PRIVACY NOTICE

Hands-on School in Micro- and Nanofabrication

Information pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)

  1. Data Controller

The Data Controller is:

Istituto Nazionale di Ricerca Metrologica (INRiM)

Strada delle Cacce 91

10135 Turin – Italy

Tax Code and VAT No.: IT09261710017

Website: https://www.inrim.it

E-mail: inrim@inrim.it

PEC: inrim@pec.inrim.it

 

  1. Data Protection Officer (DPO)

INRiM has appointed a Data Protection Officer (DPO), who may be contacted for any matter relating to the processing of personal data or the exercise of the rights provided for by Regulation (EU) 2016/679.

E-mail: dpo@inrim.it

 

  1. Purpose of the processing

Personal data provided through the registration platform will be processed exclusively for purposes related to the organisation and management of the Hands-on School in Micro- and Nanofabrication, including:

  • management of registration requests;
  • verification of eligibility and participation requirements;
  • selection of participants, where applicable;
  • assignment to laboratory activities;
  • organisation and management of the School;
  • communications relating to the event;
  • issuance of attendance certificates;
  • management of payments, cancellations and refunds;
  • fulfilment of legal, administrative, accounting and tax obligations.

 

  1. Categories of personal data

The following categories of personal data may be processed:

  • identification data;
  • contact details;
  • affiliation and professional information;
  • invoicing data;
  • laboratory track preferences;
  • dietary requirements or accessibility requirements voluntarily provided for organisational purposes.

Where strictly necessary for organisational or safety reasons, special categories of personal data may be processed in accordance with the applicable legislation.

 

  1. Legal basis

Personal data are processed on the basis of:

  • Article 6(1)(b) GDPR, for the performance of a contract or the implementation of precontractual measures requested by the data subject;
  • Article 6(1)(c) GDPR, for compliance with legal obligations to which the Data Controller is subject;
  • Article 6(1)(e) GDPR, for the performance of a task carried out in the public interest.

Where applicable, special categories of personal data will be processed pursuant to Article 9 GDPR.

 

  1. Recipients of personal data

Personal data may be accessed by authorised INRiM personnel involved in organising and managing the School.

Where necessary, personal data may also be processed by external service providers acting on behalf of INRiM and appointed, where required, in accordance with Article 28 of the GDPR.

Personal data will not be disclosed to the public.

 

  1. Data retention

Personal data will be retained only for the period necessary to achieve the purposes described above and thereafter for the periods required by the applicable legislation governing administrative, accounting and tax obligations.

 

  1. International data transfers

Personal data will normally be processed within the European Union.

Should transfers outside the European Economic Area become necessary, they will take place in accordance with Chapter V of Regulation (EU) 2016/679.

 

  1. Rights of the data subject

Data subjects may exercise the rights provided for by Articles 15 to 22 of Regulation (EU) 2016/679, including the right to:

  • obtain confirmation that personal data are being processed;
  • access their personal data;
  • request rectification of inaccurate or incomplete personal data;
  • request erasure where applicable;
  • request restriction of processing;
  • object to processing, where permitted by law;
  • receive personal data in a structured, commonly used and machine-readable format, where applicable;
  • lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Requests may be submitted to the Data Controller or to the Data Protection Officer using the contact details provided above.

 

  1. Mandatory provision of personal data

The provision of personal data marked as mandatory is necessary for the management of the registration procedure and participation in the School.

Failure to provide mandatory personal data will make it impossible to process the registration request.

 

  1. Automated decision-making

No automated decision-making, including profiling pursuant to Article 22 of Regulation (EU) 2016/679, is carried out.

 

  1. Updates to this Privacy Notice

This Privacy Notice may be updated from time to time to reflect changes in the applicable legislation or in the organisation of the School. The most recent version will always be available on the School website.