PRP Digital Ecosystem
register logout myPRP submit your application wishlist
Request Access

Privacy notice

Pursuant to articles 13 and 14 of Regulation (EU) no. 2016/679 – General Data Protection Regulation (hereinafter referred to as ‘GDPR’), Area di Ricerca Scientifica e Tecnologica di Trieste – Area Science Park (hereinafter ‘Area Science Park’) provides the following information related to the processing of personal data carried out with reference to registration and login to the website https://prp-ri.eu/ (hereinafter ‘the Website’), as well as to the processing of any requests for fee-based access to the services offered by the research infrastructure ‘Pathogen Readiness Platform for CERIC-ERIC upgrade’ (PRP@CERIC).

1. Data Controller

The data controller is Area di Ricerca Scientifica e Tecnologica di Trieste – Area Science Park, with its registered office in Padriciano 99, 34149 Trieste, Italy. The person to whom the personal data refer, in his/her capacity as data subject, may contact the data controller by writing to the address mentioned above or by sending an e-mail to the following e-mail addresses: urp@areasciencepark.it - certified e-mail (PEC) protocollo@pec.areasciencepark.it.

2. Data Protection Officer

Pursuant to article 37 of the GDPR, Area Science Park has appointed a Data Protection Officer, who can be reached at the following e-mail address: rpd@areasciencepark.it.

3. Origin of the personal data

The personal data processed for the purposes described in this privacy notice are provided by the data subject or extracted from the archives of Area Science Park.

4. Categories of personal data concerned

The personal data processed for the purposes described in this privacy notice are standard personal data.

5. Purposes and legal basis of the processing

The personal data of the data subject will be processed by Area Science Park for the following purposes:

  • registration on the Website and subsequent creation of a user profile;
  • authentication of registered users when accessing the Website;
  • processing of any requests for fee-based access to the services offered by the research infrastructure ‘Pathogen Readiness Platform for CERIC-ERIC upgrade’ (PRP@CERIC);
  • sending the data subject informative or promotional materials or other notices.

The legal bases for the processing are the following:

  • the consent of the data subject (article 6, paragraph 1, letter a) of the GDPR);
  • the performance of a contract to which the data subject is party or the taking of steps at the request of the data subject prior to entering into a contract (article 6, paragraph 1, letter b) of the GDPR).

6. Recipients or categories of recipients of the personal data

Without prejudice to any disclosure and further dissemination of the data under legal obligations or by orders of the authorities, the data will be known by the staff of Area Science Park and members of the organisation’s bodies, including supervisory bodies, as well as by the staff of any data processors appointed by Area Science Park itself, all of whom are authorised to process the data and specially trained to do so. A detailed and constantly updated list of the data processors is available to the data subject at the offices of Area Science Park.

7. Transfer of the data to countries outside the EU

Should Area Science Park be required to transfer the personal data of the data subject to countries outside the EU, the transfer will be carried out in such a way as to provide appropriate or suitable safeguards in accordance with Chapter V of the GDPR.

8. Data storage period

  • Data processed for the purposes of registering on the Website, with subsequent creation of a user profile and authentication of the registered user when accessing the Website, will be retained until the data subject objects to the processing;
  • data processed for the purposes of processing requests for fee-based access to the services offered by the research infrastructure ‘Pathogen Readiness Platform for CERIC-ERIC upgrade’ (PRP@CERIC) will be stored for the periods specified in the ‘Retention Plan’ attached to Area Science Park’s ‘Document Management Manual’, available to the data subject at the offices of Area Science Park itself;
  • data processed for the purpose of sending the data subject informative or promotional materials or other notices will be retained until the data subject withdraws his/her consent.

9. Rights of the data subject

With reference to his/her personal data, the data subject has the following rights:

  1. right of access (article 15 of the GDPR);
  2. right to rectification (article 16 of the GDPR);
  3. right to erasure (article 17 of the GDPR);
  4. right to restriction of processing (article 18 of the GDPR);
  5. right to data portability (article 20 of the GDPR), if the processing is based on the performance of a contract or on the data subject’s consent and is carried out through IT tools;
  6. right to object to the processing of the data (article 21 of the GDPR);
  7. right to withdraw his/her consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (article 7, paragraph 3 of the GDPR);
  8. right to lodge a complaint with the competent supervisory authority (article 77 of the GDPR).

To exercise the rights referred to in letters a) to g), the data subject may send an e-mail to the following address: rpd@areasciencepark.it. Area Science Park shall provide a reply within one month of receipt of the request; that period may be extended to up to three months if the request is particularly complex. When applicable, the data controller shall communicate the exercise of the rights by the data subject to each recipient to whom the personal data have been disclosed, except for specific cases (for example where this proves impossible or involves a manifestly disproportionate use of means compared to the right protected).

10. Compulsory or optional nature of providing data and consequences of failure to provide data

Providing the personal data referred to in this privacy notice and marked with an asterisk is optional, but necessary to allow user registration on the Website or authentication of already registered users when accessing the Website, as well as to allow the processing of any requests for fee-based access to the services offered by the research infrastructure ‘Pathogen Readiness Platform for CERIC-ERIC upgrade’ (PRP@CERIC). Therefore, any failure to provide such data shall preclude the activities in question; on the contrary, failure to provide data that are not marked with an asterisk will not have any consequences for the use of the Website.

11. Absence of automated decision-making

In the processing of the personal data referred to in this privacy notice, Area Science Park does not use any automated decision-making under article 22 of the GDPR.