PRIVACY POLICY AND COOKIES POLICY
This web page describes how and why the personal data of users (hereinafter, also ‘users’) visiting the website (hereinafter, also the ‘Website’) are processed.

Pursuant to Article 13 of Regulation (EU) 2016/679, the ‘General Data Protection Regulation’ (hereinafter, ‘GDPR’), and Italian data protection laws (Italian Legislative Decree no. 196/2003 and subsequent amendments, in particular those introduced by Italian Legislative Decree no. 101/2018), this privacy policy is provided to users who access the Website via the address https://esaforum.eu and does not refer to other external websites that may be linked thereto.

1. DATA CONTROLLER
Data Controller: ESAF (European Science Advisors Forum).
For the period October 2023 – October 2026, Italy is the coordinating country of ESAF and provides the secretariat. The coordination is the responsibility of the National Research Council of Italy.

E-mail: presidenza@cnr.it

The Data protection officer (DPO) for CNR-Italy can be reached at the following address:

rpd@cnr.it

2. LEGAL BASIS FOR DATA PROCESSING
The personal data indicated on this page are processed for the purpose of performing tasks of public interest or that are in any case linked to exercising public powers.
After visiting this Website, data relating to identified or identifiable persons may be processed. Data freely provided by users on a voluntary basis shall be acquired and processed in accordance with the provisions of the GDPR and shall only be used for institutional purposes.
The Presidency of the National Research Council undertakes to respect and protect your privacy by processing the personal data you provide in compliance with legal provisions aimed at ensuring that data are secure, accurate, up to date and pertinent to the purposes stated. Personal data provided by users who submit requests are only used to reply to the requests in question; such data are only disclosed to third parties if this is strictly necessary and functional for said purpose, in compliance with EU and Italian legislation. Data are processed by specifically authorised staff and only if data processing is necessary for them to perform their assigned tasks.

3. PROCESSING METHODS
Personal data are processed electronically for the amount of time that is strictly necessary to fulfil the purposes for which they have been collected.
Specific security measures are applied in order to prevent any loss, illegal use or misuse of data, as well as any unauthorised access thereto.

4. TYPE OF DATA AND THE PURPOSE OF PROCESSING
All personal data provided through the Website shall be lawfully and correctly processed for the purpose of providing the requested services and to reply to users’ communications and questions; data are always processed for the institutional of the ESAF.

1. Data provided voluntarily
   This Website allows users to send requests and communications using the contact details provided above. Providing these data is mandatory and is required in order to be able to reply to the requests or to recontact the sender to request clarifications on the matter(s) reported.
2. Browsing data
   This category of data includes the IP addresses or computer domain names of the users who access the Website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply provided by the server (successful, error, etc.) and other parameters relative to users’ operating systems and computing environments. Browsing data are not collected for the purpose of identifying users, but for the sole purpose of collecting anonymous statistical data regarding use of the Website and the services offered.

5. COOKIES
Cookies are small text files that websites send to users’ devices after being visited; they are then stored on users’ devices and sent back to the same websites when users next visit them.
This Website uses:

• session cookies, which are not used to collect personal data able to identify users, as they only send data identifying sessions in the form of numbers automatically generated by the server. Session cookies are not permanently stored on users’ devices and are automatically deleted when the browser is closed;
• third-party cookies, to allow for YouTube videos to be viewed.
  The Presidency of the Council of Ministers does not have access to the data that third parties collect and process on an autonomous basis. For further information regarding how and why data collected by social networks are processed, users are kindly invited to read the privacy policies published by the service provider(s) concerned: YouTube https://policies.google.com/privacy?hl=en&gl=en.
• analytics cookies, which collect aggregate data on user numbers and how they browse the Website.
  The Website uses the Web Analytics Italia platform to collect statistical data on visits. Further information is available in the Web Analytics Italia privacy policy.
  The website www.governo.it uses Google Analytics, whose privacy policy is available from the address https://support.google.com/analytics/answer/6004245.
  In order to respect our users’ privacy, the “_anonymizeip” version of this service is used, which hides the IP addresses of users browsing the Website (further information on this feature). Data are only collected for the purpose of processing statistical information on how the Website is used and to check that it is working correctly; browsing data may only be used to identify users if this is necessary to investigate cybercrime.

Technical cookies are not used for profiling activities.

Users may choose whether to allow or disable cookies by altering their browser settings, following the instructions provided by the relative suppliers available from the links below:

• Chrome
• Firefox
• Safari
• Internet Explorer
• Opera

6. RIGHTS OF THE DATA SUBJECT
Pursuant to Article 15 et seq. of the GDPR, Data Subjects (the natural persons to whom the personal data refer) may, at any point in time, exercise their rights and, in particular, the right to access their personal data, to request that their data be rectified or restricted, updated if incomplete or wrong and erased if collected in violation of the law, as well as to object to their processing, unless the Data Controller has legitimate reasons.
To this end, it is possible to send a request to the e-mail address: europa@cnr.it.
It is also possible to lodge a complaint with the Data Protection Authority, by following the procedures and instructions published on the Italian Authority’s website www.garanteprivacy.it.
Exercising these rights is not subject to any constraints in terms of form and is free of charge.
Please be informed that the personal data published on this Website may only be reused under the conditions provided for by current legislation governing the reuse of public data, in accordance with terms that are compatible with the purposes for which said data have been collected and recorded, and in compliance with personal data protection legislation.

7. AMENDMENTS TO THIS PRIVACY POLICY
This privacy policy may be amended in order to comply with legal provisions or regulations.