This notice, provided for under Art. 13 of Regulation (EU) 2016/679, contains information on the processing of personal data of data subjects (the “Users”) who consult the website https://aldricus.giustizia.it/ (the “Site”) or who, by interacting with the Site, provide their personal data.
1. Applicable rules
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
- Italian Legislative Decree No 196 of 30 June 2003 – Code on the protection of personal data, laying down provisions for adaptation the national legal order to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Italian Official Journal No 174 of 29 July 2003 – Ord. Suppl. No 123) (“Italian Privacy Code”)
- Italian Legislative Decree No 101 of 10 August 2018 – Provisions for the adaptation of national legislation to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Italian Official Journal No 205 of 4 September 2018 – Gen. Ser.);
Ministero della Giustizia Via Arenula, 70 – 00186 Roma tel. +39 – 06 68851 (centralino) firstname.lastname@example.org
3. Data Processor
dr.ssa Doris Lo Moro (D.M. 7 agosto 2018) Via Arenula, 70 – 00186 Roma tel + 39 06 6885 3703 email@example.com firstname.lastname@example.org
4. Legal basis and purpose of processing
The personal data indicated below are processed by the Data Controller in the performance of institutional tasks and within the specific purposes of the EJN-Ita Building Bridges Project the Aldricus portal is part of.
4.1 Data processed for sending newsletters and other informative communications
The Italian Ministry of Justice may process personal data (contact data and personal information) of Users of the Site in order to send a newsletter about the Site activities and other information related to the project EJN-Ita Building Bridges. Personal data processed for sending newsletters and other informative communications will be kept until the end of the EJN-Ita Building Bridges project.
4.2 Data relating to the authors of comments on the Site (also sent via email to email@example.com)
The Italian Ministry of Justice may process personal data (personal details, contact details) relating to Users who decide to comment on the contents of the Aldricus Giustizia website, in order to stimulate and manage discussions, comparisons, exchanges and the circulation of opinions and ideas via the Website. The personal data of the authors of comments sent in a non-anonymous form will be visible and will be kept by the Italian Ministry of Justice until the contents to which they refer to are available on the Website and in any case until the Website ceases its activities.
4.3 Users interacting with the Italian Ministry of Justice through the Site
The Italian Ministry of Justice may process personal data relating to Users who decide to interact through the communication channels present on the Site in order to provide feedback to their requests. The optional, explicit and voluntary sending of messages to the Italian Ministry’s contact addresses, as well as the filling in and forwarding of the forms present on the Site, entail the acquisition of the sender’s contact data, necessary to reply, as well as all the personal data included in the communications. The data are in any case kept only for the time necessary to provide a response to the requests received from Users.
4.4 Navigation data
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers and terminals used by the Users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, etc. These data, which are necessary for the use of the services offered by the Site, are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning and are deleted immediately after processing or, in any case, after thirty days. Personal data relating to the logs of the Users registered and enabled to the reserved area for the consultation of working documents are also processed for the purposes of technical and security management of the Site.
Cookies are small text files that the Site sends to the user’s terminal during navigation, where they are stored and then transmitted to the same site on the next visit. The Site uses session cookies (which are not permanently stored on the user’s computer and disappear when the browser is closed) for purposes strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable the safe and efficient exploration of the Site. The so-called session cookies used in this Site avoid the use of other IT techniques potentially prejudicial to the confidentiality of the Users’ navigation and do not allow the acquisition of the User’s personal identification data. Users have the possibility to set their devices to accept all cookies, to receive notifications when a cookie is sent or not to receive cookies at all.
5. Processing methods and data protection
The Personal Data of the Users shall be processed by means of computerised, telematic and/or paper-based tools in compliance with the principles of correctness, lawfulness, transparency, accuracy, integrity, data minimisation and limitation of purposes and storage, as well as in accordance with the provisions of the GDPR and current legislation on the protection of personal data, and with the adoption of appropriate technical, logical and organisational security measures to prevent the loss of data, unlawful or incorrect use and unauthorised access.
6. Parties to whom data may be transferred
Users’ personal data may be communicated to the following entities:
I. Data Processors In order to ensure that the processing of Users’ personal data is as accurate as possible, the Ministry of Justice may appoint one or more data processors pursuant to Art. 28 GDPR. These parties will be selected from among professionals who guarantee the implementation of appropriate technical and organisational measures, so that processing is always carried out in compliance with the applicable legislation and ensuring the protection of Users’ rights.
II. EJN-Ita project partners, scientific council and editorial board The Italian Ministry of Justice may share Users’ data with the partners of the Consortium of which the Italian Ministry of Justice is a member within the EJN-Ita Building Bridges project, namely: Italian National Council of Notaries, Italian School for the Judiciary, University of Ferrara and Catholic University of the Sacred Heart of Milan. Users’ personal data may also be shared with members of the scientific council and the editorial board of Aldricus.
7. Third-party sites
The information provided does not concern other sites, pages or online services that can be reached through hypertext links that may be published on the Site, but which refer to resources outside the domain of the Ministry of Justice.
8. Rights of the Users concerned
Users shall have the right to obtain from the Ministry of Justice, in the cases provided for by the applicable legislation, access to their personal data, rectification, erasure, portability of the same, restriction of the processing concerning them as well as to object to the processing (Art. 15 ff. GDPR). In the event that the processing is based on consent, users shall have the right to request its revocation at any time. The application to exercise their rights is submitted through the contact address of the data controller (firstname.lastname@example.org).
9. Right to complain
Users who believe that their personal data is being processed in breach of the provisions of the GDPR and of the applicable legislation shall have the right to lodge a complaint with the Garante per la protezione dei dati personali, as provided for under Art. 77 of the aforementioned Regulation, or to take legal action (Art. 79 of the GDPR Regulation). Website of the Garante per la protezione dei dati personali: www.garanteprivacy.it.
10. Changes to this Policy
This Policy is effective as of 17 December 2020 and is subject to updates. Therefore, Users are invited to periodically check its content.