1. Information on the processing of personal data
This page describes how the indire.it site is managed as regards the personal data of users who consult it.
This is information given pursuant to Art. 13 of Leg. Dec. no. 196/2003 (Data Protection Law) and to Art. 13 of EU regulation 2016/679 (otherwise known as General Data Protection Regulation, GDPR) on the protection of natural persons with regard to the processing of personal data (hereinafter, for the sake of brevity, referred to as regulation or GDPR) to those who interact with the Portal’s web services accessible via data communication starting from the address www.indire.it, which corresponds to the first page of INDIRE’s site.
This information refers only to the new indire.it site and not to any other websites that may be consulted by users through links.
Person/s responsible for the processing
The Data Protection Officer (hereinafter referred to as DPO) is Dennis Savorani, domiciled for the purpose at the registered office of Indire. (email: firstname.lastname@example.org).
It is possible to turn to the DPO for any clarifications regarding the right to the protection of personal data and the exercise of the rights contained in the GDPR and listed in the next paragraph of this information, by using the following addresses:
- Indire, via Michelangelo Buonarroti, 10 – 50122 Florence, Italy
Rights of the interested party
Pursuant to Art. 7 of Leg. Dec. 30 June 2003 no. 196 – Data protection Code, and
Articles 15 to 22 of the GDPR, at any moment the interested party has the right to exercise (if applicable) the right to:
- obtain confirmation of the existence or otherwise of data concerning him/her;
- obtain information about the purpose of the processing, the categories of personal data, the recipients or categories of recipients of the personal data to whom the data have been or will be disclosed, and where possible, the envisaged period for which the personal data will be stored;
- obtain the rectification or erasure of personal data;
- obtain restriction of processing of personal data;
- obtain data portability, i.e. receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided;
- object at any time to processing of personal data also if the data are processed for direct marketing;
- object to automated decision-making regarding natural persons including profiling
- request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject, and to object to processing as well as the right to data portability;
- withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
- lodge a complaint with the Italian Data Protection Authority, based in Rome in Piazza di Monte Citorio no.121, official website www.garanteprivacy.it.
The exercise of the right is not limited by any restrictions on form and is free.
Collection of data
The site has been designed mainly to supply information on the activities of INDIRE. In general, therefore, the site does not collect personal data. When it becomes necessary to collect personal data – which the user is always free not to provide – appropriate information is drawn up in compliance with Italian and EU law that underlines the specific purposes for the data collected, amongst other things.
We strongly recommend reading these notices before providing your data.
The place where data is processed
Processing to do with this website takes place at INDIRE’s head office in Florence at Via M. Buonarroti 10, where the server that physically contains the data is managed. Personal data are only handled by the Institute’s technical staff specifically in charge of processing, or by those responsible for occasional maintenance activities. No data obtained from the web service will be communicated or disclosed to third parties. Personal data provided by users forwarding requests for information (newsletters, answers to questions, brochures, documents, etc.) is only used to carry out the requested service and is only disclosed to third parties if necessary for said purpose.
INDIRE guarantees that the processing of data – whether this has been acquired by email, from electronic forms, or in another way – is in compliance with the data protection laws. Cf. www.garanteprivacy.it.
The kind of data processed
During the ordinary course of operations, the IT systems and software procedures for running this website acquire some personal data whose transmission is implied in the use of the communication protocols of the Internet.
It concerns information that is not collected to be associated with specific individuals, but by its very nature could, through the processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI addresses (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters related to the operating system and the users. This data is used only to obtain anonymous statistical information on the site and to check its correct functioning and is kept for the minimum period demanded by the regulations in force.
This data could eventually be used to ascertain responsibility in case of hypothetical computer crimes to the detriment of the site.
Data provided willingly by users
During the ordinary course of operations, the IT systems and software procedures for running this website acquire some personal data whose transmission is implied in the use of the communication protocols of the Internet. Specific summaries of information relating to particular services on request will be provided or displayed on the website pages.
The Newsletter “Indire Informa”
Upon user’s explicit consent to be expressed in the dedicated area of the portal “Indire informa”, user’s name and email address can be collected only with the purpose of periodically sending the newsletter “Indire Informa” which provides a monthly update on the developments of school innovation in Italy and of the institutional activities promoted by Indire. The personal data provided is not processed for profiling purposes. The newsletter is sent via email to those who require it explicitly using the online form, accessible on the website through the page dedicated to the newsletter of “Indire informa”, and authorise Indire to process their personal data. The provision of data is optional. Denial of data provision prevents access to the newsletter. Personal data provided by users are utilised only in order to send the newsletter and will not be passed on to third parties. The data collected is processed with IT tools and adequate security measures are observed to prevent data loss, illicit or improper use and unauthorised access. Data is retained for the period of subscription to the newsletter and deleted at the request of the interested party.
The processing procedures
Personal data is processed through automated systems for the time strictly necessary to attain the purposes for which it has been collected. Specific safety measures are in place to prevent loss and unlawful or improper use of data subject to processing, and to avoid unauthorised access to said data.
The optional nature of the provision of data
Ignoring what has been specified for navigation data, the user is free to provide the personal data requested on the forms or in the contacts for the Institute to request the sending of information or other communications. Please note that failure to provide personal data may make it impossible to obtain the service requested.
Information on Cookies, pursuant to Articles 13 and 122 of Leg. Dec. 196/2003 (“Privacy Law”), Article 13 of the GDPR, and General Measures of the Italian Data Protection Authority of 8 May 2014.
What cookies are
Cookies are small text files that are sent by the web server to the user’s device (a PC, tablet, smartphone, etc.) to allow the use of our services. Cookies also enable us to gain information to enhance our site and our technical infrastructure, thereby improving the navigation experience.
Cataloguing of cookies
- Technical Cookies, essential for the correct functioning of the website and to provide the service offered and requested by a user;
- Profiling Cookies, used to create user profiles based on personal choices and preferences, in order to send adverts in line with the profile created.
Cookies used by this site and their purpose
- Anonymous Analytical Cookies;
- Third-party Cookies;
We use the data collected by the cookies to offer users the best possible experience on our site (Cookies for Site Performance). The cookies generated by navigation are used exclusively for statistical purposes (Anonymous Analytics Cookies), and do not allow identification of particular individuals.
It is also possible that on some of the site’s pages third parties may insert their own anonymous cookies (Third-party Cookies), in order to monitor the functioning of their own app, or to personalize it, adapting it to the user’s tastes and preferences. INDIRE cannot access these cookies. Merely as an example, www.indire.it allows the sharing of its contents on the main social networks, e.g. Facebook, Flickr, GooglePlus, LinkedIn, Pinterest, Twitter, when a user clicks on the dedicated icon: on doing this, the social network that created the icon will record the user’s action.
To analyse use of the site we employ Google Analytics, a web service provided by Google, Inc. (“Google”). The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
Profiling or advertising cookies
Denial of consent
Allowing or blocking cookies
It is possible to allow or block cookies on your PC, however, this website works best when all types of cookies are allowed. The cookie settings can be controlled and modified from your browser’s “Preferences”.
Select the browser you use below for information on how to modify cookie settings.
If you wish to block the installation of cookies generated by our site it is necessary to personalize the settings of your PC or other device by blocking all the cookies, where permitted, or by activating a warning message when cookies are stored.
Visit the site http://AboutCookies.org for further information on cookies and on how they affect your navigation experience. It is important to remember that disabling cookies can stop you using some, if not all, of the functions or sections of a website.