Privacy Policy according to Articles 12 et seq. of Regulation (EU) 2016/679 WEBSITE
www.torque2024.eu
With this Privacy Policy, the Data Controller, as defined below, wishes to inform you of the purposes and methods of the processing of your personal data and the rights you are entitled to by current privacy legislation, with particular reference to Legislative Decree 196/2003 (Privacy Code) and subsequent amendments and additions, EU Regulation 2016/679 (GDPR) and the Guidelines of the Italian Data Protection Authority.
This policy is rendered exclusively for the aforementioned site and does not concern any other sites that may be reached by the user via the outgoing links present on the same.
Dear User,
- The Personal Data Controller EAWE, European Academy of Wind Energy, can be reached at the following address:
https://www.eawe.eu/
- The University of Florence, available at:
https://www.unifi.it/
- The organizer and chairman of Torque 2024, Conference on the Science of Making Torque from Wind, represented by Professor Alessandro Bianchini, Assistant Professor, PhD, Reciprocating Engines and Advanced Systems for Energy (REASE), Department of Industrial Engineering of Florence (DIEF), University of Florence, Via di Santa Marta 3, 50139 Florence, Italy.
E-mail contact:
- alessandro.bianchini@unifi.it
inform you
on the processing of your personal data, necessary to pursue the organisational, informative, scientific and institutional purposes of Torque 2024, Conference on the Science of Making Torque from Wind, scheduled in Florence from 29 to 31 May 2024.
Such processing is carried out by adopting appropriate technical and organizational security measures, with priority given to the proper protection of personal data and in compliance with the principles of the General Data Protection Regulation (GDPR) of the European Union, Regulation (EU) 2016/679.
For the above-mentioned purposes, your personal data may be:
- processed by external Data Processors duly authorized and trained for the processing, in compliance with privacy regulations and procedures:
- collected for specific and further compatible purposes
- retained for the period necessary to achieve the aforementioned purposes or for the maximum time established by sector regulations
- processed in compliance with the principles of lawfulness, correctness and transparency
- adequate, relevant and limited in relation to the purposes of collection
- accurate and, if necessary, updated.
We also inform you that the data voluntarily provided to the organizers are indispensable for providing and managing the services requested.
If activities involving the processing of personal data are entrusted to third parties, such processing will be based on an agreement regulating their respective responsibilities, constituting the legal basis for such processing. These parties, referred to as External Processors, fall within the scope of the Controller's processing, and the sharing of personal data with them does not require the consent of the data subject.
Please keep your Personal Data updated by notifying us of any changes.
TYPES OF DATA PROCESSED
The processing activities concern the following personal data: Common data, Master data, Navigation logs, Common data, Fiscal data, Social Network: Linkedin and Twitter
Technical processing Data relating to the type of browser used to connect to the
https://www.torque2024.eu/
domain, is automatically recorded by the logical devices for the protection and control of access to the domain (log files). These data are used exclusively to control network traffic to the
https://www.torque2024.eu/
domain, are not associated with identified individuals, and are deleted immediately after processing. This data could be used to ascertain responsibility in the event of computer crimes against the site, but at present web contact data do not persist for more than one year.
CATEGORIES OF INTERESTED PARTIES Processing activities are aimed at Web Users.
OBJECT AND METHODS OF PROCESSING
1. Processing of Personal Data for the purposes of this Privacy Policy shall mean any operation carried out also through the use of automated processes, such as viewing, using, collecting, recording, storing, modifying, retrieving, consulting, disclosing, disseminating, or otherwise making available, including erasure or destruction.
2. The processing of personal data will be carried out guaranteeing security and confidentiality, using manual, electronic and digital tools. While browsing the site, data will be processed by the organizers with the consent of the person concerned. The Data Controller and the appointed suppliers, only with the consent of the Interested Party, will carry out the operations necessary to allow the benefit of the services of the site
https://www.torque2024.eu/
such as the management of the relationship to participate in the Torque 2024 event, the management of relations with participants, and compliance with the specific requests of the Interested Party.
In particular, the following Personal Data may be processed:
I. Navigation data The Site's software and computer systems acquire personal data in the normal course of operation, which are implicitly transmitted in the use of Internet communication protocols. These data are used exclusively to check the correct operation of the Site and are not communicated or disseminated.
II. Personal and fiscal data, voluntarily provided by users/visitors of the
https://www.torque2024.eu/
website in order to access certain services:
a. to request information;
b. to be able to submit an application via the registration form
III. Cookies (COOKIE POLICY)
The
https://www.torque2024.eu/
website automatically sends "cookies" during navigation. These are small text files that facilitate navigation, enabling the operation of services that require identification of the user's path. The site only uses technical cookies that are necessary for navigation or to provide the service requested by the user, avoiding any profiling activity or collection of personal data via cookies.
PURPOSE OF PROCESSING AND CONDITIONS THAT MAKE PROCESSING LAWFUL
1. Personal data collected during browsing are processed to allow the user to use and learn about the services offered by the site
https://www.torque2024.eu/
and for maintenance and technical assistance to ensure the proper functioning and improve the quality and structure of the site itself.
All data processing is carried out in compliance with the limits and conditions laid down by law, using direct and/or automated tools, including electronic, digital and telematic tools. The Controller and the Processors will process the Personal Data of the user/visitor for the achievement of specific purposes from time to time informed, processing your Personal Data only in the presence of one or more of the following legal bases:
a) The user/visitor has given his/her free, specific, informed and unambiguous consent to the processing;
b) Processing is necessary for the performance of a contract to which the user/visitor is party or is necessary for the performance of pre-contractual measures taken at his/her request;
c) In the presence of a legitimate interest of the Controller and its Managers, always in compliance with the fundamental rights and freedoms of the data subject which require the protection of personal data;
d) Under a legal obligation.
Types of data processed
1. SITE - Navigation data
To obtain anonymous statistical information on use, to check the correct functioning of the site, and to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the Controller.
The data you provide will be processed for the following purposes:
Nature of conferment: Optional
Consequences of refusal to provide data: Failure to provide data will make it impossible for the Data Controller to respond to the data subject's requests.
Personal data retention period: Processing of the request.
Minimum data protection measures: Standard Protection Measures
Method of Processing: Processing is carried out with computerized tools.
3. SITE - Use of the Service, Login Area and Registration Area
Use of the services offered through the reserved area of the Owner's site.
The data you provide will be processed for the following purposes:
Nature of conferment: Optional
Consequences of refusal to provide data: Failure to provide data will make it impossible for the Data Controller to provide services through the reserved area of the site.
Personal data retention period: Deletion by the user.
Minimum data protection measures: Standard Protection Measures
Method of processing: The processing is carried out with computer tools.
RECIPIENTS OF TREATMENT
1. For the pursuit of the aforementioned purposes, the Data Controller and the Processors may need to communicate users' Personal Data to third parties in order to execute the Contract, to comply with legal obligations, or to carry out activities instrumental to the provision of the services requested.
Therefore, the following may be recipients of the data: employees, consultants, collaborators, and any other natural person carrying out their activities based on instructions received from the Data Controller and the Data Processors in their capacity as Persons Authorised to Process the Data. In addition, subjects belonging to the following categories may also be recipients of the data:
a) public and private authorities, bodies, and organizations connected with the accommodation business, the supply of products and/or the provision of services, or when required by specific regulatory provisions;
b) subjects carrying out tasks of a technical or organizational nature, data storage and processing, control, assistance and advice, including legal advice;
The persons belonging to the above categories will process the data as External Data Processors or as Autonomous Data Controllers or as Persons Authorised to Process, designated by the Data Controller and its Processors; they will be given the necessary instructions to be able to guarantee the confidentiality, security and integrity of the data and the adoption of appropriate security measures
2. The Personal Data of the user/visitor will be processed within the European Union and stored on servers located within the European Union.
PERSONAL DATA RETENTION PERIOD
Personal Data processed for the purposes described above will be retained by the principles of proportionality and necessity, without prejudice to the further retention of the same where necessary to comply with specific legal obligations or measures of the Authority, for the management of disputes and complaints, for the collection of debts and for the promotion of any legal action.
RIGHTS OF THE DATA SUBJECT - COMPLAINT TO THE SUPERVISORY AUTHORITY
About the processing operations described in this Notice, as a data subject you may, under the conditions set out in the GDPR, exercise the rights set out in Articles 15 to 22 of the GDPR and, in particular, the following rights:
- Right of access - Article 15 GDPR: right to obtain confirmation as to whether or not personal data relating to you are being processed and, if so, to obtain access to your personal data;
- Right of rectification - Article 16 GDPR: right to obtain, without undue delay, rectification of inaccurate personal data concerning you and/or supplementation of incomplete personal data
- Right to erasure (right to be forgotten) - Article 17 GDPR: right to obtain, without undue delay, the deletion of personal data concerning you. The right to erasure does not apply to the extent that the processing is necessary for the performance of a legal obligation or for the enforcement of a legal obligation.
- Right to restriction of processing - Article 18 GDPR: right to obtain restriction of processing, when: (a) the data subject disputes the accuracy of the personal data; (b) the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead that their use be restricted ; (c) the personal data are necessary for the establishment, exercise or defense of a legal claim; (d) the data subject has objected to the processing pending verification as to whether the legitimate grounds of the Data Controller prevail over those of the data subject.
- Right to data portability - Article 20 GDPR: the right to receive, in a structured, commonly used, and machine-readable format, the personal data concerning you provided to the Data Controller and the right to transmit them to another Data Controller without hindrance, where the processing is based on consent and is carried out by automated means. In addition, the right to have your personal data transmitted directly from this Controller to another Controller if this is technically feasible;
- Right to object - Article 21 GDPR: right to object, at any time, to the processing of personal data concerning you based on the condition of legitimate interest, including profiling, unless there are legitimate grounds for the Controller to continue the processing which prevail;
- Right not to be subjected to an automated decision-making process - Article 22 GDPR: you have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly similarly affects you unless this is necessary for the conclusion or performance of a contract or you have given your consent. In any case, an automated decision-making process shall not affect your personal data and you may at any time obtain human intervention from the Controller, express your opinion and contest the decision.
- The right to lodge a complaint with the Data Protection Authority: http://www.garanteprivacy.it;
- Revoke the consent given at any time and as easily as you gave it without prejudice to the lawfulness of the processing based on the consent given before revocation.
The above rights may be exercised, vis-à-vis the Controller and its Managers, by contacting the references:
- info@torque2024.eu
- alessandro.bianchini@unifi.it
indicated in the section Contacts.
The exercise of your rights as a data subject is free of charge under Article 12 GDPR. However, in the case of requests that are manifestly unfounded or excessive, including in terms of their repetitiveness, the Data Controller may charge you a reasonable fee, in light of the administrative costs incurred in handling your request, or deny you satisfaction of your request.
Finally, we inform you that the Controller may request further information necessary to confirm the identity of the data subject.
