Data Processing Notice

Notice on the processing of personal data of users of the website https://www.oa-cagliari.inaf.it/ of the Cagliari Astronomical Observatory.

INTRODUCTION
Pursuant to Article 13 of the European Regulation No. 2016/679 on the protection of personal data (hereinafter “Regulation”), this page describes the methods of processing personal data related to:

• users who browse the website of the Cagliari Astronomical Observatory, accessible online at https://www.oa-cagliari.inaf.it;
• users who request the use of online services, where available, provided through the site https://www.oa-cagliari.inaf.it.

This information does not concern other sites, pages, or online services that can be accessed via hyperlinks possibly published on the site, but refer to resources outside the domain https://www.oa-cagliari.inaf.it.

Data Controller
The Data Controller is the National Institute of Astrophysics, located at Viale del Parco Mellini No. 84, IT-00136, Rome (PEC: inafsedecentrale@pcert.postecert.it, switchboard +39 06.355339).
CAGLIARI ASTRONOMICAL OBSERVATORY, Via della Scienza 5 – 09047 Selargius (CA), PEC: inafoacagliari@pcert.postecert.it

Data Protection Officer
The Data Protection Officer (DPO) of INAF can be contacted at the following addresses:
National Institute of Astrophysics, Viale del Parco Mellini No. 84, IT-00136, Rome.
Email: rpd@inaf.it
PEC: rpd-inaf@legalmail.it.

Purpose and Legal Basis of Processing
The Controller processes personal data in relation to the services offered through its portal, exclusively for purposes that fall within the institutional tasks of the Observatory and of public interest or for compliance with legal or regulatory obligations.
Within the scope of these purposes, the processing also concerns personal data necessary to enable the user who requests it to use online services, where available, provided through the site https://www.oa-cagliari.inaf.it.
The possible refusal to provide personal data by the data subject makes it impossible for them to use the aforementioned services for which identified registration is required.

Type of Data Processed and Purpose of Processing
Browsing Data
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to the user’s operating system and computer environment.
These data, necessary for the use of web services, are not collected to be associated with identified subjects, but are processed in an anonymous and aggregated form for the purpose of:

• obtaining statistical information on the use of services (most visited pages, number of visitors by time slot or daily, geographical areas of origin, etc.);
• checking the correct functioning of the services offered.

However, in cases provided by law, they may allow the identification of users through processing and associations of data held by third parties, where it is necessary to ascertain the responsibility of any computer crimes against the site.

Data Voluntarily Provided by the User
The optional, explicit, and voluntary sending of messages to the Observatory’s contact addresses implies the acquisition of the sender’s contact data, necessary to respond, as well as all personal data included in the communications.
In relation to the services provided by the Observatory and also available online through its site https://www.oa-cagliari.inaf.it, the following personal data are collected:

• first and last name
• email address

Cookies and Other Tracking Systems
This website uses only technical cookies. In particular, the site uses the Google Analytics service.
No sensitive data is exchanged via cookies.
Through the cookies created by https://www.oa-cagliari.inaf.it and the services available through it, no personal data is stored that allows tracing and/or directly knowing the user’s identity and that represents a risk to privacy or the integrity of the computer systems used by the user to access the Internet communication network or the site.
The user can disable the use of cookies from their browser at any time; however, this choice may cause navigation difficulties on the site.
To learn more about what data is stored and how, visit the page http://www.oa-cagliari.inaf.it/informativa-estesa-cookies/

Methods of Data Processing and Storage
In relation to the described purposes, the data will be processed using paper, computer, and telematic tools by the Controller, the responsible party, and/or the persons in charge of processing in compliance with the aforementioned regulations and in any case using tools suitable to guarantee their security and confidentiality.
The personal data provided may be processed exclusively for purposes related to achieving the purposes for which they are requested. In compliance with the principles of lawfulness, purpose limitation, and data minimization, pursuant to Article 5 of the EU Regulation 2016/679, with the free and explicit consent of the user expressed at the time of registration, the personal data will be stored for the period necessary to achieve the purposes for which they are collected and processed.

Recipients or Categories of Recipients of Data
The data provided may be communicated to recipients or other subjects appointed as Responsible pursuant to Article 28 of the EU Regulation 2016/679 and/or to individuals acting under the authority of the Controller and the Responsible, in order to fulfill contracts, services, or related purposes.

Data Transfer Abroad
The data is not transferred to third countries outside the European Union.

Rights of Data Subjects
Data subjects have the right to request from the Astronomical Observatory, in the cases provided by EU regulation no. 2016/679:

• access to personal data (Art.15)
• rectification (Art. 16)
• erasure (Art. 17)
• restriction of processing concerning them (Art. 18)
• data portability (Art. 20)
• objection to processing (Art. 21)

The specific request to the Institute is submitted by contacting the Data Protection Officer at the following addresses:

• National Institute of Astrophysics, Viale del Parco Mellini No. 84, IT-00136, Rome.
• Email: rpd@inaf.it
• PEC: rpd-inaf@legalmail.it.

Right to Lodge a Complaint
Data subjects who believe that the processing of personal data relating to them, carried out through this site, is in violation of the provisions of the Regulation, have the right to lodge a complaint with the Data Protection Authority, as provided by Article 77 of the Regulation itself, or to take appropriate legal action (Article 79 of the Regulation).