Privacy policy on the processing of personal data according to Article 13 of the Regulation (EU) 2016/679
of the European Parliament and of the Council (General Data Protection Regulation)
1. Introduction
In accordance with art. 13 of the European Regulation n. 679/2016, the Council of the Emilia-Romagna
Region, as the "Data Controller", is required to provide you with information regarding the use of your
personal data.
2. Identity and contact details of the data controller
The Data Controller of the personal data referred to in this Notice is the Council of the Emilia-Romagna
Region, with legal headquarters in Bologna, Viale Aldo Moro n. 52, CAP 40127. In order to simplify the
methods of forwarding and reduce the times for the reply, we invite you to submit the requests referred to
in paragraph no. 10, to the Emilia-Romagna Region, Public Relations Office (URP), writing or going directly
to the Urp front office. The URP is open from Monday to Friday from 9 to 13 and on Monday and Thursday
also from 14,30 to 16,30: telephone 800-662200, e-mail urp@regione.emilia-romagna.it. PEC:
urp@postacert.regione.emilia-romagna.it
3. The Data Protection Officer
The Data Protection Officer designated by the public authority can be contacted at the email address
dpo@regione.emilia-romagna.it or at the headquarters of the Emilia-Romagna Region in Viale Aldo Moro n.
30.
4. Data processors
The public authority may make use of third parties for the performance of activities and related processing
of personal data of which we maintain the ownership. In accordance with the provisions of the legislation,
these subjects ensure levels of experience, ability and reliability such as to guarantee compliance with the
current provisions on processing, including the data security profile. We formalize instructions, tasks, and
duties for these third parties with their designation as "Data Processors". We submit these subjects to
periodic checks in order to ascertain the maintenance of the guaranteed levels recorded on the occasion of
the initial assignment.
5. Subjects authorized to process
Your personal data are processed by internal personnel previously authorized and designated as data
controller, who are given suitable instructions regarding measures, precautions, modus operandi, all aimed
at the concrete protection of your personal data.
6. Purpose and legal basis of the processing
The processing of your personal data is carried out by the Council of the Emilia-Romagna Region for the
performance of institutional functions and, therefore, pursuant to art. 6 paragraph 1 letter. e) does not
require your consent. Personal data are processed for the following purposes:
a) full description of the purpose.
– The form must be completed by anyone who wishes to register for and participate in the event.
– To register for the event, the following personal data are required: first and last name,
institution/organization, email address, phone number
– The personal data collected will be used exclusively for administrative and organizational communications
related to the event (e.g., sending confirmation details, schedule updates, or follow-up information).
7. Recipients of personal data
Your personal data may be processed, on behalf of the Data Controller, by ECIPA Soc. Cons. a r.l., which
manages the digital tool within the HERCULES project, and by its technical suppliers in charge of the
development and maintenance of the platform, appointed as Data Processors pursuant to Article 28 GDPR.
Your data will not be otherwise disclosed or disseminated.
8. Transfer of personal data to non-EU countries
Your personal data are not transferred outside the European Union.
9. Storage period
Your data are kept for a period not exceeding that necessary for the pursuit of the mentioned above. For
this purpose, also through periodic checks, the strict relevance, non-excess and indispensability of the data
with respect to the relationship, performance or ongoing assignment, to be established or terminated, is
constantly checked, also with reference to the data that you provide on your own. initiative. The data that,
even following the verifications, are excessive or irrelevant or not essential are not used, except for the
possible conservation, according to law, of the deed or document that contains them.
Data will be retained for a period of 5 years following the completion of the Hercules project, which is
expected to end in late 2026, and thus until the end of 2031.
10. Your rights
As a data subject, you have the right:
• access to personal data;
• to obtain the rectification or erasure of personal data of the same or the limitation of the treatment
concerning the data subject;
• to object to the processing;
• to lodge a complaint with the Data Protection Supervisor Authority.
11. Data provision
Failure to provide mandatory data will prevent registration for and attendance at the event, as well as the
receipt of related communications
