Dear Sir/Madam,
in accordance with the provisions of Regulation (EU) 2016/679 (hereinafter, the “GDPR”), the relevant Italian harmonisation legislation, as well as the Guidelines on cookies and other tracking tools dated 10 June 2021 adopted by the Italian Data Protection Authority, the Istituto Romagnolo per lo Studio dei Tumori (I.R.S.T.) “Dino Amadori” S.r.l., with registered office at Via Piero Maroncelli 40, 47014 Meldola (FC), represented by its legal representative pro tempore, hereby informs you as follows.
1. CONTACT DETAILS OF THE DATA CONTROLLER
The Data Controller for the processing of personal data is Istituto Romagnolo per lo Studio dei Tumori (I.R.S.T.) “Dino Amadori” S.r.l., with registered office at Via Piero Maroncelli 40, 47014 Meldola (FC), and may be contacted at the following email address:
direzione.generale@irst.emr.it
2. CONTACT DETAILS OF THE DATA PROTECTION OFFICER (“DPO”)
The Data Controller has appointed a Data Protection Officer (“DPO”), as required by the GDPR, who may be contacted at the following address:
for all matters relating to the processing of personal data and the exercise of rights arising from the Regulation (Article 38(4) of the Regulation).
3. WHAT ARE COOKIES?
Cookies are small text files sent by the website to the user’s device (usually to the browser), where they are stored and then transmitted back to the website upon the user’s subsequent visit.
A cookie cannot retrieve any other data from the user’s hard drive, transmit computer viruses, or acquire email addresses.
Each cookie is unique to the user’s web browser. Some cookie functions may also be performed through other technologies.
In this document, the term “cookie” refers both to cookies themselves and to all similar technologies.
Cookies may be used to record information relating to your preferences, such as the pages you visit, files downloaded from our website, or other similar actions performed while browsing our website.
4. TYPES OF COOKIES
There are different types of cookies.
Technical Cookies
Technical cookies are those used solely for the purpose of “carrying out the transmission of a communication over an electronic communications network, or insofar as this is strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide such service”.
They are not used for any additional purposes and are normally installed directly by the website owner or operator.
They may be divided into:
- navigation or session cookies, which ensure normal browsing and use of the website; these are necessary for the proper functioning of the website;
- analytics cookies, which may be treated as technical cookies where they are used directly by the website operator to collect aggregated information on the number of users and how they visit the website, in order to improve website performance;
- functionality cookies, which allow users to browse the website according to a set of selected criteria, such as language preferences, in order to improve the service provided.
Prior user consent is not required for the installation of these cookies.
Profiling Cookies
Profiling cookies are designed to create user profiles and are used to send advertising messages in line with the preferences expressed by users while browsing the internet.
The user’s consent is required for the use of profiling cookies.
According to Decision No. 229 of 8 May 2014, users must be able to give or refuse their consent to the installation of profiling cookies where such cookies are used.
In the case of third-party cookies, the website does not have direct control over individual cookies and cannot manage them directly, as it can neither install nor delete them directly.
5. RETENTION PERIOD
Cookies have a duration determined by the expiry date, or by a specific action such as closing the browser, set at the time they are installed.
Cookies may be:
- temporary or session cookies: these are used to store temporary information, make it possible to link actions performed during a specific session, and are removed from the computer when the browser is closed;
- persistent cookies: these are used to store information, such as a login name and password, so that users do not need to enter such information again every time they visit a specific website. These cookies remain stored on the computer even after the browser has been closed.
Session cookies are not retained once the connection to this website has ended.
The IT systems used for this website use temporary analytics cookies.
6. COOKIE MANAGEMENT
You may disable cookies used on websites by downloading specific software, such as Ghostery (https://www.ghostery.com), for your browser and disabling individual cookies.
Alternatively, you may activate the browser’s “private browsing” or “incognito browsing” mode. This feature allows you to browse without retaining browsing data in your browser.
This function only prevents browsing data from being stored in the browser.
Alternatively, you may disable or delete cookies through your browser’s settings or configuration panel.
7. RIGHTS OF THE DATA SUBJECT
You have the right to access your personal data at any time pursuant to Articles 15–22 of the GDPR.
In particular, you may request:
- rectification of your personal data;
- erasure, where applicable;
- restriction of the processing of your personal data in the cases provided for by Article 18 of the GDPR;
- withdrawal of consent previously given pursuant to Article 7 of the GDPR;
- data portability in the cases provided for by Article 20 of the GDPR;
- the right to lodge a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR, namely the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
You may also object to the processing of your personal data pursuant to Article 21 of the GDPR, specifying the reasons justifying your objection.
The Data Controller reserves the right to assess your request, which may not be accepted where there are compelling legitimate grounds for the processing that override your interests, rights and freedoms.
Requests must be submitted in writing to the Data Controller or to the DPO using the contact details indicated above.