PRIVACY POLICY

Privacy Policy for the website www.volcanology.unina.it

(hereinafter referred to as “website”)

Pursuant to Article 13 of EU Regulation No. 2016/679 (hereinafter referred to as the “Regulation”), this document describes the methods used to process the personal data of users who consult this website, accessible electronically at www.distar.unina.it. This information does not apply to other websites, pages, or online services accessible via links that may be published on this website.

DATA CONTROLLER AND UNIVERSITY DATA PROTECTION OFFICER

• The Data Controller is the University of Naples Federico II, with registered office at Corso Umberto I n. 40 – 80138 Naples, in the persons of the Rector and the Director General, in relation to specific regulatory and statutory provisions. For contacts regarding issues related to the processing of personal data: Email: This email address is being protected from spambots. You need JavaScript enabled to view it. Certified email: This email address is being protected from spambots. You need JavaScript enabled to view it.
• The Data Protection Officer (DPO) can be contacted at the following address: University of Naples Federico II Corso Umberto I n. 40 – 80138 Naples. Email: This email address is being protected from spambots. You need JavaScript enabled to view it. Certified email: This email address is being protected from spambots. You need JavaScript enabled to view it..

PURPOSE OF PROCESSING AND LEGAL BASIS

The personal data indicated on this page are processed in pursuit of institutional purposes and in any case within the limits established by current national and University regulations.

SUBJECT OF THE PROCESSING AND MANDATORY NATURE OF THE PROVISION

The personal data subject to processing are those provided by the user concerned during the event registration procedure using the forms on the website and/or those provided by third-party online service platforms (e.g., EventBrite, LinkedIn, Microsoft Teams, Google Forms).

Where expressly requested, the provision of such personal data is a necessary requirement for registration and participation in events and services offered by this website; failure to provide personal data precludes participation in such events and/or services. When using online platforms, the personal data that is collected automatically is generally access information, i.e., browsing data, cookies, and web logs (see the Cookie Policy on this website).

In cases where the user is asked to fill out an online form and personal data is collected (online contact forms, registration for services, etc.), in order to allow the data subject providing their data to be aware of this, the information on the processing of personal data is always provided with the relevant checkbox to indicate that it has been read, with a link to the page indicating the purposes of the processing and specifying the use of the data collected, as well as providing all the information required by the legislation on the processing of personal data.

Personal data may be processed by employees or collaborators of the Data Controller who, operating under the direct authority of the latter, are appointed as authorized data processors and receive adequate training and operating instructions in this regard.

TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING

Browsing data

During normal operation, the IT systems and software procedures used to operate this website acquire some personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes IP addresses or domain names of computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) etc.) and other parameters relating to the user's operating system and IT environment.

This data, which is necessary for the use of web services, is also processed for the purpose of:

– obtaining statistical information on the use of the services (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.);

– checking the correct functioning of the services offered.

Browsing data is not stored for more than seven days (except where necessary for the investigation of crimes by the judicial authorities).

Data communicated by the user

The optional, explicit, and voluntary sending of messages to contact addresses, private messages sent by users to institutional profiles/pages on social media (where this option is available), as well as the completion and submission of forms, involve the acquisition of the sender's contact details, which are necessary to respond, as well as all personal data included in the communications.

Cookies and other tracking systems

The configuration adopted, in order to exclude the processing of identifying data, collects the following information:

• The IP address, which is masked by zeroing the last 2 bytes (xxx.xxx.0.0)

• The operating system used

• The type of browser

• The type of device (PC, smartphone, etc.)

Technical session cookies (non-persistent) are used, strictly limited to what is necessary for the safe and efficient navigation of the sites.

Information about the processing of personal data carried out through Social Media platforms

With regard to the processing of personal data carried out by the managers of Social Media platforms, please refer to the information provided by them through their respective privacy policies.

The processing of personal data is carried out in full compliance with the provisions aimed at ensuring the security and confidentiality of personal data, as well as, among other things, the accuracy, updating, and relevance of personal data with respect to the purposes stated in this policy. The processing of personal data is carried out for the time strictly necessary to achieve the purposes for which it was collected or, in any case, in accordance with the deadlines set by law.

DATA RETENTION PERIOD

The data will be stored in both paper and electronic archives for the time strictly necessary to achieve the purposes offered by the services provided by the website and, in any case, after the exhaustion of these purposes, for up to a maximum of 12 months.

With regard to the deletion of any data collected by third-party services, please refer to the respective policies of their websites.

TRANSFER TO NON-EU COUNTRIES

The University does not transfer the personal data in question to third countries or international organizations. Any transfer of personal data by the University will be made to a non-EU country where an adequacy decision has been adopted by the European Commission pursuant to Articles 44 and 45 of EU Regulation 2016/679.

Where no such adequacy decision exists, the transfer of personal data to a non-EU country will only be carried out following the explicit consent of the data subject pursuant to Article 49, paragraph 1 of EU Regulation 2016/679. Some IT platforms used for the provision of the services offered, in particular those relating to third-party services, may involve the transfer of personal data to a third country outside the EU, as in the case of the use of web and cloud services.

Users are therefore invited to consult the individual websites of third-party services regarding their respective privacy and data processing policies.

RIGHTS OF THE DATA SUBJECT

The data subject has the right to request from the University of Naples Federico II, as Data Controller, pursuant to Articles 15 to 22 of EU Regulation 2016/679:

• access to their personal data and all information referred to in Article 15 of EU Regulation 2016/679; – the rectification of inaccurate personal data and the integration of incomplete data;
• the erasure of personal data (the so-called “right to be forgotten”), with the exception of data contained in documents that must be retained by the University;
• the restriction of processing where one of the conditions set out in Article 18 of EU Regulation 2016/679 applies; – the right to object to the processing of personal data, except as provided for with regard to the necessity and mandatory nature of data processing in order to use the services offered;
• the right to withdraw any consent given for non-mandatory data processing, without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal;
• the portability of data, where the conditions are met, in cases where the legal basis for processing is consent, including for the purpose of communicating such data to another Data Controller.

METHOD OF EXERCISING RIGHTS FOR PARTICIPATION IN THE ACTIVITIES DESCRIBED ON THIS WEBSITE

To exercise their rights to protect their personal data, data subjects may contact the Data Controller in the person of the Rector and the Data Protection Officer using the following contact details:

• Data Controller: Email: This email address is being protected from spambots. You need JavaScript enabled to view it. PEC: This email address is being protected from spambots. You need JavaScript enabled to view it.
• Data Protection Officer (DPO): Email: This email address is being protected from spambots. You need JavaScript enabled to view it.; Certified email: This email address is being protected from spambots. You need JavaScript enabled to view it.

COMPLAINTS

The data subject has the right to lodge a complaint with the Italian Data Protection Authority if they believe that the processing of their data does not comply with the provisions in force pursuant to Article 77 of EU Regulation 2016/679.

Reference Regulations

• DR/2021/1226 of 19/03/2021: Regulations of the University of Naples Federico II on the processing of personal data