PRIVACY POLICY

The information that follows is provided pursuant to article 13 of Legislative Decree 196/2003 (Code regarding the protection of personal data and article 13 of EU Regulation no. 2016/679 regarding the protection of personal data of natural persons (GDPR).

This page describes the methods for processing the personal data of users who consult the AgrEcoMed website, accessible electronically at the address agrecomed.crea.gov.it corresponding to the AgrEcoMed home page.

This information is provided pursuant to Legislative Decree 196/2003 (“Code regarding the protection of personal data”) and EU Reg. 2016/679 (“GDPR”) to those who interact with the web services of the CREA institution for the protection of personal data, accessible electronically from the address www.crea.gov.it corresponding to the home page of the CREA institution website. 

The information concerns only the AgrEcoMed website and not other websites that may be consulted by the user via links.

The Data Controller

The data controller is the CREA Council for Agricultural Research and Analysis of the Agricultural Economy – in the person of its pro-tempore Legal Representative – Headquarters in Via della Navicella 2/4 – 00184 ROME

VAT: 08183101008 – CF: 97231970589 

Tel: +39 06 478361 – Fax: +39 06 47836320 – crea@crea.gov.it

Certified Electronic Mail:  crea@pec.crea.gov.it

Legal basis of the treatment

The personal data indicated on this page are processed by CREA exclusively in accordance with the institutional purposes or in any case connected to the exercise of tasks in the public interest including the purposes of scientific research and analysis for scientific purposes.

Type of personal data processed and purpose of the processing

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response,

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. They are stored on CREA’s servers and are deleted one year after acquisition. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.

Information on the use of cookies

The website agrecomed.crea.gov.it uses cookies and similar technologies to guarantee the correct functioning of the procedures and improve the experience of using the online applications.  Read the cookie polices page for detailed information on the use of cookies, how they are used and how to manage them.

Processing methods and data retention period

Personal data are processed with manual and telematic IT tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

Existence of automated decision-making processes, including profiling pursuant to art. 22 of EU Regulation No. 679/2016 (GDPR)

The processing that CREA will carry out on personal data does not envisage any automated decision-making process that could produce legal effects concerning the interested party or that significantly affect the person of the interested party in a similar way, including profiling.

Rights of the interested party

The data subject can exercise the rights provided for by art. 7 of Legislative Decree 196/2003 and by articles from 15 to 22 of EU Regulation no. 679/2016, where applicable (right of access, right of rectification, right of cancellation, right to limitation of treatment, right to data portability, right of opposition.

Art.15 – access: you can ask for confirmation as to whether or not data concerning you is being processed, as well as further clarifications regarding the information referred to in this disclosure;

Art.16 – rectification: you can ask to rectify or integrate the data you have provided us, if inaccurate;

Art.17 – cancellation: you can request that your data be deleted, if they are no longer necessary for our purposes, in the event of withdrawal of consent or your opposition to the processing, in the event of unlawful processing, or there is a legal obligation to cancel or refer to persons under the age of sixteen.

Art.18 – limitation of treatment: you can request that your data be processed only for the purpose of conservation, with the exclusion of other treatments, for the period necessary for the rectification of your data, in case of unlawful treatment for which you oppose the cancellation , if you have to exercise your rights in court and the data stored by us may be useful to you and, finally, in the event of opposition to the processing and a check on the prevalence of our legitimate reasons with respect to yours is underway.

Art.20 – portability: you can ask to receive your data, or to have them transmitted to another holder indicated by you, in a structured format, commonly used and readable by automatic device.

Art.21 – opposition to processing: you can oppose the processing of your data at any time, unless there are legitimate reasons for us to proceed with the processing which prevail over yours, for example for the exercise or our defense in court.

Art.22 – opposition to the automated decision-making process: you can oppose the automated decision-making process, if the Data Controller carries out this type of treatment.

The aforementioned rights are exercised by submitting a specific request to the Data Controller, using the latter’s contact details.

Reports

Any reports on discrepancies and critical issues can be communicated to the Head of Personal Data Protection (DPO – Data Protection Officer) of CREA, Valentina Longo, at the following email addresses: responsabiliprotezionedati@crea.gov.it

Complaint to the supervisory authority

If the interested party recognizes a violation of the relevant regulations on the protection of personal data, he can lodge a complaint with the Guarantor Authority for the protection of personal data, pursuant to art. 77 of EU Regulation 679/1996) for the consequent checks and possible adoption of consequential measures.

The complaint can be signed directly by the interested party or, on his behalf, by a lawyer, attorney, body, organization or non-profit association. In such cases, it is necessary to confer a power of attorney to be deposited with the Guarantor together with all the documentation useful for the purposes of evaluating the complaint presented. 

The complainant may send the deed using the method deemed most appropriate, delivering it by hand to the offices of the Guarantor (at the address indicated below) or by forwarding:

a) registered letter with return receipt addressed to the Guarantor for the protection of personal data, Piazza di Monte Citorio, 121 00186 Rome

b) certified e-mail message addressed to protocol@pec.gpdp.it 

In the first application, the complaint and any power of attorney must be signed with an authenticated signature, or with a digital signature, or with a handwritten signature (in the latter case, the complaint must be accompanied by a copy of an identification document of the interested party/ to valid).

Filing a complaint is free.

Scroll to Top