PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA OF USERS OF THE ITALBIOTEC CONSORTIUM WEBSITE PURSUANT TO ART. 13 OF REGULATION (EU) 2016/679 ("GDPR")  

Introduction
The Italbiotec Consortium provides this information in relation to the processing of personal data collected by the Consortium when visiting and browsing the https://www.italbiotec.it website. This information is provided exclusively for the website of the Italbiotec Consortium and does not apply to online pages or services accessible through links and icons that may be present on the website of the Italbiotec Consortium. The personal data provided by users will be processed in compliance with the provisions of EU Regulation no. 2016/679 ("GDPR").

Data Controller
The Data Controller is the Italbiotec Consortium (Tax Code/VAT 02429600121), with registered office in Piazza della Trivulziana 4/A Milano (20121), represented by its pro tempore legal representative, certified e-mail (pec): consorzio@pec.italbiotec.it

Categories of Data – Browsing Data
The Data Controller processes personal data relating to website browsing, such as IP addresses and addresses in URI/URL notation. The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified data subjects, but which by its nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes:

• the IP addresses or domain names of the computers used by users who connect to the site;
• the addresses in URI (Uniform Resource Identifier) notation of the requested resources;
• the time of the request;
• the method used to submit the request to the server;
• the size of the file obtained in response;
• the numerical code indicating the status of the response given by the server (successful, error, etc.);
• other parameters related to the user's operating system and computer environment.

This data is collected in order to obtain anonymous statistical information on the use of the site and to check its correct functioning.
 
Categories of Data – Data provided voluntarily by the user 
The optional, explicit and voluntary sending of e-mails to the addresses indicated and/or the compilation of the form on this site involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the communication as highlighted in the privacy policy relating to the contacts > service.

With the exception of what is specified above for browsing data and in the information pursuant to art. 13 of the GDPR provided in the individual sections of the Italbiotec Consortium website, the provision of data for additional purposes is optional.

Purposes of the Processing, legal basis of the Processing and methods of Processing
Personal data are processed using electronic and telematic means, as well as manual methods, for the following purposes:

a)
to allow navigation and the correct functioning of the website as well as to guarantee the security of the site itself. The legal basis of the processing is the legitimate interest of the Data Controller pursuant to Article 6, paragraph 1 letter f) GDPR;
b)
to comply with legal obligations as well as to respond to requests from the Authorities. The legal basis for the processing is compliance with a legal obligation to which the Data Controller is subject pursuant to Article 6, paragraph 1, letter c) GDPR;
c)
to the exercise and defense of the rights of the Italbiotec Consortium in every forum, both judicial and extrajudicial. The legal basis of the processing is the legitimate interest of the Data Controller pursuant to Article 6, paragraph 1, letter f) GDPR;

Your data will be processed by the staff and collaborators of the Italbiotec Consortium (internal or external, natural or legal persons) for the maintenance, management and provision of the website navigation service.

Cookies
Information on cookies can be found in the cookie policy > section. At any time you can modify, revoke or update the consents given in the cookie center.

Data retention period
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected, pursuant to art. 5 paragraph 1 letter e) GDPR.

Specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access.

Categories of recipients of Personal Data – Data Processors
The personal data processed may be communicated, in addition to the subjects referred to in the paragraph "Purposes of the processing - processing methods", also to the judicial authority for the need to ascertain unlawful acts.

- Data processors: The data provided by users may be processed, by virtue of the purposes described in this policy, by the subjects appointed as data processors pursuant to Article 28 of the GDPR:

• providers of IT and technical services related to the management and maintenance of the website and IT systems.

Rights of the data subjects
In relation to the personal data processed under this privacy policy, you may exercise the following rights at any time:

- Access (art. 15 EU Regulation no. 2016/679) – the right to request and obtain from the Data Controller confirmation that the processing of your data is being carried out and access to the data concerning the data subject (including to know the purpose of the processing, the categories of data processed);

- Rectification (art. 16 EU Regulation no. 2016/679) – allows you to request the Data Controller to correct, modify, integrate your personal data;

- Erasure (art. 17 EU Regulation no. 2016/679) – allows you to obtain the deletion of your data without justified delay (“right to be forgotten”);

- Restriction (art. 18 EU Regulation no. 2016/679) – the right to obtain a limitation on the processing of the data subject's data, for example, in addition to the exercise of the right referred to in art. 16 for as long as necessary to ascertain the correctness of the data;

- Portability (art. 20 EU Regulation no. 2016/679) – allows the data subject to receive personal data concerning you and to transmit those data to another Data Controller;

- Objection to processing (art. 21 EU Regulation no. 2016/679) – allows the data subject to object to the processing of personal data.

The exercise of your rights can be exercised by written communication to be sent to the address: Piazza della Trivulziana 4/A Milan (20121), or by e-mail: privacy@italbiotec.it

Complaint
It should be noted that pursuant to art. 77 of EU Regulation no. 2016/679, the data subject may lodge a complaint with the Supervisory Authority in the event of a deemed violation of the current legislation on the protection of personal data.

Authority: Italian Data Protection Authority (GPDP)

Website: www.garanteprivacy.it

PEC: protocollo@pec.gpdp.it

Address: Piazza Venezia, 11 – 00187 Rome

Latest Version: 5.8.2026