PRIVACY NOTE pursuant to article 13 of Regulation (EU) 2016/679
The General Data Protection Regulation (GDPR)
The information herein is given by the Institute of Transport and Logistics Foundation (ITL), in its capacity as Data Controller, to inform you, in compliance with art. 13 EU Reg. 2016/679 that the personal data you provide will be processed based on the principles of fairness, lawfulness, transparency, and protection of privacy. This note will also inform you about your rights, in full compliance with current legislation on the protection of personal data (General Data Protection Regulation or GDPR).
Data Controller, Data Processor and contact information
The Data Controller and Data Processor is the Institute for Transport and Logistics Foundation, based in Bologna, Viale Aldo Moro n. 38, bologna@fondazioneitl.org, PEC – Certified e-mail fondazioneitl@legalmail.it.
Type of data processed, purpose and lawful basis for processing personal data
The processing of your data is carried out pursuant to and for the purposes of art. 6 c.1 item b) EU Reg. 2016/679.
The provision of your personal data is optional; however, failure to provide it will prevent ITL from carrying out specific activities for which your personal data is needed. Failure to provide consent for the disclosure of your personal data to third parties will not allow the Entity to carry out specific activities.
Special categories of personal data
Pursuant to articles 9 and 10 of the GDPR, you may provide data that can be qualified as “special categories of personal data”, i.e. data that reveals “racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation”.
These categories of data may be processed only with your explicit consent, i.e. expressed in writing with a specific form that will be provided to you.
Processing methods
The personal data you provide will be processed at the headquarters of the Data Controller, digitally or on paper, by ITL staff in charge of carrying out the research and/or consultancy activities in the manner and in compliance with the legislation specified above.
Data communication scope
Your personal data will be processed in an aggregate manner. Your personal data will not be transferred to third countries (outside the EU).
Data retention practices
In compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, subject to your consent expressed at the bottom of this privacy note, your personal data will be processed and stored for the period of time necessary to achieve the purposes for which they are collected and processed and for the additional period necessary to comply to regulatory obligations.
Data subject rights
You have rights as a data subject. At any time, you may exercise your specific rights towards the Data Controller, pursuant to articles from 15 to 22 of the GDPR, by sending a written request to the certified email address fondazioneitl@legalmail.it.
You have the rights to:
- access your personal data and ask for confirmation of the existence of personal data about you;
- obtain information about: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data have been or will be disclosed and, where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- update, rectify and erase your personal data;
- restrict processing;
- transfer your personal data, i.e. receive your personal data from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without impediments;
- object to the processing of your personal data at any time and also in the case of processing for direct marketing purposes;
- oppose an automated decision-making process relating to individuals, including profiling;
- ask the data controller to access personal data and rectify or delete it, limit its processing or oppose its processing, in addition to the right to data portability;
- revoke the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.
It is hereby specified that, before being able to provide or modify any information, it may be necessary to verify the identity of the concerned person.
Right of complaint
If you believe that the processing of your personal data is in violation of the provisions of EU Reg. 2016/679, you have the right to lodge a complaint with the Data Protection Authority for the protection of personal data, pursuant to art. 77 EU Reg. 2016/679, or to appeal to the competent judicial offices pursuant to art. 79 EU Reg. 2016/679.