

{"id":10197,"date":"2022-01-20T14:39:14","date_gmt":"2022-01-20T13:39:14","guid":{"rendered":"http:\/\/lab.irbim.cnr.it\/privacy-policy\/"},"modified":"2026-07-30T12:46:50","modified_gmt":"2026-07-30T10:46:50","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.irbim.cnr.it\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<p><!-- Personal Data Processing Notice - www.irbim.cnr.it --><br \/>\n<!-- provided pursuant to Articles 13 and 14 of Regulation (EU) 2016\/679 (GDPR) --><\/p>\n<p><strong>Personal Data Processing Notice<\/strong> provided pursuant to Articles 13 and 14 of Regulation (EU) 2016\/679 (GDPR)<\/p>\n<p>Reference: web complement of processing activity T-06 (Institutional communication, events and scientific dissemination). Last updated: 30\/07\/2026. Maintenance officer: IRBIM Privacy Contact + ICT Office.<\/p>\n<h2>Introduction<\/h2>\n<p>This Privacy Policy describes how the institutional website <strong>www.irbim.cnr.it<\/strong> of the Institute for Biological Resources and Marine Biotechnologies (IRBIM) of the National Research Council (CNR) is managed, with regard to the processing of the personal data of users who browse or interact with it.<\/p>\n<p>This notice refers exclusively to the <strong>www.irbim.cnr.it<\/strong> website and not to any third-party websites that may be reached through hypertext links. The privacy policies of the respective operators apply to such sites, and users are invited to consult them separately.<\/p>\n<p>Some sections of the website may require the provision of personal data in order to deliver specific services (e.g. event registration, information requests, newsletter subscription): failure to provide such data may make it impossible to use those services.<\/p>\n<h2>1. Data Controller<\/h2>\n<p>The Data Controller is the <strong>National Research Council (CNR)<\/strong>, with registered office at Piazzale Aldo Moro 7, 00185 Rome &ndash; Tax Code 80054330586.<\/p>\n<p>Within the CNR, pursuant to Article 19-bis of the CNR Organisation and Operation Regulation and to the Provision of the CNR Director General no. 36\/2025, the <strong>Director of CNR-IRBIM<\/strong> is considered, for the purposes of applying data protection legislation, an <strong>internal CNR Processing Officer<\/strong> to whom specific tasks and functions of the Controller are assigned pursuant to paragraph 1 of Article 2-quaterdecies of Legislative Decree no. 196 of 30 June 2003.<\/p>\n<p><strong>IRBIM contacts:<\/strong><\/p>\n<ul>\n<li>Main office: Largo Fiera della Pesca, 2, 60125 Ancona (AN), Italy<\/li>\n<li>Certified email (PEC): <a style=\"color: inherit;\" href=\"mailto:protocollo.irbim@pec.cnr.it\">protocollo.irbim@pec.cnr.it<\/a><\/li>\n<li>Website: <a style=\"color: inherit;\" href=\"https:\/\/www.irbim.cnr.it\/en\/\">www.irbim.cnr.it<\/a><\/li>\n<\/ul>\n<p><strong>Point of contact for the website and communication activities:<\/strong> IRBIM ICT Office (<a style=\"color: inherit;\" href=\"mailto:support.irbim@cnr.it\">support.irbim@cnr.it<\/a>).<\/p>\n<p><strong>IRBIM Privacy Contact:<\/strong> <a style=\"color: inherit;\" href=\"mailto:rdp.irbim@irbim.cnr.it\">rdp.irbim@irbim.cnr.it<\/a><\/p>\n<h2>2. Data Protection Officer (DPO)<\/h2>\n<p>The Data Protection Officer (DPO) can be contacted at the following addresses:<\/p>\n<p>Email: <a style=\"color: inherit;\" href=\"mailto:rpd@cnr.it\"><strong>rpd@cnr.it<\/strong><\/a> &ndash; Certified email (PEC): <a style=\"color: inherit;\" href=\"mailto:rpd@pec.cnr.it\"><strong>rpd@pec.cnr.it<\/strong><\/a><\/p>\n<h2>3. Purposes of processing and legal bases<\/h2>\n<p>Any personal data collected through navigation of the website or interaction with its contents are processed for the following purposes.<\/p>\n<h3>3.1 Provision and improvement of web services<\/h3>\n<p>This includes the technical management of navigation, the correct delivery of pages, the maintenance of the user session, and the functioning of interactive features.<\/p>\n<p><strong>Legal basis:<\/strong> Article 6(1)(e) GDPR &ndash; performance of a task carried out in the public interest connected to the institutional mission of the CNR (communication and scientific dissemination).<\/p>\n<h3>3.2 Collection of data for specific services requested by the user<\/h3>\n<p>This includes the management of registrations for events, seminars and newsletters, the receipt of information requests through contact forms, and access to restricted areas.<\/p>\n<p><strong>Legal basis:<\/strong> Article 6(1)(a) GDPR &ndash; <strong>consent<\/strong> of the data subject, for newsletters and promotional communications.<\/p>\n<h3>3.3 Aggregate statistical analysis of website use<\/h3>\n<p>This includes the collection of aggregate statistics on navigation, carried out using the <strong>Matomo Analytics<\/strong> tool in a self-hosted configuration in full compliance with applicable privacy legislation (see section 6).<\/p>\n<p><strong>Legal basis:<\/strong> Article 6(1)(e) GDPR &ndash; public interest in improving the digital services provided by the Institution.<\/p>\n<h3>3.4 Administrative transparency obligations<\/h3>\n<p>Where required by law, the website hosts documents and information subject to mandatory publication pursuant to Legislative Decree 33\/2013.<\/p>\n<p><strong>Legal basis:<\/strong> Article 6(1)(c) GDPR &ndash; compliance with legal obligations.<\/p>\n<h2>4. Categories of data processed<\/h2>\n<h3>Navigation data (collected automatically)<\/h3>\n<p>The IT systems and software procedures responsible for the operation of the website acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols:<\/p>\n<ul>\n<li>IP addresses (in anonymised form for statistical purposes)<\/li>\n<li>Browser type and operating system used<\/li>\n<li>Date and time of the request<\/li>\n<li>Pages visited<\/li>\n<\/ul>\n<p>Such data are used solely to obtain aggregate statistical information on the use of the website and to monitor its correct functioning; they are deleted or anonymised immediately after processing, save for any need to investigate offences by the judicial authorities.<\/p>\n<h3>Data provided voluntarily by the user<\/h3>\n<ul>\n<li>Name, surname, email address, and any affiliation, for newsletter or event registration;<\/li>\n<li>Content of messages sent through any contact forms.<\/li>\n<\/ul>\n<h3>Special categories of data<\/h3>\n<p>The website does not envisage the collection of special categories of data (Article 9 GDPR) or data relating to criminal matters (Article 10 GDPR).<\/p>\n<h2>5. Recipients of the data<\/h2>\n<p>The data are processed exclusively by authorised IRBIM personnel (ICT Office, System Administrators). They may be disclosed to:<\/p>\n<ul>\n<li><strong>Technical service providers<\/strong> acting as Processors pursuant to Article 28 GDPR (hosting, CMS maintenance, etc.)<\/li>\n<li><strong>Judicial or administrative authorities<\/strong>, on request in the cases provided for by law<\/li>\n<\/ul>\n<p>The data collected through the website are not disseminated or transferred to third parties for commercial purposes.<\/p>\n<h2>6. Cookies and tracking tools<\/h2>\n<p>Cookies are small pieces of data that the website saves on the user&#8217;s device during navigation, for various technical or statistical purposes.<\/p>\n<h3>6.1 Technical cookies<\/h3>\n<p>The website uses <strong>technical cookies<\/strong> strictly necessary for its operation (maintaining the user session, managing cookie consent, correctly displaying pages). Prior consent from the user is <strong>not required<\/strong> for the installation of these cookies, pursuant to Article 122 of the Privacy Code and the Italian Data Protection Authority&#8217;s Guidelines of 10 June 2021.<\/p>\n<h3>6.2 Analytics cookies &ndash; Matomo Analytics<\/h3>\n<p>The website uses <strong>Matomo Analytics<\/strong> to collect aggregate statistics on the use of the website. Matomo is configured in <strong>self-hosted<\/strong> mode (data are not transmitted to third parties) and with <strong>anonymisation of the user&#8217;s IP address<\/strong>. In this configuration, according to the Italian Data Protection Authority&#8217;s Guidelines of 10 June 2021, Matomo&#8217;s analytics cookies are treated as technical cookies and do not require prior consent.<\/p>\n<p><strong>Opt-out:<\/strong> the user may at any time exclude their own visits from statistical tracking by unticking the relevant box available at the bottom of the page.<\/p>\n<p id=\"matomo_opted_out_intro\" style=\"display:none;\">Opt-out complete; your visits to this website will not be recorded by the Web Analytics tool. Note that if you clear your cookies, delete the opt-out cookie, or if you change computers or Web browsers, you will need to perform the opt-out procedure again.<\/p><p id=\"matomo_opted_in_intro\" >You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.<\/p><form>\n        <input type=\"checkbox\" id=\"matomo_optout_checkbox\" checked=\"checked\"\/>\n        <label for=\"matomo_optout_checkbox\"><strong>\n        <span id=\"matomo_opted_in_label\" >You are not opted out. Uncheck this box to opt-out.<\/span>\n\t\t<span id=\"matomo_opted_out_label\" style=\"display:none;\">You are currently opted out. Check this box to opt-in.<\/span>\n        <\/strong><\/label><\/form><noscript><p><strong style=\"color: #ff0000;\">This opt out feature requires JavaScript.<\/strong><\/p><\/noscript><p id=\"matomo_outout_err_cookies\" style=\"display: none;\"><strong>The tracking opt-out feature requires cookies to be enabled.<\/strong><\/p>\n<h3>6.3 Managing cookies through the browser<\/h3>\n<p>The user can block or limit the reception of cookies through their browser settings. Through browser preferences it is also possible to delete cookies installed in the past. Completely disabling technical cookies may make some website features unavailable.<\/p>\n<p>Guides for managing cookies in the main browsers:<\/p>\n<ul>\n<li>Google Chrome: <a style=\"color: inherit;\" href=\"https:\/\/support.google.com\/chrome\/answer\/95647\" target=\"_blank\" rel=\"noopener\">https:\/\/support.google.com\/chrome\/answer\/95647<\/a><\/li>\n<li>Mozilla Firefox: <a style=\"color: inherit;\" href=\"https:\/\/support.mozilla.org\/it\/kb\/protezione-antitracciamento-avanzata-firefox-desktop\" target=\"_blank\" rel=\"noopener\">https:\/\/support.mozilla.org\/it\/kb\/protezione-antitracciamento-avanzata-firefox-desktop<\/a><\/li>\n<li>Safari (Apple): <a style=\"color: inherit;\" href=\"https:\/\/support.apple.com\/it-it\/guide\/safari\/sfri11471\/mac\" target=\"_blank\" rel=\"noopener\">https:\/\/support.apple.com\/it-it\/guide\/safari\/sfri11471\/mac<\/a><\/li>\n<li>Microsoft Edge: <a style=\"color: inherit;\" href=\"https:\/\/support.microsoft.com\/it-it\/microsoft-edge\" target=\"_blank\" rel=\"noopener\">https:\/\/support.microsoft.com\/it-it\/microsoft-edge<\/a><\/li>\n<\/ul>\n<h2>7. Social plug-ins and interaction with social networks<\/h2>\n<p>The website may include plug-ins or sharing buttons for the following social networks:<\/p>\n<ul>\n<li><strong>X (Twitter)<\/strong> &ndash; <a style=\"color: inherit;\" href=\"https:\/\/twitter.com\/privacy\" target=\"_blank\" rel=\"noopener\">https:\/\/twitter.com\/privacy<\/a><\/li>\n<li><strong>Instagram<\/strong> &ndash; <a style=\"color: inherit;\" href=\"https:\/\/www.instagram.com\/legal\/privacy\" target=\"_blank\" rel=\"noopener\">https:\/\/www.instagram.com\/legal\/privacy<\/a><\/li>\n<li><strong>YouTube<\/strong> &ndash; <a style=\"color: inherit;\" href=\"https:\/\/policies.google.com\/privacy\" target=\"_blank\" rel=\"noopener\">https:\/\/policies.google.com\/privacy<\/a><\/li>\n<li><strong>LinkedIn<\/strong> &ndash; <a style=\"color: inherit;\" href=\"https:\/\/www.linkedin.com\/legal\/privacy-policy\" target=\"_blank\" rel=\"noopener\">https:\/\/www.linkedin.com\/legal\/privacy-policy<\/a><\/li>\n<li><strong>Facebook<\/strong> &ndash; <a style=\"color: inherit;\" href=\"https:\/\/www.facebook.com\/privacy\/policy\" target=\"_blank\" rel=\"noopener\">https:\/\/www.facebook.com\/privacy\/policy<\/a><\/li>\n<\/ul>\n<p>Whenever the user interacts with the plug-ins, certain personal information may be acquired directly by the operators of the social network platforms. For more information on how the collected data are processed, users are invited to read the privacy notices provided by the operators of these services, at the links indicated above.<\/p>\n<p>Please note that these platforms are based in the United States; for the transfer of data to non-EU countries, see section 9.<\/p>\n<h2>8. Joint controllership with Meta for the Facebook Page and Instagram<\/h2>\n<p>With regard to IRBIM&#8217;s Facebook Page and Instagram profile, the Page administrator is a <strong>joint controller of the statistical data processing<\/strong> together with <strong>Meta Platforms Ireland Limited<\/strong> (hereinafter &#8220;Meta&#8221;), pursuant to Article 26 GDPR and on the basis of the standard joint controllership agreement defined by Meta for &#8220;Page Insights&#8221;.<\/p>\n<p>The respective responsibilities of Meta and of the Page administrator (IRBIM) are set out in the <strong>Page Insights Controller Addendum<\/strong>, available at the link: <a style=\"color: inherit;\" href=\"https:\/\/www.facebook.com\/legal\/terms\/page_controller_addendum\" target=\"_blank\" rel=\"noopener\">https:\/\/www.facebook.com\/legal\/terms\/page_controller_addendum<\/a><\/p>\n<p>For information on the privacy legislation applied by Meta:<\/p>\n<ul>\n<li>Meta Data Policy: <a style=\"color: inherit;\" href=\"https:\/\/www.facebook.com\/privacy\/policy\" target=\"_blank\" rel=\"noopener\">https:\/\/www.facebook.com\/privacy\/policy<\/a><\/li>\n<li>Meta Cookie Policy: <a style=\"color: inherit;\" href=\"https:\/\/www.facebook.com\/policies\/cookies\/\" target=\"_blank\" rel=\"noopener\">https:\/\/www.facebook.com\/policies\/cookies\/<\/a><\/li>\n<\/ul>\n<p>To exercise their rights in relation to the data processed on the Facebook Page or Instagram profile, the user may contact either IRBIM (Privacy Contact) or Meta according to the instructions provided by the platform.<\/p>\n<h2>9. Transfer of data to third countries<\/h2>\n<p>Data collected directly by the www.irbim.cnr.it website are not transferred outside the European Union.<\/p>\n<p>Through the use of social plug-ins and interaction with the Facebook Page, the Instagram profile and other social channels used by IRBIM (Meta, X, Google\/YouTube, LinkedIn), the collected data may also be processed in non-EU countries, in particular in the United States. In such cases, the transfer takes place on the basis of the safeguards provided for by Articles 44-49 GDPR, in particular:<\/p>\n<ul>\n<li>EU-US adequacy decision (Data Privacy Framework) for certified entities<\/li>\n<li>Standard Contractual Clauses (SCCs) for other cases<\/li>\n<\/ul>\n<p>The specific transfer conditions are defined in the privacy notices of the respective operators.<\/p>\n<h2>10. Retention period<\/h2>\n<table>\n<thead>\n<tr>\n<th>Category of data<\/th>\n<th>Retention period<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Navigation data (anonymised web logs)<\/td>\n<td>Maximum 30 days, save for legal obligations or the need to investigate unlawful acts<\/td>\n<\/tr>\n<tr>\n<td>Matomo statistics (aggregate, anonymised IP)<\/td>\n<td>24 months<\/td>\n<\/tr>\n<tr>\n<td>Newsletter subscription data<\/td>\n<td>Until consent is withdrawn or the user unsubscribes<\/td>\n<\/tr>\n<tr>\n<td>Data collected through contact forms<\/td>\n<td>1 year from receipt, unless an ongoing relationship justifies its retention<\/td>\n<\/tr>\n<tr>\n<td>Data collected for event registration<\/td>\n<td>1 year from the event, unless otherwise indicated at the time of registration<\/td>\n<\/tr>\n<tr>\n<td>Cookie consent<\/td>\n<td>Up to a maximum of 12 months, after which it is requested again<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>11. Security measures<\/h2>\n<p>The website adopts specific security measures to prevent data loss, unlawful or improper use, and unauthorised access. The measures adopted include:<\/p>\n<ul>\n<li>Transmission of data via the encrypted HTTPS protocol<\/li>\n<li>Regular updating of the CMS and its components<\/li>\n<li>Access control through personal credentials<\/li>\n<li>Security monitoring and log management pursuant to the Italian Data Protection Authority&#8217;s Provision of 27\/11\/2008 on System Administrators<\/li>\n<\/ul>\n<h2>12. Rights of the data subject<\/h2>\n<p>The data subject has the right to exercise the following rights at any time vis-\u00e0-vis the Controller:<\/p>\n<ul>\n<li><strong>Access<\/strong> (Article 15 GDPR): obtain confirmation of the processing and receive a copy of the data<\/li>\n<li><strong>Rectification<\/strong> (Article 16 GDPR): obtain the correction of inaccurate data or the completion of incomplete data<\/li>\n<li><strong>Erasure<\/strong> (Article 17 GDPR): obtain the erasure of data in the cases provided for<\/li>\n<li><strong>Restriction<\/strong> (Article 18 GDPR): obtain the restriction of processing in the cases provided for<\/li>\n<li><strong>Portability<\/strong> (Article 20 GDPR): receive the data provided in a structured format, only where the processing is based on consent or on a contract and is carried out by automated means<\/li>\n<li><strong>Objection<\/strong> (Article 21 GDPR): object to the processing on grounds relating to their particular situation<\/li>\n<\/ul>\n<p>Requests may be sent to:<\/p>\n<ul>\n<li><strong>IRBIM Privacy Contact<\/strong> (local point of contact): <a style=\"color: inherit;\" href=\"mailto:rdp.irbim@irbim.cnr.it\">rdp.irbim@irbim.cnr.it<\/a> &ndash; or by post: Largo Fiera della Pesca 2, 60125 Ancona, Italy<\/li>\n<li><strong>CNR Data Protection Officer<\/strong> (DPO): <a style=\"color: inherit;\" href=\"mailto:rpd@cnr.it\">rpd@cnr.it<\/a> &ndash; Certified email (PEC): <a style=\"color: inherit;\" href=\"mailto:rpd@pec.cnr.it\">rpd@pec.cnr.it<\/a><\/li>\n<\/ul>\n<p>The Controller responds within 30 days of receipt of the request, extendable by a further 60 days in cases of complexity.<\/p>\n<h2>13. Right to lodge a complaint<\/h2>\n<p>The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali):<\/p>\n<p><strong>Garante per la protezione dei dati personali<\/strong><br \/>\nPiazza Venezia 11, 00187 Rome, Italy<br \/>\n<a style=\"color: inherit;\" href=\"https:\/\/www.garanteprivacy.it\" target=\"_blank\" rel=\"noopener\">www.garanteprivacy.it<\/a><br \/>\nEmail: <a style=\"color: inherit;\" href=\"mailto:garante@gpdp.it\">garante@gpdp.it<\/a> &ndash; Certified email (PEC): <a style=\"color: inherit;\" href=\"mailto:protocollo@pec.gpdp.it\">protocollo@pec.gpdp.it<\/a><\/p>\n<h2>14. Changes to this notice<\/h2>\n<p>The Controller reserves the right to make changes to this notice at any time, notifying users by publishing them on the website. The date of the last update is indicated at the top of the document.<\/p>\n<p><em>Last updated: 30\/07\/2026<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Personal Data Processing Notice provided pursuant to Articles 13 and 14 of Regulation (EU) 2016\/679 (GDPR) Reference: web complement of processing activity T-06 (Institutional communication, events and scientific dissemination). Last updated: 30\/07\/2026. Maintenance officer: IRBIM Privacy Contact + ICT Office. Introduction This Privacy Policy describes how the institutional website www.irbim.cnr.it of the Institute for Biological [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"page-template\/privacy.php","meta":{"_acf_changed":false,"footnotes":"","_members_access_role":[],"_members_access_error":""},"categorie_partner":[],"class_list":["post-10197","page","type-page","status-publish","hentry"],"acf":[],"amp_enabled":false,"_links":{"self":[{"href":"https:\/\/www.irbim.cnr.it\/en\/wp-json\/wp\/v2\/pages\/10197","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.irbim.cnr.it\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.irbim.cnr.it\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.irbim.cnr.it\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.irbim.cnr.it\/en\/wp-json\/wp\/v2\/comments?post=10197"}],"version-history":[{"count":10,"href":"https:\/\/www.irbim.cnr.it\/en\/wp-json\/wp\/v2\/pages\/10197\/revisions"}],"predecessor-version":[{"id":16771,"href":"https:\/\/www.irbim.cnr.it\/en\/wp-json\/wp\/v2\/pages\/10197\/revisions\/16771"}],"wp:attachment":[{"href":"https:\/\/www.irbim.cnr.it\/en\/wp-json\/wp\/v2\/media?parent=10197"}],"wp:term":[{"taxonomy":"categorie_partner","embeddable":true,"href":"https:\/\/www.irbim.cnr.it\/en\/wp-json\/wp\/v2\/categorie_partner?post=10197"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}