INFORMATION AND CONSENT RELATING TO THE PROCESSING OF PERSONAL DATA OF USERS OF THE WEBSITE OF “BIOINSOUTH” PROJECT – SUPPORTING REGIONAL ENVIRONMENTAL SUSTAINABILITY ASSESSMENT FOR. THE BIO-BASED SECTORS TO IMPROVE INNOVATION, INNOVATION, INDUSTRIES AND INCLUSIVITY IN SOUTH EUROPE – PURSUANT TO ART. 13 and 14 OF REGULATION (EU) 2016/679 (“GDPR”)
Premise
The joint data controllers provide this information in relation to the processing of personal data collected by them, first by the site developer partner, PNO – PNO Innovation, when visiting and browsing the BioINSouth website (https://www.bioinsouth.eu/). This information is provided exclusively for the Bioinsouth website and does not apply to online pages or services accessible via hypertext links that may be published on the website. The personal data provided by users will be processed in compliance with the provisions of EU Regulation no. 2016/679 (for short, “GDPR”).
Joint Data Controllers
The joint controllers, in accordance with the provisions of Article 26 of the GDPR, have entered into a joint controllership agreement (Annex 1 – Joint controllership agreement BioINSouth Project_v.final.pdf) in order to regulate the role and responsibilities of each joint controller, to protect the exercise of the rights of the data subject, to define a single reference figure for the collection of any report for everything concerning the joint controller and the exercise of rights relating to the itself (the so-called “single point of contact”), commit each of the joint controllers to the adoption of appropriate security measures to protect the data processed.
The joint data controllers are:
– Cluster Spring (Tax Code 97684680156 and VAT number 12179510966), coordinator of the BioINSouth project, with registered office in Milan in via Bergognone 34 (20144), in the person of the legal representative pro tempore pec: clusterspring@pec.it e-mail: info@clusterspring.it;
– PNO – PNO Innovation with registered office in Aiga Paraskevi (Greece) at 396 Mesogeion Avenue, 15341, in the person of its pro tempore certified e-mail representative: Vasileios.Kyriazis@pnoconsultants.com
– CTA – FUNDACION CORPORACION TECNOLOGICA DE ANDALUCIA based in Calle Albert Einstein S/N, 41092, Seville, Spain; reachable at the e-mail address negocio@corporaciontecnologica.com, in the person of its pro tempore legal representative;
– BIOEAST HUB based in Plaska 589/11 Mala Strana, 15000, Praha 5, Czechia; reachable at the e-mail address nedelnik@vupt.cz, in the person of its pro tempore legal representative;
– LEITAT – ACONDICIONAMIENTO TARRASENSE ASSOCIACIÓN based in Carrer de la Innovacio 2, 08225, Terrassa, Spain; reachable at the PEC e-mail address leitat@leitat.org, in the person of its pro tempore legal representative Jordi Cabrafiga
– P-BIO – Associação Portuguesa de Bioindústria based in Biocant Park, Parque Tecnológico de Cantanhede, Núcleo 04, Lote 02, 3060-197 Cantanhede, Portugal; reachable at the e-mail address sec.geral@p-bio.org, in the person of its pro tempore legal representative;
– ETHNIKO KAI KAPODISTRIAKO PANEPISTIMIO ATHINON – NKUA (RIC-Bio3) – based in 6 Christou Lada str., 10561, Athens, Greece; reachable at the e-mail addressrc@elke.uoa.gr, in the person of its pro tempore legal representative;
– INNEN – INNOVATION ENGINEERING SRL based in Via Palestrina 25, 00189, Rome Italy; reachable at the PEC e-mail address innovationengineeringsrl@pec.it, in the person of its pro tempore legal representative;
– UNINA – University of Naples Federico II based in Corso Umberto I 40, 80138, Naples, Italy; reachable at the PEC e-mail address danilo.ercolini@personalepec.unina.it, in the person of its pro tempore legal representative;
– ACIS – CHAMBER OF COMMERCE AND INDUSTRY OF SLOVENIA based in Dimiceva Ulica 13, 1000, Ljubljana, Slovenia; reachable at the PEC e-mail address zki@gzs.si, in the person of its pro tempore legal representative;
– ASOI – AGRI SUD OUEST INNOVATION based in 8 Chemin de la Crouzette, 31320, Castanet -Tolosan, France; reachable at the e-mail address laurent.augier@agrisudouest.com in the person of its pro tempore legal representative;
– TUBITAK – TURKIYE BILIMSEL VE TEKNOLOJIK ARASTIRMA KURUMU based in Ataturk Bulvari 221, 06100, Ankara, Türkiye; reachable at the e-mail address e-mail address burcu.ozsoy@tubitak.gov.tr, in the person of its pro tempore legal representative;
– ASINCAR – ASOCIACION DE INVESTIGACION DE INDUSTRIAS CARNICAS DEL PRINCIPADO DE ASTURIAS based in Polígono la Barreda, c/Solelleros 5, 33180, Noreña, Spain; reachable at the e-mail address información@asincar.com, in the person of its pro tempore legal representative;
– FREDU – FREDERICK UNIVERSITY based in Gianni Freiderikou 7, Pallouriotissa Lefkosia, 1036, Cyprus; reachable at the PEC e-mail address info@frederick.ac.cy, in the person of its pro tempore legal representative Dr Christoforos Charalambous;
– UNIMIB – University of Milan Bicocca based in Piazza dell’Ateneo Nuovo 1, 20126, Milan, Italy; reachable at the PEC e-mail address ateneo.bicocca@pec.unimib.it, in the person of its pro tempore legal representative.
Legal basis of the processing
The legal basis for the processing of the data indicated in this information is the consent expressed by the data subject pursuant to art. 6 paragraph 1 letter a) GDPR and the fulfilment of the legal obligations to which each joint controller is subject pursuant to art. 6 para. 1 lit. c) GDPR.
Categories of data – browsing data
The joint controllers process personal data of a common nature (name, surname, e-mail address; browsing data such as IP address, addresses in URI/URL notation, etc.). The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified data subjects, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, successful, error, etc.) and other parameters related to the user’s operating system and computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing.
Categories of data – data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mails (ordinary or certified) to the addresses indicated in this information and/or the compilation of the form on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the communication as highlighted in the privacy policy relating to the contact service (https://www.bioinsouth.eu/privacy-policy/).
Except for what is specified above for navigation data and in the information provided in the individual sections of the BioINSouth website, the provision of data for other purposes is optional.
Cookie
Information on cookies can be found in the cookie policy section (https://www.bioinsouth.eu/cookie-policy/). At any time, you can modify, revoke or update the consents given, by deleting the history and reconnect to the site where the cookies popup window will open.
Purpose of the Processing – processing methods – data retention period
The processing of data using IT and telematic tools (and/or manual tools) is aimed at the correct use of the website and the collection of data from the public interested in the project, in relation to the promotion and dissemination of BioINSouth, a European project funded under the HORIZON-JU-CBE-2023-S-02 call and coordinated by the Spring Cluster.
The project is aimed at developing guidelines and digital tools to support the adoption of innovative methodologies in the assessment of environmental impacts in multiple bio-based industrial systems to contribute to the increase of regional competitiveness, innovation capacity and foster the EU’s fair and green transition.
Your data will be processed by the joint controllers, by the members of the consortium who request access to the site, by their staff and their collaborators (internal or external, natural or legal persons), expressly authorized, for site maintenance needs, for the development and dissemination of the project.
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected, pursuant to art. 5 lit. e) GDPR.
Specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access.
Categories of recipients of personal data – Transfer of data to non-EU countries
The data subject to processing may be communicated, in addition to the subjects referred to in the paragraph “Purposes of the processing – processing methods“, also to the judicial authority for the need to ascertain unlawful acts.
The data collected may be transferred to non-EU countries, in particular Turkey where the co-controller TUBITAK, a partner in the project, is based. We would like to point out that, for this country, the European Commission has not issued the adequacy decision, pursuant to art. 45 GDPR, i.e. Turkey is not counted among the “adequate” countries, able to guarantee an adequate level of protection of personal data, to European standards. For this reason, for the purposes of transferring your data to Turkey, pursuant to art. 49 paragraph 1 letter a), the explicit consent of the interested party is required.
Rights of the data subjects
In relation to the data subject to the processing referred to in this policy, you are recognized, at any time, the right to:
– Access (art. 15 EU Regulation no. 2016/679) – the right to request and obtain from the Data Controller confirmation that the processing of your data is being carried out and access to the data concerning the data subject (including to know the purpose of the processing, the categories of data processed);
– Rectification (art. 16 EU Regulation no. 2016/679) – allows you to request the Data Controller to correct, modify, integrate your personal data;
– Erasure (art. 17 EU Regulation no. 2016/679) – allows you to obtain the deletion of your data without justified delay (so-called right to be forgotten);
– Restriction (art. 18 EU Regulation no. 2016/679) – the right to obtain a limitation on the processing of the data subject’s data, for example, in addition to the exercise of the right referred to in art. 16 for as long as necessary to ascertain the correctness of the data;
– Portability (art. 20 EU Regulation no. 2016/679) – allows the data subject to receive personal data concerning him or her so that he or she can transmit them to another Data Controller;
– Objection to processing (art. 21 EU Regulation no. 2016/679) – allows the data subject to object to the processing of personal data concerning him/her.
The exercise of your rights can be exercised by written communication to the contact point, SPRING Cluster “Sustainable Processes and Resources for Innovation and National Growth” (C.F. 97684680156 and P.IVA 12179510966), in the figure of the DPO for the project BioINSouth by e-mail: privacy@bioinsouth.eu.
Withdrawal of consent
You have the right to withdraw your consent at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.
Complaint
It should be noted that pursuant to art. 77 of EU Regulation no. 2016/679, the S.V. may lodge a complaint with the Guarantor Authority in the event of violation of the current legislation on the protection of personal data.
CONSENT TO THE PROCESSING OF PERSONAL DATA REGULATION (EU) 2016/679
The user having been informed:
– the identity of the data controllers;
– the measure, the methods by which the processing takes place;
– the purposes of the processing for which the personal data are intended;
– the right to withdraw consent as indicated in this information prepared pursuant to art. 13 of Regulation (EU) 2016/679;
by placing the flag in the appropriate box “I have read and accept the terms and conditions“
STATES
that the user has received and read this information and
AGREES
pursuant to and for the purposes of art. 7 et seq. of Regulation (EU) 2016/679, to the processing of personal data in the manner and within the limits set out in this policy.