Cookie

Information pursuant to Article 13 of the EU General Regulation 679/2016 on the protection of personal data.

The association IppocrateOrg with registered office in Via dei Canova, 15 - 6900 Lugano CH, CF 95100290121 and Fondazione Ippocrate ETS, with registered office in Sottopassaggio Mario Saggin, 2 - Padova (PD), CF 92324160289 (hereinafter, for brevity, also joint data controller), inform that they are joint data controllers pursuant to Articles 4, no. 7 and 24 of EU Regulation 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data (hereinafter, "Regulation") of personal data collected on this website ("Site"). Hereinafter, the terms "Data Subject" or "User," whether in the singular or plural, shall mean collectively natural persons over the age of majority; natural persons of sixteen years of age in their own right; and minors under the age of sixteen years authorized by those exercising parental authority.

Processing of personal data means any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, even if not registered in a database, such as collecting, recording, organizing, structuring storage, processing, selection, blocking, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction.

Identification and contact details of the co-processors

As required by the transparency guidelines WP 260/2017, the identification details of the joint data controllers and all contact information for them are provided in the first instance:

IppocrateOrg Association with headquarters at Via dei Canova,15 - 6900 Lugano CH, CF 95100290121

Ippocrate Ets Foundation, with registered office at Sottopassaggio Mario Saggin, 2 - Padua (PD), CF 92324160289

To quickly contact the co-owners you can write to this address: [email protected]

Definition of "cookie"

Cookies are short text fragments (letters and/or numbers) that allow the web server to store information on the client (the browser, e.g. Edge, Chrome, Firefox, Opera) to be reused during the same visit to the site (session cookies) or later, even days later (persistent cookies). Cookies are stored, based on user preferences, by the individual browser on the specific device being used (computer, tablet, smartphone).

Similar technologies, such as, for example, web beacons, transparent GIFs, and all forms of local storage introduced with HTML5, can be used to collect information about user behavior and use of services.

A cookie cannot retrieve any other data from the user's hard drive or transmit computer viruses or acquire email addresses. Each cookie is unique to the user's web browser. Some of the functions of cookies may be delegated to other technologies. The term 'cookies' is intended to refer to cookies and all similar technologies.

Depending on the characteristics and use of cookies, various types of cookies can be distinguished:

Strictly necessary technical cookies (used on this Site). These are cookies that are essential for the proper functioning of a website. The duration of the cookies is strictly limited to the working session or they can make use of a longer dwell time in order to remember the visitor's choices. Disabling strictly necessary cookies may affect the experience of using and navigating the Web site;
analytics (analytics) and performance cookies. These are cookies used to collect and analyze traffic and usage of a website anonymously. These cookies, while not identifying the user allow, for example, to detect whether the same user returns to log on at different times. They also make it possible to monitor the system and improve its performance and usability. Deactivation of these cookies can be performed without any loss of functionality and will be discussed in detail later;
profiling cookies These are permanent cookies used to identify (anonymously and non-anonymously) user preferences and improve the user's browsing experience.

For more information on these cookies, please visit the appropriate section at garanteprivacy.co.uk/cookies

Technical cookies used on the Site

The technical cookies used on the Site are exclusively for the purpose of carrying out session monitoring and the storage of specific technical information regarding users accessing the servers of the joint data controllers who manage the Site. With this in mind, some operations on the Site could not be accomplished without the use of cookies, which are therefore technically necessary in such cases. Technical cookies may also be used without the consent of the data subject. Below is a list of the technical cookies on the Site:

cookies with data filled in by the user (session identifier), lasting one session or persistent cookies limited to a few hours in some cases;
Authentication cookies, used for the purpose of authenticated services, lasting one session;
User-centered security cookies, used to detect authentication abuse, for a limited persistent duration;
Session cookies for media players, lasting one session;
Session cookies for load balancing, lasting one session;
Persistent cookies for user interface customization, lasting one session (or slightly more);
Cookies for sharing content via third-party social plug-ins, for logged-in members of a social network.
cookies required for secure payment via Stripe plugin, lasting one session
cookies for temporary registration of data entered in a form, used by Fuidform plugin

You cannot browse the sit os without implicitly accepting the use of these cookies.

Analytics cookies used on the Site

Analytics Cookies used on the Site enable the anonymous collection and analysis of site traffic and usage. This behavioral monitoring provides useful data to optimize the Site's browsing experience and performance. Specifically, the Site uses Google Analytics 4 (GA4) as an analytical tool.

Google Analytics 4 (GA4) is a web analytics tool from Google that makes it easier to understand how users interact with our site. Using anonymous cookies, GA4 collects data to create reports on usage trends while maintaining user anonymity.

The data collected by Google Analytics 4 includes information about the device, browser, users' approximate location, and browsing behavior. This data helps evaluate the effectiveness of the site and improve its usability.

For more information about privacy and Google Analytics' use of cookies, seeGoogle's Privacy Policy and Google Analytics' Cookie Management page.

The option not to accept such cookies is provided through the cookie banner.

Exercise of rights by the data subject.

Pursuant to Articles 13(2)(b) and (d), 15 to 22 of the Regulations, in recalling theprivacy policy already on the site, we further inform the data subject that:

has the right to request from the co-owners access to, rectification or erasure of personal data or restriction of processing concerning him or her, or to object to their processing, in the cases provided for;
has the right to bring - in Italy - a complaint to the Garante per la protezione dei dati personali, if competent Authority, following the procedures and directions published on the official website of the Authority at garanteprivacy.it;
alternatively, has the right to file a complaint with another competent European Privacy Authority located in the place of habitual residence or domicile in Europe of the person who disputes a violation of his or her rights, following the appropriate procedures and directions;
any rectification or erasure or restriction of processing carried out at the request of the data subject - unless this proves impossible or involves a disproportionate effort - will be communicated to each of the recipients to whom the personal data have been transmitted. The co-owners may notify the data subject of these recipients if the data subject so requests.

The exercise of rights is not subject to any formal constraints and is free of charge. Only in the event of a request for additional copies of the data requested by the data subject, the co-owners may charge a reasonable fee based on administrative costs. If the data subject makes the request by electronic means, and unless otherwise specified by the data subject, the information shall be provided in a commonly used electronic format. The specific address for co-owners to transmit petitions to exercise rights as recognized by the Regulations is: [email protected]. other formalities are required. Acknowledgement will be given within the time limits provided for in Article 12(3) of the Regulation ("The data controller shall provide the data subject with information on the action taken with regard to a request pursuant to Articles 15 to 22 without undue delay and, at the latest, within one month of receipt of the request. This period may be extended by two months, if necessary, taking into account the complexity and number of requests. The data controller shall inform the data subject of such extension, and of the reasons for the delay, within one month of receipt of the request. If the data subject makes the request by electronic means, the information shall be provided, where possible, by electronic means, unless otherwise specified by the data subject.").

According to the Transparency Guidelines WP 260/2017 issued by the EU Group of Data Protection Supervisors, in the indication of the data subject's rights, the data controller must specify a summary/summary of each of the rights in question and must provide separate guidance on the right to portability.

Specific information on the right to personal data portability.

Co-owners shall inform the data subject about the specific right to portability. Article 20 of the General Data Protection Regulation introduces the new right to data portability. This right allows the data subject to receive personal data provided to the Firm in a structured, commonly used, machine-readable format, and - under certain conditions - to transmit it to another data controller without hindrance.

Only personal data that (a) concern the data subject, and (b) have been provided by the data subject on the basis of consent; (c) are processed electronically in the context of entering into a contract are portable.

Since the processing is not based on either consent or a Contract, the right to portability does not apply.

Summary information on other rights of the data subject.

The Regulations provide the data subject with a number of rights, which under the WP 260 Transparency Guidelines it is mandatory to summarize in their main content within the disclosure. These rights are summarized and summarized below:

Right of access (to one's own personal data only): Right to obtain from the data controllers confirmation as to whether or not personal data relating to the data subject are being processed and, if so, to obtain access to the personal data and to be informed about the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if recipients in third countries or international organizations; when possible, on the expected period of retention of personal data or, if this is not possible, on the criteria used to determine this period; if the data have not been collected from the data subject, the right to receive all available information about their origin; the right to receive information about the existence of automated decision-making, including profiling, and meaningful information about the logic used, as well as the importance and the expected consequences of such processing for the data subject.

Right to rectification and integration: the data subject has the right to obtain from the co-processors the rectification of inaccurate personal data concerning him/her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration. The joint data controllers shall inform each of the recipients to whom the personal data have been transmitted of any rectification, unless this proves impossible or involves a disproportionate effort. The joint controllers shall inform the data subject of such recipients if the data subject so requests.

Right to erasure: the data subject has the right to obtain from the co-processors the erasure of personal data concerning him/her without undue delay (and where the specific reasons of Art. 17 para. 3 of the Regulations which on the contrary relieve the data controller of the obligation to erase) if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; or if the data subject withdraws consent and there is no other legal basis for the processing; or if the data subject objects to the processing for marketing or profiling purposes, also by withdrawing consent; if the personal data have been processed unlawfully or concern information collected from minors, in violation of Art. 8 of the Regulations. The co-processors shall notify each of the recipients to whom the personal data have been transmitted of any deletions unless this proves impossible or involves a disproportionate effort. The joint controllers shall inform the data subject of such recipients if the data subject so requests.

Right to restriction of processing: the data subject has the right to obtain from the co-processors the restriction of processing (i.e., within the meaning of the definition of "restriction of processing" provided by Article 4 of the Regulation: "the marking of personal data retained with the aim of limiting their processing in the future") when one of the following occurs: the data subject disputes the accuracy of the personal data, for the period necessary for the co-processors to verify the accuracy of such personal data; the processing is unlawful and the data subject objects to the deletion of the personal data and instead requests that their use be restricted; although the co-processors no longer need the personal data for the purposes of processing, the personal data are necessary to the data subject for the establishment, exercise or defense of a legal claim; the data subject has objected to the marketing processing, pending verification as to whether the data controller's legitimate grounds prevail over those of the data subject. If the processing is restricted such personal data shall be processed, except for storage, only with the consent of the data subject or for the establishment, exercise or defense of a right in court or to protect the rights of another natural or legal person or for reasons of substantial public interest. A data subject who has obtained the restriction of processing shall be informed by the joint data controllers before the restriction is lifted. The joint controllers shall inform each of the recipients to whom the personal data have been transmitted of any limitations, unless this proves impossible or involves a disproportionate effort. The joint controllers shall inform the data subject of such recipients if the data subject so requests.

Right to object: the data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her carried out by the joint data controllers or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the joint data controllers or carried out in the furtherance of the legitimate interests of the joint data controllers or third parties (including profiling). In addition, if personal data are processed for direct marketing or commercial profiling purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her carried out for such purposes.

Right not to be subjected to automated decisions, including profiling: the data subject has the right not to be subjected to a decision based solely on automated processing, including profiling, that produces legal effects concerning him or her or that significantly affects him or her in a similar way, except in cases where the automated decision is necessary for the conclusion or performance of a contract between the data subject and one or both of the joint data controllers; is provided for by law, subject to measures and safeguards; and is based on the data subject's explicit consent.

For utility, however, a link to Articles 15 to 23 of the Data Subject Rights Regulations is provided below.