processed?

Your Personal Data will be processed for the following purposes:

(i) For the operational management of the Site. This means that the Data Controller processes your Personal Data (especially the Data it collects automatically during your navigation) to allow the Site you are using to function and to improve its performance.

(ii) To manage the security of Your Data and the Site. Ensuring the security of your Data and the Site is our contractual and legal duty. We strive to make our web spaces an increasingly safe place for our users.

(iii) Accounting, administrative, fiscal and related purposes, in compliance with obligations provided for by laws, regulations and EU legislation, or by provisions issued by Authorities legitimated to do so by law and by Control Bodies. The provision of personal data necessary for such purposes is compulsory and its processing does not require the consent of the persons concerned. Refusal to provide them will make it impossible to establish relations with the Site Owner.

(iv) Fulfilment of pre-contractual and contractual obligations deriving from a possible contractual relationship, as well as carrying out all the institutional activities proper to the Data Controller for the fulfilment of its relationship with you.

(v) Protection or defence of rights in judicial proceedings. We may process your Personal Data to protect or defend a right of ours before a court of law or other competent authority.

E. To which entities will your Personal Data be disclosed?

Your Personal Data may be communicated to specific recipients, to whom the Data is disclosed in order to allow the Controller to properly perform all the Processing activities described in this document. By recipients, the Regulation means: ‘the natural or legal person, public authority, service or other body that receives communication of personal data, whether or not it is a third party’ (hereinafter the ‘Recipients’).

Such Recipients, may process your Personal Data as:

– Data Processors or

– Authorised / Designated Persons for the Processing.

By way of example but not limited to, your data may be made available

– to personnel or internal and/or external collaborators of the Data Controller who carry out operations or activities that are connected, instrumental, functional to that of the Data Controller or who provide the Data Controller with specific administrative, evaluation, communication and/or support services.

– to third parties (for example, any providers for website management and maintenance, suppliers, credit institutions, professional firms, etc.) who perform outsourcing activities on behalf of the Controller, in their capacity as data processors.

For further information on who these subjects are and for what reason and on the basis of which guarantees Alteritas may communicate your Data to them, please write to the e-mail address: info@alteritas.it.

If required by law or in order to prevent or suppress the commission of unlawful acts or offences, your Personal Data may be disclosed to public entities or judicial authorities without them being considered as Recipients (in accordance with Art. 4, number 9, GDPR) and, therefore, without them receiving any instructions as to the Processing they will have to perform.

F. For how long will your Personal Data be processed?

The Regulation provides that your Personal Data must be “kept in a form which permits identification of data subjects for no longer than it is necessary for the purposes for which it is processed; Personal Data may be kept for longer periods provided that it is processed solely for archiving purposes in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89(1), subject to the implementation of appropriate technical and organisational measures required by this Regulation to protect the rights and freedoms of the data subject” (see Art. 5 paragraph 1 letter e) of the Regulation).

In this regard, we inform you that, in compliance with this principle, we will process your Data only for the time necessary to pursue the processing purposes listed in section D of this document.

In particular, your Personal Data will be processed for a period of time equal to the minimum necessary, as indicated by Recital 39 of the Regulation, i.e. until the termination of the existing contractual relationship between you and the Data Controller, without prejudice to an additional storage period that may be imposed by law as also provided by Recital 65 of the Regulation and in any case in accordance with the prescriptive terms established by law.

G. What are your rights?

The Regulation guarantees you the exercise of several rights, which we summarise as follows:

– Right of access: you have the right to know, among other things, what personal data we process, for what purposes we process it, to whom we disclose it and you have the right to obtain a copy of it.

– Right to revoke consent: if you have given us your consent, you may revoke it at any time, easily by contacting us at info@alteritas.it. Revocation of your consent shall not affect the lawfulness of the processing carried out up to that point.

– Right of rectification: if you realise that any Personal Data you have communicated to us is incorrect or incomplete, we will correct the error or complete the information in our possession.

– Right to erasure: you may request the erasure of your Personal Data unless we are required by law to keep it, or we need the Data to be able to prove wrongdoing and defend ourselves before a court of law or we need to use it for important reasons of public interest.

– Right to restrict processing: if you request that we restrict the processing of your Data, this prevents us from processing the Data for the purposes for which the Data was collected. This implies that we will only retain your Data and seek your consent, if any, whenever we need to process it for any further purposes. Even if you have exercised this right, we remind you that your data may still be processed for the exercise or defence of a right in court or to protect the rights of another person or for important reasons of public interest.

– Right to data portability: you may, at any time, request and receive your Personal Data in a structured, commonly used and machine-readable format in order to transfer it directly to another data controller.

– Right to lodge a complaint with the supervisory authority: without prejudice to your right to protect your interests in the competent judicial instances, you have the right to lodge a complaint with the competent Data Protection Authority (in Italy, the Garante).

– Right to object: You may object, at any time, to the processing of your Personal Data if it is processed without your consent, provided that you give detailed reasons for your objection.

H. Where is your Personal Data processed?

Your Personal Data will mainly be processed within the European Economic Area and are not, unless there are specific operational needs, transferred outside the European territory.

Should it be necessary to use the services of third parties located outside the European territory, we hereby inform you that

– we have appointed such third parties as Data Processors within their competence pursuant to Article 28 of the Regulation, and

– the transfer of your Personal Data to such entities will be carried out in strict compliance with the provisions of Articles 44 et seq. of the Regulation.

This assures you that all necessary measures will be taken in order to ensure the fullest protection of your Personal Data as such transfer will be based on contractual agreements or other appropriate legal bases designed to protect your rights and interests.

Information on the processing of personal data of Alteritas suppliers