• Home
  • Privacy Policy

Privacy Policy

This Privacy Policy dated 24/05/2019 sets out information privacy practices and your rights. We may amend this Privacy Policy at any time and for any reason.

1. Who we are and how to contact us

Area of scientific and technological research of Trieste area Science Park with registered office in Padriciano 99, 34149 Trieste, Italy. Hereafter referred to as “AREA Science Park”.

The controller for the processing of personal data under this Privacy Notice is:

Data Protection Officer (DPO)

AREA Science Park

Padriciano 99

34149 Trieste

Italy

 

If you have any questions about this Privacy Notice or about our personal data processing practices, or if you wish to exercise any of your rights as a data subject, you may contact the PDO by sending an email to: rpd@areasciencepark.it or alternatively in writing to the address above.

2. How we collect personal data

Area Science Park obtains your personal data from the following sources:

  • All information given to us directly from you, including but not limited to, the following means:
    • Details submitted on this website.
    • Application forms whether online or in written form.
    • Information you provide to us to be forwarded to any potential collaborators, research partners or any other third party in relation to your requests and requirements.
  • Information obtained from third parties in relation to your involvement and activities with AREA Science Park (such information will only be obtained where permitted under the original terms of consent).
  • From various public sources in accordance with the regulations, for example the Chamber of Commerce.
  • Our monitoring of visits to the website through the lawful use recording of IP addresses

3. Types of personal data we collect

The personal data obtained by AREA Science Park Includes, but is not limited to, your contact details such as name, surname, address, city, nation, region, telephone number, e-mail address, sector of interest, organization name.

Among the data processed there may also be the details as defined (or sensitive) referred to in section 9 of this Privacy Notice.

4. Purpose and basis for using your personal data

Your personal data are processed by AREA Science Park within the scope of its activities for the following purposes:

  1. realization, promotion and coordination, also in the context of national, European Union and international programs, of fundamental scientific and technological research activities applied through own structures and in collaboration with Universities, with other national public and private subjects and international, promoting the international mobility of researchers in accordance with the principles contained in the European Charter of Researchers;
  2. development of innovation programs and projects of high technological and application value, favouring the integration of public research with private research;
  3. carrying out the evaluation of the results of its own research and innovation activity, based on evaluation criteria defined by the Ministry of Education, University and Research;
  4. performance of communication, dissemination and promotion of the results of its research and innovation activities, highlighting the economic and social impact in the country and favouring the use of the knowledge produced;
  5. development, also through its own scholarship and research grant assignment programs, of training activities in university courses, in particular research doctorates, high post-university training and lifelong learning activities, through special agreements with Universities and other public and private subjects and with the involvement of the business world; it can also carry out non-university higher education activities;
  6. realization, management and promotion of its own scientific and technological Park, divided into equipped campuses;
  7. promotion of the establishment in the Science and Technology Park of international bodies, of the European Union and foreigners in their own structures or in new structures to be implemented with targeted financing;
  8. contribution to the development of the innovation system also in collaboration with Universities, public research bodies and other public and private subjects, in particular from the business world;
  9. promotion of technological development in order to promote the competitiveness of companies and facilitate the creation of new companies with innovative technology;
  10. promotion and performance of business incubation activities, including through the assignment of a personal employment relationship, regulating issues concerning intellectual property rights between the Entity, company or other promoter chosen with public notice; to the possible use of own institutes and equipment;
  11. promotion and enhancement of staff professionalism, in correlation with organizational needs; training and continuous professional development of skills; carrying out the evaluation of personnel activities and the functioning of the structures;
  12. care of the enhancement, precompetitive development and technological transfer of the results of the activities carried out by its personnel, by the subjects operating in the scientific and technological Park and by its public or private partners;
  13. definition, organization and management of scientific platforms and technological platforms, also in the context of forms of public-public and private-public collaboration, in order to make available to national and international research groups and to make laboratories accessible to the community, technologically advanced infrastructure and equipment;
  14. Execution and service of contracts
  15. It is in our legitimate interest that we use your personal information in such a way as to provide you with a high quality of service
  16. To comply with any applicable law, court award, legal procedures, national/community regulatory requirements and anti-money laundering legislation.
  17. We may communicate with you via letter, telephone call, email, sms and mms for promotional information and customer satisfaction surveys. Such consent is optional, and your consent will be required.
  18. Public Task - The processing of your Personal Data is necessary for the performance of the public interest tasks of Area Science Park, or in those related to the exercise of the public powers invested to pursue its institutional aims, as expressed in the Statute of the institution.

The transfer of your personal information in relation to points 1) to 16) is not required by law, however, is necessary for AREA Science Park to carry out the related services in accordance with your requirements and requests. Any refusal to provide or process particular data may mean that some or all services of AREA Science Park cannot be provided.

In certain situations, we require your consent to process your personal data. In such cases we will seek your consent at the time of provision.

5. Sharing your personal data

In order to carry out the above-mentioned activities, it may be necessary for AREA Science Park to share your personal information with the following categories of recipients:

  • Third parties, such as companies and independent professionals, operating both inside and outside the European Union, involved in various ways in the institutional activities of AREA Science Park.
  • Companies owned by AREA Science Park.
  • Public and private subjects who are required by law to know this information.
  • Authorities, such as judicial or administrative, and information systems within public administrations.
  • Persons holding the right of access.

With specific regard to sensitive and judicial data, they may be disclosed to the subjects and for the purposes identified by the Regulation for the processing of sensitive and judicial data of AREA Science Park.

Third parties, investee companies and public and private entities that are required to receive or who may know your Personal Data act as: 1) Data controllers, i.e. subjects that determine the purposes and means of the processing of personal data; 2) Data processors, i.e. subjects that process Personal Data on behalf of the Data Controller or 3) Joint Data Controllers that together with AREA Science Park determine the purposes and means of the same.

In exceptional circumstances, we may be required or permitted by law to disclose personal data, for example to law enforcement authorities or to prevent a serious threat to public safety.

6. Storage and retention period

The processing of your personal data is carried out using manual, IT and telematic methods and in a manner such as to safeguard the security and confidentiality of the data.

The retention period of your personal data is based upon the principle of it being held no longer than is necessary for the purpose for which it was originally obtained. Your personal data will therefore be kept for the entire period necessary to achieve the purposes referred to in Section 4.

Once we have no legal or commercial reasons to retain personal data, it will be securely deleted or destroyed. An assessment of our need to retain data is carried out periodically.

7. Transfer of personal data to a third country or an international organisation outside the European Union

Your personal data is processed by AREA Science Park within the territory of the European Union, except where specifically denoted otherwise.

If necessary for technical or operational reasons, AREA Science Park reserves the right to transfer your personal data to countries outside the European Union or to international organisations for which, according to the European Commission, exist an adequate level of data protection (adequacy decision) or on the basis of adequate safeguards provided by the country where the data must be transferred or on the basis of a specific exemption provided for in the regulations.

8. Your rights

If you are located in the EU, you have certain rights in relation to your personal data as follows:

  • Access: You have the right to obtain access to and a copy of any personal data we hold about you. You also have the right to find out whether your personal data has been transferred to any third party or outside the EU and any safeguards relating to this transfer. If requested, AREA Science Park will provide you with a copy of your Personal Data being processed without charge. For any additional copies AREA Science Park may charge you a reasonable administration fee. If your request is submitted by electronic means, and unless otherwise instructed, the information will be provided by AREA Science Park in an electronic format in common use.
  • Rectification: If you consider that any personal data we hold about you are incorrect or incomplete, you have the right to ask us to correct or complete that personal data.
  • Erasure: In certain circumstances, you have the right to ask us to erase any personal data we hold about you. AREA Science Park will not be able to delete your personal data if the processing of such data is necessary for the fulfilment of a legal obligations, for reasons of public interest or use in judicial proceedings.
  • Restriction of processing: In certain circumstances, you have the right to ask us not to process your personal data for certain purposes. For example, you contest the accuracy of your personal data; the processing is unlawful and you oppose the erasure of personal data and request the restriction of their use instead; AREA Science Park no longer needs the personal data for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims; you have objected to processing pending the verification whether the legitimate grounds of AREA Science Park override those of you as the data subject.
  • Objection to processing: In certain circumstances, you have the right to object to us processing your personal data for certain purposes. You shall have the right to object at any time to processing of your personal data which is based on the principle of public interest or legitimate interest, including profiling based on those provisions. AREA Science Park shall no longer process the personal data unless the it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where personal data are processed for scientific or historical research purposes or statistical purposes, you shall have the right to object to processing of your personal data, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
  • Data portability: In certain circumstances, you have the right to request a copy of your personal data in a structured, commonly used and machine-readable format. You may also request that your personal data be transmitted from AREA Science Park directly to another person who has the right of processing indicated by you. In this case, you will provide us with all the exact details of the new data controller to whom you intend to transfer your personal data, providing us with specific written authorization.
  • Automated decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you in another way. Exceptions to this are:
    • It is necessary for entering into, or performance of a contract between you and AREA Science Park.
    • It is authorised by European or Italian law.
    • AREA Science Park shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, and at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
  • Withdrawing consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time.
  • Right to complain to the Regulatory Authority: You have the right, without prejudice, to make a complaint to the regulatory authority on person data or other appropriate administrative or judicial body if it is deemed that the treatment of your data breaches the applicable regulations.

To make a request pursuant to your rights listed above, please submit your request, marked for the attention of the ‘Data Protection Officer’ via any of the following means:

Email: rpd@areasciencepark.it

Post: AREA Science Park, Località Padriciano 99, 34149 Trieste, Italy.

Online Form: Available here https://www.oisair.net/site/contact

If requested, AREA Science Park will provide you with a copy of the personal data being processed without charge. For any additional copies AREA Science Park may charge you a reasonable administration fee. If your request is submitted by electronic means, and unless otherwise indicated, the information will be provided by AREA Science Park in an electronic format in common use.

Any communications and actions taken by AREA Science Park, in the interest of you exercising your rights above, will be carried out free of charge. However, if your requests are manifestly unfounded or excessive, in particular due to their repetitive nature, AREA Science Park may charge you an administration fee or refuse to accede to your requests.

The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:

9. Treatment of particular categories of data

In relation to the processing of special categories of personal data (suitable for revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as processing genetic data, biometric data intended to uniquely identify a natural person, data relating to health or sexual life or sexual orientation of the person) which may be necessary in the pursuit of the purposes referred to in Section 4, explicit consent is required, subject to the specific cases provided for in the Regulation which allow the processing of such personal data even in the absence of consent.

Information regarding legal persons, bodies or associations

The use of automated calling or call communication systems without the intervention of an operator and of electronic communications (electronic mail, fax, SMS, MMS or other) for the purpose of promotional activities or the fulfilment of customer satisfaction activities is permissible only with the consent of the parties with a contract for supply of electronic communication services, which includes legal persons, entities and associations. The conduct of these activities in respect of such persons shall be subject to a specific demonstration of consent.

Subject of the request

Right Description
Right of access

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

  1. the purposes of the processing;
  2. the categories of personal data concerned;
  3. the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  5. the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
  6. the right to lodge a complaint with a supervisory authority;
  7. where the personal data are not collected from the data subject, any available information as to their source;
  8. the existence of automated decision-making, including profiling, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer.

Right to rectification

The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure

Your right to have your personal data deleted without undue delay, if one of the following reasons exists:

  1. the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  2. the data subject withdraws consent on which the processing is based and where there is no other legal ground for the processing;
  3. the data subject objects to the processing and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing.
  4. the personal data have been unlawfully processed;
  5. the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
  6. the personal data have been collected in relation to the offer of information society services.

The cancellation can take place unless the right to freedom of expression and information prevails; the data are retained for the fulfilment of a legal obligation or for the execution of a task carried out in the public interest or in the exercise of public powers; for reasons of public interest in the health sector; for archiving in the public interest; for scientific or historical research or for statistical purposes or for ascertaining; exercising or defending a right in court.

Right of restriction of processing

The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:

  1. the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
  2. the processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
  3. the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
  4. the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted under the above, such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

Right of portability

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

  1. the processing is based on consent or on a contract.
  2. the processing is carried out by automated means.

In exercising his or her right to data portability above, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. The right shall not adversely affect the rights and freedoms of others.

Right to object
  1. The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her, including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
  2. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.
  3. Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
  4. At the latest at the time of the first communication with the data subject, the right shall be explicitly brought to the attention of the data subject and shall be presented clearly and separately from any other information.
  5. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications.
  6. Where personal data are processed for scientific or historical research purposes or statistical purposes, the data subject, on grounds relating to his or her particular situation, shall have the right to object to processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Right to withdraw consent You have the right to revoke consent at any time for all processing whose basis of legitimacy is that of consent. Withdrawal of consent does not affect the legality of the previous processing, nor the retention of data that is mandatory to retain.
Right to object to automated decision making

The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. This shall not apply if the decision:

  1. is necessary for entering into, or performance of, a contract between the data subject and a data controller;
  2. is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests; or
  3. is based on the data subject’s explicit consent.

In the cases referred to in points (1) and (3) the data controller shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

The exercise of the aforementioned rights is subject to the limits, rules and procedures set forth in Regulation (EU) 679/16. In accordance with the provisions of article 12, paragraph 3 of the AREA Science Park Regulations, it will provide the interested party with information concerning the action taken without unjustified delay and, in any case, at the latest within one month of receiving the request. This deadline may be extended by two months, if necessary, taking into account the complexity and number of requests. Area Science Park will inform the interested party of this extension, and of the reasons for the delay, within one month of receiving the request.

By clicking on "accept the privacy policy" declares (for himself and for the interested party, if different) that he has been informed that the data indicated in this form are used exclusively to address this request and that they will be kept for a period of five years, in order to guarantee appropriate proof of the procedure, for any exercise of rights in administrative or judicial proceedings.

News