EXTENDED TECHNICAL COOKIES POLICY
Information pursuant to Article 13 of the EU General Regulation 679/2016 on the protection of personal data.
The ASSOCIATION IPPOCRATEORG domiciled Via dei Canova,15 6900 Lugano, CF 95100290121 and "FONDAZIONE IPPOCRATE ETS", with registered office in the Municipality of Padua, PD, (hereinafter, for brevity, also joint data controller), inform that they are joint data controllers pursuant to Articles 4, no. 7) and 24 of EU Regulation 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data (hereinafter, "Regulation") of personal data collected on this website ("Site"). Hereinafter, the terms "Data Subject" or "User," whether in the singular or plural, shall mean collectively natural persons over the age of majority; natural persons of sixteen years of age in their own right; and minors under the age of sixteen years authorized by those exercising parental authority.
Processing of personal data means any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, even if not registered in a database, such as collecting, recording, organizing, structuring storage, processing, selection, blocking, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction.
Identification and contact details of the co-processors.
As required by the Transparency Guidelines WP 260/2017, the identification details of the co-owners of the data processing and all contact information is provided in the first instance:
The IppocrateOrg Association domiciled at Via dei Canova,15 6900 Lugano, CF 95100290121
"Hippocrates Ets Foundation," with registered office in the City of Padua, PD, Sottopassaggio Mario Saggin No. 2, CF 92324160289
Definition of "cookie".
Cookies are short text fragments (letters and/or numbers) that allow the web server to store on the client (the browser, e.g. Internet Explorer, Chrome, Firefox, Opera ...) information to be reused during the same visit to the site (session cookies) or later, even days later (persistent cookies). Cookies are stored, based on user preferences, by the individual browser on the specific device used (computer, tablet, smartphone).
Similar technologies, such as, for example, web beacons, transparent GIFs, and all forms of local storage introduced with HTML5, can be used to collect information about user behavior and use of services.
A cookie cannot retrieve any other data from the user's hard drive or transmit computer viruses or acquire e-mail addresses. Each cookie is unique to the user's web browser. Some of the functions of cookies may be delegated to other technologies. The term 'cookies' is intended to refer to cookies and all similar technologies.
Depending on the characteristics and use of cookies, various types of cookies can be distinguished:
- Strictly necessary technical cookies (used on this Site). These are cookies that are essential for the proper functioning of a website. The duration of the cookies is strictly limited to the working session or they may use a longer dwell time in order to remember the visitor's choices. Disabling strictly necessary cookies may affect the experience of using and navigating the website;
- analytics (analytics) and performance cookies (not operational on this Site). These are cookies used to collect and analyze traffic and usage of a website anonymously. These cookies, while not identifying the user allow, for example, to detect whether the same user returns to log on at different times. They also make it possible to monitor the system and improve its performance and usability. Deactivation of such cookies can be performed without any loss of functionality and will be discussed in detail later;
- Profiling cookies (used on this Site). These are permanent cookies used to identify (anonymously and non-anonymously) the user's preferences and improve the user's browsing experience. For more information about these cookies (as mentioned used by the Site) please visit the appropriate section on the site garanteprivacy.it/cookie
Purposes of processing and purposes of technical session cookies.
The cookies used on the Site are solely for the purpose of performing session monitoring and storing specific technical information regarding users accessing the servers of the data controllers who manage the Site. With this in mind, some operations on the Site could not be accomplished without the use of cookies, which are therefore technically necessary in such cases. "Technical" cookies can also be used without the consent of the data subject. Incidentally, the same European body that brings together all the Privacy Authorities of the various Member States (the so-called "Article 29" Group) clarified in Opinion 4/2012 (WP194) entitled "Exemption from Consent for the Use of Cookies" that they are cookies for which it is not necessary to acquire the prior and informed consent of the user:
- cookies with data filled in by the user (session identifier), lasting one session or persistent cookies limited to a few hours in some cases;
- Authentication cookies, used for the purpose of authenticated services, lasting one session;
- User-centered security cookies, used to detect authentication abuse, for a limited persistent duration;
- Session cookies for media players, such as "flash" player cookies, lasting one session;
- Session cookies for load balancing, lasting one session;
- Persistent cookies for user interface customization, lasting one session (or slightly more);
- Cookies for sharing content via third-party social plug-ins, for logged-in members of a social network.
The Data Controllers therefore inform you that technical cookies necessary to navigate within the Site are operational on the Site and in particular, session cookies that are stored temporarily in your computer's memory while you explore the Site. Session cookies remain stored in the computer for a short period of time. They are in fact deleted as soon as the user closes the Web browser.
Mandatory or optional consent for the operation of cookies that do not pursue marketing purposes.
It is not mandatory to acquire consent to the operation of only technical cookies or third-party or analytical cookies assimilated to technical cookies.
Their deactivation and/or denial of their operation will result in the impossibility of proper navigation on the Site and/or the impossibility of using the services, pages, features or content available therein.
Use of analytical or profiling cookies
The site uses cookies or other technical tools of profiling or other active tracking tools only exclusively after acquiring the user's consent to be given in a manner clearly expressed through the 'I understand' button, which indicates that the user is aware of the use of analytical or profiling cookies in order to send advertising messages or to modulate the provision of the service in a personalized manner beyond what is strictly necessary for its provision, i.e. in line with the preferences expressed by the user in the context of the use of features and web browsing and/or for the purpose of carrying out analysis and monitoring of the behavior of website visitors.
Exercise of rights by the data subject.
Pursuant to Articles 13(2)(b) and (d), 15 to 22 of the Regulations, in recalling the privacy policy already on https://scuoladippocrate.life/privacy-policy/, we further inform the data subject that:
- has the right to request from the co-owners access to, rectification or erasure of personal data or restriction of processing concerning him or her, or to object to their processing, in the cases provided for;
- has the right to bring - in Italy - a complaint to the Garante per la protezione dei dati personali, if competent Authority, following the procedures and directions published on the official website of the Authority at garanteprivacy.it;
- alternatively, has the right to file a complaint with another competent European Privacy Authority located in the place of habitual residence or domicile in Europe of the person who disputes a violation of his or her rights, following the appropriate procedures and directions;
- any rectification or erasure or restriction of processing carried out at the request of the data subject - unless this proves impossible or involves a disproportionate effort - will be communicated to each of the recipients to whom the personal data have been transmitted. The co-owners may notify the data subject of these recipients if the data subject so requests.
The exercise of rights is not subject to any formal constraints and is free of charge. Only in the event of a request for additional copies of the data requested by the data subject, the Data Controllers may charge a reasonable fee based on administrative costs. If the data subject submits the request by electronic means, and unless otherwise specified by the data subject, the information shall be provided in a commonly used electronic format. The specific address of the co-owners for transmitting requests to exercise rights as recognized by the Regulations is: ippocrateorg other formalities are required. Acknowledgement will be given within the time limits provided for in Article 12(3) of the Regulation ("The data controller shall provide the data subject with information on the action taken with regard to a request pursuant to Articles 15 to 22 without undue delay and, at the latest, within one month of receipt of the request. This period may be extended by two months, if necessary, taking into account the complexity and number of requests. The data controller shall inform the data subject of such extension, and of the reasons for the delay, within one month of receipt of the request. If the data subject makes the request by electronic means, the information shall be provided, where possible, by electronic means, unless otherwise specified by the data subject.").
According to the Transparency Guidelines WP 260/2017issuedby the EU Data Protection Working Party, in the indication of the data subject's rights, the data controller must specify a summary/summary of each of the rights in question and must provide separate guidance on the right to portability.
Specific information on the right to personal data portability.
The co-owners inform the Data Subject about the specific right to portability. Article 20 of the General Data Protection Regulation introduces the new right to data portability. This right allows the Data Subject to receive personal data provided to the Firm in a structured, commonly used and machine-readable format, and - under certain conditions - to transmit it to another data controller without hindrance.
Only personal data that (a) concern the data subject, and (b) have been provided by the data subject to the School on the basis of consent, (c) are processed electronically in the context of entering into a contract are portable.
Since the processing is not based on either consent or a Contract, the right to portability does not apply.
Summary information on other rights of the data subject.
The Regulations give the data subject a number of rights that under the WP 260 Transparency Guidelines are mandatory to summarize in their main content within the disclosure. These rights are summarized and summarized below:
Right of access (to one's own personal data only): Right to obtain from the data controller confirmation as to whether or not personal data relating to the data subject are being processed and, if so, to obtain access to the personal data and to be informed about the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if recipients in third countries or international organizations; when possible, on the expected period of retention of personal data or, if this is not possible, on the criteria used to determine this period; if the data have not been collected from the data subject, the right to receive all available information about their origin; the right to receive information about the existence of automated decision-making, including profiling, and meaningful information about the logic used, as well as the importance and the expected consequences of such processing for the data subject.
Right to rectification and integration: the data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning him/her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration. The data controller shall inform each of the recipients to whom the personal data have been transmitted of any rectification, unless this proves impossible or involves a disproportionate effort. The data controller shall inform the data subject of such recipients if the data subject so requests.
Right to erasure: the data subject has the right to obtain from the data controller the erasure of personal data concerning him/her without undue delay (and where the specific reasons of Art. 17 para. 3 of the Regulations that on the contrary relieve the data controller of the obligation to erase) if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; or if the data subject withdraws consent and there is no other legal basis for the processing; or if the data subject objects to the processing for marketing or profiling purposes, also by withdrawing consent; if the personal data have been processed unlawfully or concern information collected from minors, in violation of Art. 8 of the Regulations. The data controller shall notify each of the recipients to whom the personal data have been transmitted of any deletions unless this proves impossible or involves a disproportionate effort. The data controller shall inform the data subject of such recipients if the data subject so requests.
Right to restriction of processing: the data subject has the right to obtain from the data controller the restriction of processing (i.e., in accordance with the definition of "restriction of processing" provided by Article 4 of the Regulation: "the marking of personal data stored with the aim of limiting their processing in the future") when one of the following occurs: the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data; the processing is unlawful and the data subject objects to the erasure of the personal data and instead requests that its use be restricted; although the data controller no longer needs the personal data for the purposes of processing, the personal data are necessary to the data subject for the establishment, exercise or defense of a legal claim; the data subject has objected to the marketing processing, pending verification as to whether the data controller's legitimate grounds prevail over those of the data subject. If the processing is restricted such personal data shall be processed, except for storage, only with the consent of the data subject or for the establishment, exercise or defense of a right in court or to protect the rights of another natural or legal person or for reasons of substantial public interest. A data subject who has obtained the restriction of processing shall be informed by the data controller before the restriction is lifted. The controller shall inform each of the recipients to whom the personal data have been transmitted of any restriction, unless this proves impossible or involves a disproportionate effort. The data controller shall inform the data subject of such recipients if the data subject so requests.
Right to object: the data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her carried out by the data controller or in the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller or carried out in the furtherance of the legitimate interests of the data controller or of a third party (including profiling). In addition, if personal data are processed for direct marketing or commercial profiling purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her carried out for such purposes.
Right not to be subjected to automated decisions, including profiling: a data subject has the right not to be subjected to a decision based solely on automated processing, including profiling, that produces legal effects concerning him or her or that significantly affects him or her in a similar way, except where the automated decision is necessary for the conclusion or performance of a contract between the data subject and a data controller; is provided for by law, subject to measures and safeguards; and is based on the data subject's explicit consent.
For utility, however, a link to Articles 15 to 23 of the Data Subject Rights Regulations is provided below.
