Privacy notice

 

DATA CONTROLLER

The Data Controller is the National Institute of Oceanography and Applied Geophysics - OGS (hereinafter also "OGS" or "Data Controller"), located in Borgo Grotta Gigante 42/c - 34010 Sgonico (TS).

In order to exercise the rights recognized by the REGULATION (EU) 2016/679 (hereinafter "GDPR" or "Regulation") or to ask for any clarification regarding the processing of personal data, you can contact the Data Controller at the following address: e-mail privacy@inogs.it

The Data Controller has appointed a Data Protection Officer, who can be reached at the following address: dpo@inogs.it

 

PURPOSES OF THE PROCESSING

The Data Controller will process the personal data, given by the data subject on a voluntary basis, for a number of purposes:

  1. allow participation in the webinar;

  2. send information and promotional communications related to services or initiatives through email;

  3. recording of the webinar and its publication on the YouTube channel to the purpose of making them available to third parties in the future;

For these reasons the participants are informed: 

- of the necessity of maintaining the webcam deactivated during the event;

- that in case of intervention with the microphone activated to ask questions on the treated topic, their voice will be recorded.

  1. acquisition of images (pictures, audio and video recordings), which will be used for communication activities, institutional campaigns and editorial initiatives, also to be published on the institutional website and social channels. The installation and use of the images are considered to be services free of charge. The Data Controller undertakes not to make any use of the images that may be detrimental to the dignity, reputation or decorum of the person concerned.

  2. for research and statistics aims;

 

LEGAL BASIS FOR THE PROCESSING

The legal basis is the consent of the data subject.

PROVISION OF DATA AND CONSEQUENCES IN CASE OF REFUSAL TO PROVIDE DATA

Failure to provide data or consent will make it impossible to take part in the webinar.

CATEGORIES OF RECIPIENTS OF THE PERSONAL DATA

As far as the OGS is concerned, only persons who have been authorised to process personal data and persons who, processing data on behalf of the Data Controller, have been identified as Data Processors may access personal data. These subjects are bound to secrecy and confidentiality also on the basis of specific internal rules. 

Depending on the choice of the person concerned, the data may be shared with other Master's students and/or disclosed.

TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

Uploading data on Google Forms may entail the transfer of personal data outside the European Economic Area in accordance with Article 46(2)(c) (standard contractual clauses): for further information, please consult Google's 'LEGAL FRAMEWORKS FOR DATA TRANSFERS', available here.

DATA STORAGE CRITERIA

Personal data are processed for the period of time that is necessary to achieve the purposes for which they were collected or for any other legitimate related purposes. Therefore, if personal data are processed for different purposes, they will be kept until the purpose with the longest retention period has expired; however, data collected for purposes for which the retention period has expired will no longer be processed.

In particular, personal data will be kept for a period identified according to criteria of strict necessity in view of the different aims pursued and, in any case, in compliance with the current legislation on the protection of personal data and following the rationale to protect the rights of the Data Controller.

In the event that any information is the subject of a dispute and/or is necessary for the exercise of legal claims, it may be kept even beyond the above limits.

RIGHTS OF THE DATA SUBJECT

The Data Controller informs you that the Data Subject has the right to request:

  • access to personal data and information (Art. 15 of the GDPR);

  • rectification or erasure of the same (Articles 16 and 17 of the GDPR);

  • restriction of the processing of personal data (art. 18 of the GDPR).

Finally, the Data Subject has the right to:

  • object to the processing of personal data under the conditions and within the limits set out in Article 21 of the GDPR;

  • exercise the right to data portability (Art. 20 GDPR).

 

With regard to processing operations based on consent (within the meaning of Articles 6(1)(a) and 9(2)(a) of the GDPR), we inform you that the Data Subject has the right to withdraw such consent at any time (without undermining the lawfulness of the processing based on the consent given before the withdrawal).

Finally, please note that if the Data Subject considers that the processing of his or her data is in breach of the Regulation, he or she has the right to lodge a complaint with a supervisory authority (Data Protection Authority or any other competent authority) pursuant to Article 77 et seq. of the GDPR.