Privacy notice

Pursuant to art. 13 of Regulation (EU) no. 2016/679 of the European Parliament and of the Council of 27th April 2016 concerning the protection of individuals with regard to the processing of Personal Data, as well as the free circulation of such Data (the "Regulation" or the "GDPR") and legislative decree 30 June 2003, n. 196 "Code regarding the protection of personal data" ("Code") (Code and Regulations also jointly defined as "Legislation") we inform the participant that their Personal Data will be processed in compliance with the current Legislation and what is specified below.

1. Types of processed Data
Data provided directly by the participant understood as Data provided by the participant, as part of the voluntary participation in the IN-HABIT Project during the research activities could consist of:
1. Common Personal Data: name, surname, email, personal image, any audio/video recordings
2. Particular categories of Personal Data (relating to state of health, racial and ethnic origins, religious or political beliefs, sexual orientation and gender identity).
the participant is informed that the provision of the aforementioned Data is optional, but in case of failure to provide them, the participant is unable to participate in the IN-HABIT Project.

2. Purpose of Treatment, Legal basis and retention time
A. Purpose of the Treatment: the Personal Data are processed as to enable the participant to participate in IN-HABIT Project..
Legal Basis: the Treatments put in place for these purposes are carried out on the basis of the express consent of the participant(which can be revoked at any time).
Retention time: 2 year from the conclusion of the IN-HABIT Project, unless the participant revokes the consent.

B. Purpose of the Treatment:the Personal Data are processed as part of the participation of the participant in the IN-HABIT Project.
Legal basis: the treatments put in place for these purposes are carried out on the basis of the express consent of the participant(which can be revoked at any time).
Retention time: 2 year from the conclusion of the IN-HABIT Project, unless the participant revokes the consent.

C. Purpose of the Treatment: the Personal Data, if not anonymised, could be processed for the purpose of publication reports and / or conclusive documents of the IN-HABIT Project.
Legal basis: the Treatments put in place for these purposes are carried out on the basis of the express consent of the participant which will eventually be requested at the time of publication.
Retention time: for the entire period of publication and / or dissemination of the documents.

3. Method of Treatment and categories of Recipients
Unless otherwise expressly stated in this Privacy Notice, the participant is informed that the processing of his / her Personal Data is carried out using manual systems and / or IT, telematic or automated systems, in compliance with the principles of relevance, lawfulness, correctness and purposes provided by the Legislation.
The Data Controller processes the Personal Data of the participant by adopting the appropriate Security Measures aimed at minimizing the risks of unauthorized access, dissemination, loss and destruction of the aforementioned Data, pursuant to the Legislation.
the participant is also informed that the processing of Personal Data for the accomplishment of the aforementioned purposes may be carried out by the Data Controller directly or with the collaboration of other subjects, as Managers, Designated or Authorized (for example employees and / or collaborators of the Data Controller). By way of example, the Data Controller may use specific subjects on site (companies, organizations, associations, or individuals) to carry out the Interviews and to collect the Data.
In particular, the Personal Data may be disclosed to the following categories of Recipients as Autonomous Owners:
Partner of the In-HABIT Project, where the participant has issued appropriate consent pursuant to art. 2 lett. B) above. In case of non-consent to the communication of the Data to the Partners of the In-HABIT Project, the Data will be transferred, after anonymization.
The complete list of Managers may however be consulted at any time, by request to the e-mail address indicated in the following art. 6.1.

4. Data Transfer
the participant is informed that the Personal Data processed by the Data Controller may be transferred to other countries within the European Union.
the participant is informed that the Personal Data processed by the Data Controller may be transferred to other countries outside the European Union, for which there is an adequacy decision by the Commission.

5. Rights of the participant
the participant may exercise at any time, by communication to be sent to the addresses referred to in the following art. 6.1, the rights provided for by the Regulations pursuant to articles 15-22. In particular:
- the participant has the right to ask the Data Controller for access to Personal Data, pursuant to and within the limits of art. 15 of the Regulation.
- the participant has the right to ask the Data Controller to correct any inaccurate Personal Data, pursuant to and within the limits of art. 16 of the Regulation.
- the participant has the right to ask the Data Controller to delete the Personal Data, pursuant to and within the limits of art. 17 of the Regulation.
- the participant has the right to ask the Data Controller to limit the Processing of Personal Data, pursuant to and within the limits of art. 18 of the Regulation.
- the participant has the right to ask the Data Controller to communicate his / her Personal Data in a structured and machine-readable format, pursuant to and within the limits set out in art. 20 of the Regulation.
- the participant has the right to object to the processing by the Data Controller, pursuant to and within the limits of art. 21 of the Regulation.
- the participant has the right to lodge a complaint with a supervisory authority.
- the participant has the right to withdraw consent with reference to those Treatments that are based on this legal basis. Pursuant to art. 7, paragraph 3 and art. 13, paragraph 2 letter. c) of the Regulations, the participant is informed that, in any case, the withdrawal of consent does not affect the lawfulness of the Treatment based on consent before the withdrawal itself.

6. Data Controller
For the purposes of this information, by Data Controller means: ISIMPACT (ISIM), with registered office in VIA ALESSANDRO MANZONI 58, LATINA 04100, ITALY, VAT number and Tax Code. IT03060200593, email info@isimpact.it