Information on the processing of personal data of users of the LBT Italia website and for the use of its online services.

What is this information?

Pursuant to Article 13 of the EU Regolation 2016/679, the information provided below describes the processing operations on the personal data:
of the users visiting the LBT Italia website of the National Institute for Astrophysics (hereinafter "INAF"), that can be accessed at http://lbt.inaf.it
of those who use the online services, where available, provided through the website http://lbt.inaf.it
The information provided does not concern other online websites, pages or services that can be accessed via hyperlinks on the above websites but relate to resources outside the LBT Italia domain.

Data controller

The data controller is the National Institute for Astrophysics (INAF), located in Viale del Parco Mellini, 84, IT-00136, Rome (Email: direzione.generale@inaf.it, PEC-certified email: inafsedecentrale@pcert.postecert.it, phone - switchboard: +39 06.355339), which is the Italian public agency of reference in astronomical and astrophysical research. The National Institute for Astrophysics was established with Legislative Decree 23 July 1999, no. 296, and subjected to reorganization with Legislative Decree 4 June 2003, no. 138. The National Institute for Astrophysics is subject to supervision by the Ministry of University and Research.

Data Protection Officer

INAF has appointed a Data Protection Officer (DPO) who can contacted at the following addresses:
Istituto Nazionale di Astrofisica - Responsabile della Protezione dei dati personali, Viale del Parco Mellini, 84, IT-00136, Rome;
Email: rpd@inaf.it
PEC-certified mail: rpd-inaf@legalmail.it

Legal basis for the processing

The personal data are processed by the Data Controller in providing services through this website, exclusively for the purposes that fall within the institutional goals of INAF and of public interest or for the formalities required by law or regulation. As part of the aforementioned purposes, the processing also concerns the personal data necessary to enable the users who requests it to use online services, where available, provided through the website http://lbt.inaf.it. Any refusal to provide personal data by the interested party makes it impossible for her/him to use the aforementioned services for which an identified registration is required. Registration for the institutional mailing list must be specifically requested, giving specific consent at the time of registration; consent can be revoked at any time, with consequent deactivation of the service, by accessing the restricted area.

Categories of personal data and purposes of the processing

Browsing data

The information systems and software procedures relied upon to operate this web site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols. This data category includes the IP addresses and/or the domain names of the computers and terminal equipment used by any user, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user's operating system and computer environment. These data are necessary to use web-based services and are also processed in order to
extract statistical information on service usage (most visited pages, visitors by time/date, geographical areas of origin, etc.);
check functioning of the services.
However, due to their nature, they could allow the identification of the users through processing and association of data held by third parties, especially where it is necessary to ascertain responsibility in the event of cyber-attack against the website.

Data communicated by users

Sending messages, on the basis of the user’s free, voluntary, explicit choice, to the INAF’s contact addresses entail the acquisition of the sender’s contact information – which is necessary to provide a reply – as well as of any and all the personal data communicated in that manner. Furthermore, in relation to the services that can also be used online through the website http://lbt.inaf.it, INAF must collect the following personal data:
name and surname;
email address and phone number;
any other personal data
The provision of the above listed data is necessary to use the services provided through this website.

Cookies and other tracking devices

So-called session (non-persistent) cookies are used exclusively to the extent this is necessary to enable secure, efficient browsing. In particular, the website http://lbt.inaf.it uses the Google Analytics service. No sensitive data is exchanged via cookies. The cookies created by http://lbt.inaf.it do not store personal data that allow to trace and / or know directly the identity of the user and that do not represent a risk to the privacy or integrity of the devices and systems used to access the network or the website. The user can at any time disable the use of cookies from her/his browser; this choice could cause difficulties in navigating the site. More information on the cookie policy of this website is available at the following link: http://lbt.inaf.it/cookies.html.

Data Processing and storage methods

The personal data shall be processed even through automated means by the Data Controller, by the Data processor and/or by persons who, under the direct authority of the controller or processor, are authorised to process personal data, in compliance with the aforementioned legislation. In compliance with the principles of lawfulness, limitation of purposes and minimization of data, pursuant to Article 5 of EU Regulation 2016/679, the personal data shall be processed for no longer than required for the purposes for which they are collected, prior free and explicit consent of the user expressed at the time of registration.

Data recipients

For the purposes above indicated, the Data Controller Data may disclose the personal data to companies, organizations or associations expressly appointed as data processors by the INAF LBT Italia, pursuant to Article 28 of the Regulation. The personal data may also be disclosed to persons who, under the direct authority of the controller or processor, are authorised to process personal data. The personal data collected as above are also processed by staff from the INAF LBT Italia acting on specific instructions concerning purposes and arrangements of such processing.

Transfer of personal data outside the EU

The personal data shall not be transferred outside the EU.

Rights of data subjects

Data subjects have the right to obtain from the INAF, where appropriate, access to their personal data as well as rectification or erasure of such data or the restriction of the processing concerning them, and to object to the processing (pursuant to Articles 15 to 22 of the Regulation). Please contact the INAF’s DPO (Istituto Nazionale di Astrofisica - Responsabile della Protezione dei dati personali, Viale del Parco Mellini, 84, IT-00136, Roma, email: rpd@inaf.it) to lodge all requests to exercise these rights.

Rights to lodge a complaint

If a data subject considers that the processing of personal data relating to him or her as performed via this website infringes the Regulation, he or she has the right to lodge a complaint with the Garante pursuant to Article 77 of the Regulation, or else to bring a judicial proceeding against the INAF pursuant to Article 79 of the Regulation.