Information regarding the processing of personal data
In compliance with Art. 13 of EU Reg. 679/2016, the information herein is available to all those interacting with the web services of the Scuola Normale Superiore accessible electronically from: https://journals.sns.it, corresponding to the initial web page of the journals official site of the Scuola Normale Superiore.
In compliance with prevailing Italian and European regulations, the consultation of this web site may result in the processing of personal data relating to identified or identifiable parties.
The data controller is the Scuola Normale Superiore (in the person of the Director, as pro tempore legal representative), located in Piazza dei Cavalieri, 7 - 56126 Pisa (Italy).
NATURE OF DATA, PURPOSES AND LEGAL BASES FOR DATA PROCESSING
Personal data supplied by users are processed in full compliance with prevailing legislation for purposes connected to the acquisition of subscriptions and/or booklets in accordance with Art. 6, letter b) of EU Reg. 679/2016, as well as for the transmission of informative material (newsletters, replies to queries, estimates, etc.) instrumental to the carrying out of the service requested, and are transmitted to third parties only when necessary for this purpose (for example, for mailing publications).
The personal data collected by this application are essentially of the following nature:
– identifying data: name, surname, affiliation, e-mail address, password;
– product delivery data: address for delivery and invoicing, telephone number, tax code, VAT no. (partita IVA).
The above data are processed for the following purposes:
– to collect information necessary for registration on the web site and for the provision of the e -commerce service (submitting of orders; payment of orders; mailing);
– to develop studies and statistical research programmes on aggregate data in relation to accesses to the web site.
Save for what is specified for the navigation data in the information regarding cookies, users are free to provide their personal data reported in the application forms also for the purpose of requesting the transmittance of informative material or other communications. The platform utilised is the Open Journal System. Provision of all data is voluntary, although failure to provide complete data, or the provision of partial or inaccurate data, may render it impossible to obtain the requested material, in accordance with Art. 7, EU Reg. 679/2016.
MODALITIES OF PROCESSING
Personal data are processed with automated tools and kept on file only for the time strictly necessary for fulfilment of the purposes for which they were collected.
Specific safety measures are in place to prevent loss of the data, their illegal or incorrect use and non-authorised access to them.
Personal data requested during the procedure of registration on the web site will be filed and processed, with the aid of automated tools, in order to complete the registration on the web site, and to manage any acquisition and subscription requests.
Data processing connected to the web services of this web site takes place at the above mentioned site of the Scuola on servers located in Pisa, Italy, and is carried out by trained technicians, solely for the purpose authorised for the data processing. Save for when it is obligatory by law, no datum deriving from the web service will be transmitted or disseminated to third parties, except for carrying out the contract with the data subject with the purpose of transmitting the products acquired. If necessary, external parties (for example, third party technical service providers, postal couriers, hosting providers, computer companies or comptroller) will be appointed as data handlers on the part of the data controller. An updated list of the data handlers can always be requested from the data controller.
TYPES OF DATA PROCESSED
The information systems and the software procedures designated to the functioning of this web site collect, in their routine operating mode, some personal data whose transmission is implicit in the use of the Internet communication protocols.
Although the above information is not collected in order for it to be associated to identified data subjects, it could, by its very nature, enable the identification of users through processing or associations with data filed by third parties.
This category of data includes IP addresses or the domain names of the computers utilised by users who connect to the web site, the addresses of the resources requested in URI (Uniform Resource Identifier) notation, the time of the request, the method utilised to submit the request to the server, the dimension of the file obtained in reply, the numeric code indicating the state of the reply given by the server (success , error, etc.) and other parameters relating to the operating system and to the user's computer environment.
These data are utilised for the sole purpose of obtaining anonymous statistical information about the use of the web site and to check on its correct functioning; they are cancelled immediately after processing. The data could be used for establishing the responsibility for any cybercrimes to the detriment of the web site: save for this possibility, as things stand, data regarding the web contacts are not kept for longer than seven days.
Data provided willingly by the user
The explicit and voluntary sending of e-mails to the addresses indicated on this web site implies the subsequent acquisition of the e-mail address of the sender, essential for replying to the requests as well as any other personal data inserted in the e-mail.
Specific informative summaries will be progressively reported or visualised on the web pages purposely set up for particular services on request.
RIGHTS OF DATA SUBJECTS
Data subjects may at any time request from the data controller:
– the confirmation of the existence or non-existence of any personal data concerning them;
– access to their personal data and to any information relating to them; the correction of any inexact data or the integration of any incomplete data; the cancellation of any personal data regarding them (subject to one of the conditions indicated in Art. 17, paragraph 1 of the Regulations and in compliance with the exceptions specified in paragraph 3 of the same article); the limitation of the processing of their personal data (subject to one of the hypotheses indicated in Art. 18, paragraph 1 of the Regulations); the transformation into an anonymous form or the blocking of any data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed.
All data subjects also have the right to object, fully or in part:
– for legitimate reasons, to the processing of personal data regarding them, including those pertinent to the purpose of their collection;
– to the processing of any personal data regarding them for the purpose of sending out promotions of educational initiatives and cultural events of the Scuola.
The above mentioned rights can be exercised by applying to the data controller or to those authorised for the purposes indicated above, at the address email@example.com or by writing to the e-mail address firstname.lastname@example.org; data subjects can also contact the data protection manager for all questions relating to the processing of their data and to the exercising of their rights, at email@example.com.
Should a data subject consider his or her rights to have been violated by the data controller and/or by a third party, he or she has the right to lodge a complaint with the authority for the protection of personal data and/or with any other competent supervisory authority in accordance with the Regulations.