Privacy and Legal Notes

Privacy Information

for the processing of personal data while browsing the institutional website

This page describes the website management methods in relation to the processing of personal data of users who consult it.

This document is provided pursuant to art. 13 of Legislative Decree no. 196/2003 – Personal Data Protection Code to those who interact with the web services of the National Blood Centre accessible electronically from the address: https://www.centronazionalesangue.it

The information is provided only for www.centronazionalesangue.it and not for other websites that may be consulted by the user via links.

The information is also inspired by Recommendation no. 2/2001 that the European authorities for the protection of personal data, gathered in the Group established by art. 29 of directive no. 95/46/CE, adopted on 17 May 2001 to identify some minimum requirements for the collection of personal data online, and, in particular, the methods, times and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purposes of the connection.

THE “OWNER” OF THE TREATMENT

Following consultation of this site, data relating to identified or identifiable persons may be processed.

The “owner” of their treatment is the Director of the National Blood Centre, Dr. Vincenzo De Angelis.

DATA PROTECTION OFFICER

he Data Protection Officer (DPO) is Dr. Carlo Villanacci who can be reached at the following email address: privacy.cns@iss.it or PEC: cns@pec-iss.it

PLACE OF DATA PROCESSING

The processing operations connected to the web services of this site take place at the aforementioned office and are handled only by technical personnel of the Office in charge of processing, or by any persons in charge of occasional maintenance operations.

No data deriving from the web service is communicated or disseminated.

The personal data provided by users who forward requests for the sending of informative material (newsletters, documents, answers to questions, etc.) are used for the sole purpose of carrying out the service or performance requested and are communicated to third parties only if this is necessary for this purpose.

TYPES OF DATA PROCESSED

Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this eventuality, at present the data on web contacts do not persist for more than seven days.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.

Specific summary information will be progressively reported or displayed on the site pages set up for particular services on request.

OPTIONAL PROVISION OF DATA

Apart from what is specified for navigation data, the user is free to provide personal data reported in the request forms to the Guarantor or otherwise indicated in contacts with the Office to request the sending of informative material or other communications.

Failure to provide them may make it impossible to obtain what has been requested.

For the sake of completeness, it should be noted that in some cases (not the subject of the ordinary management of this site) the Authority may request news and information pursuant to art. 157 of Legislative Decree no. 196/2003, for the purposes of controlling the processing of personal data. In these cases, the response is mandatory under penalty of administrative sanction.

METHODS OF TREATMENT

Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected.

Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

RIGHTS OF INTERESTED PARTIES

The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or otherwise of the data and to know their content and origin, verify their accuracy or request their integration or updating, or rectification (art. 7 of Legislative Decree no. 196/2003).

Pursuant to the same article, you have the right to request the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, their processing.

Requests should be addressed to the legal representative.

This document, published at the address constitutes the “Privacy Policy” of this site which will be subject to updates (the various versions remain available for consultation at the same address).

EXPORT AND DELETION

To export your personal data (takeout) or request its deletion you can send a request to the email address segreteriagenerale.cns@iss.it from the email address with which you requested information.

Your personal data will be exported within 30 days or, if the export is particularly complex, within three months.

The cancellation will be carried out within the expected technical times and in compliance with the retention period specified in the following point.

In the event of exercising the right to be forgotten by requesting the express cancellation of personal data processed by the owner, we remind you that such data will be stored, in a protected form and with limited access, solely for the purposes of ascertaining and repressing crimes, for a period not exceeding 12 months from the date of the request and will subsequently be safely deleted or irreversibly anonymized.