Informed Consent

in particular, in this specific case, the data will be collected only for the initiatives connected to “DECIDO - eviDEnce and Cloud for more InformeD and effective pOlicies” project and will be stored in the cloud service of http://www.register.it. Data processing can only take place after obtaining consent. 3. Methods of treatment The treatment will be carried out in an automated and manual form with the adoption of adequate technical and organizational measures to guarantee a level of security adequate to the risk by the specifically appointed persons in accordance with the provisions by articles 29 and 32 of GDPR 2016/679. Personal data retention period Personal data will be kept for a period of 5 years starting from the granting of your last consent for the purpose indicated in point 2. 4. Communication and dissemination area Collected data will never be disseminated or communicated to other subjects. Transfer of personal data Your data will not be transferred to third countries outside the European Union, eventually only for research purpose, data could be moved to other member states of the European Union belonging to the DECIDO project Consortium. 5. Rights of the interested party At any time, you may exercise, pursuant to articles 15 to 22 of GDPR 2016/679, the right to: - obtain confirmation of existence or not of personal data concerning you, even if not yet registered, as well as their communication in an intelligible form; - obtain access to your personal data and information related to: purpose of the processing; categories of personal data concerned; recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients of third countries or international organisations; retention period, where possible, or criteria used to determine it; - obtain the correction of inaccurate personal data as well as the integration of incomplete personal data; - obtain the deletion of personal data if one of the following reasons exists: personal data are no longer necessary regarding the purposes for which they were collected or otherwise processed; the interested party revokes the consent on which the processing is based in accordance with Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if there is no other legal basis for the processing; the interested party opposes the processing pursuant to Article 21, paragraph 1, and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21, paragraph 2; the personal data have been unlawfully processed; personal data must be deleted to fulfill a legal obligation under European Union law or the law of the Member State to which the data controller is subject; personal data have been collected in relation to the offer of information society services referred in Article 8, paragraph 1. - obtain the limitation of the processing when one of the following hypotheses occurs: the interested party disputes the accuracy of personal data, about the necessary period for data controller to verify the accuracy of such personal data; processing is unlawful and the interested party opposes the cancellation of personal data and asks instead that the use of them can be limited; although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court; the interested party opposed the processing pursuant to article 21, paragraph 1, pending verification of the possible prevalence of legitimate data controller’s reasons compared to those of the interested party. - obtain data portability, i.e. to receive in a structured format, commonly used and readable by an automatic device, personal data concerning him/her with the right to transmit such data without impediments to another data controller if the processing is based on consent pursuant to article 6, paragraph 1, letter a), or of art. 9, paragraph 2, letter a), or on a contract pursuant to Article 6, paragraph 1, letter b) and the processing is carried out by automated means. - oppose the processing at any time, even in the case of processing for marketing purposes; - oppose an automated decision-making process related to natural persons, including profiling; - ask the data controller to access personal data and to correct or delete them or limit their processing or to oppose their processing, in addition to the right to data portability; - withdraw the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal; - lodge a complaint with the supervisory authority. 6. Mode of exercising rights You can exercise your rights at any time with a written request sent: - by registered letter with return receipt to the organisation indicated at the beginning of this informed consent. - by e-mail to the address: dpo@decido-project.eu