PRP Digital Ecosystem
register logout myPRP submit your application wishlist
Request Access

Privacy Notice

Pursuant to article 13 of Regulation (EU) no. 2016/679 – General Data Protection Regulation (hereinafter referred to as ‘GDPR’), Area di Ricerca Scientifica e Tecnologica di Trieste – Area Science Park (hereinafter ‘Area Science Park’) provides the following information related to the processing of personal data carried out within the scope of the submission of a request for information via one of the forms available for this purpose on the website https://prp-ri.eu/ (hereinafter ‘the Website’).

1. Data Controller

The data controller is Area di Ricerca Scientifica e Tecnologica di Trieste – Area Science Park, with its registered office in Padriciano 99, 34149 Trieste, Italy. The person to whom the personal data refer, in his/her capacity as data subject, may contact the data controller by writing to the address mentioned above or by sending an e-mail to the following e-mail addresses: urp@areasciencepark.it - certified e-mail (PEC) protocollo@pec.areasciencepark.it.

2. Data Protection Officer

Pursuant to article 37 of the GDPR, Area Science Park has appointed a Data Protection Officer, who can be reached at the following e-mail address: rpd@areasciencepark.it.

3. Origin of the personal data

The personal data processed for the purposes described in this privacy notice are provided by the data subject. If the data subject communicates personal data of third parties, the data subject guarantees that he/she can do so on the basis of an appropriate legal basis for the lawful processing of such data and assumes all related obligations and responsibilities in accordance with current legislation, holding Area Science Park harmless and indemnifying it against any dispute, claim or request for compensation for damage arising from the processing that the third parties themselves may bring against Area Science Park. The data subject also undertakes to inform third parties whose personal data are communicated of the information contained in this privacy notice.

4. Categories of personal data concerned

The personal data processed for the purposes described in this privacy notice are standard personal data.

5. Purposes and legal basis of the processing

The personal data of the data subject will be processed by Area Science Park for the following purposes:

  • replying to the request for information sent by the data subject;
  • sending the data subject informative or promotional materials or other notices.

The legal bases for the processing are the following:

  • the consent of the data subject (article 6, paragraph 1, letter a) of the GDPR);
  • the performance of a contract to which the data subject is party or the taking of steps at the request of the data subject prior to entering into a contract (article 6, paragraph 1, letter b) of the GDPR);
  • the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (article 6, paragraph 1, letter e) of the GDPR).

6. Recipients or categories of recipients of the personal data

Without prejudice to any disclosure and further dissemination of the data under legal obligations or by orders of the authorities, the data will be known by the staff of Area Science Park and members of the organisation’s bodies, including supervisory bodies, as well as by the staff of any data processors appointed by Area Science Park itself, all of whom are authorised to process the data and specially trained to do so. A detailed and constantly updated list of the data processors is available to the data subject at the offices of Area Science Park.

7. Transfer of the data to countries outside the EU

Should Area Science Park be required to transfer the personal data of the data subject to countries outside the EU, the transfer will be carried out in such a way as to provide appropriate or suitable safeguards in accordance with Chapter V of the GDPR.

8. Data storage period

The personal data of the data subject will be stored for the periods specified in the ‘Retention Plan’ attached to Area Science Park’s ‘Document Management Manual’, available to the data subject at the offices of Area Science Park itself. When the processing is based on the data subject’s consent, the storage period lasts until such consent is withdrawn.

9. Rights of the data subject

With reference to his/her personal data, the data subject has the following rights:

  1. right of access (article 15 of the GDPR);
  2. right to rectification (article 16 of the GDPR);
  3. right to erasure (article 17 of the GDPR);
  4. right to restriction of processing (article 18 of the GDPR);
  5. right to data portability (article 20 of the GDPR), if the processing is based on the performance of a contract or on the data subject’s consent and is carried out through IT tools;
  6. right to object to the processing of the data (article 21 of the GDPR);
  7. right to withdraw his/her consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (article 7, paragraph 3 of the GDPR);
  8. right to lodge a complaint with the competent supervisory authority (article 77 of the GDPR).

To exercise the rights referred to in letters a) to g), the data subject may send an e-mail to the following address: rpd@areasciencepark.it. Area Science Park shall provide a reply within one month of receipt of the request; that period may be extended to up to three months if the request is particularly complex. When applicable, the data controller shall communicate the exercise of the rights by the data subject to each recipient to whom the personal data have been disclosed, except for specific cases (for example where this proves impossible or involves a manifestly disproportionate use of means compared to the right protected).

10. Compulsory or optional nature of providing data and consequences of failure to provide data

Providing the personal data referred to in this privacy notice and marked with an asterisk is optional, but necessary to respond to the request for information sent by the data subject. Therefore, any failure to provide such data shall preclude this activity; on the contrary, failure to provide data that are not marked with an asterisk will not have any consequences for the response to the request in question.

11. Absence of automated decision-making

In the processing of the personal data referred to in this privacy notice, Area Science Park does not use any automated decision-making under article 22 of the GDPR.