Search in the site by keyword

PRIVACY POLICY

 

Data controller

The data controller is Ricerca sul Sistema Energetico – RSE S.p.A., Via Raffaele Rubattino n. 54, Milan, Italy, rse@legalmail.it.
RSE has appointed a Data Protection Officer, who can be contacted at: privacy@rse-web.it
RSE processes personal data in compliance with the GDPR, with Italian Legislative Decree 196/03 (‘Personal Data Protection Code’) and with European Data Protection Board (EDPB) guidelines, as well as with the principles of lawfulness, fairness and transparency, adequacy, and relevance.

Legal basis

Personal data processing is necessary for the performance of the tasks carried out by RSE in the public interest (Article 6( 1e) GDPR).

As a state-funded public undertaking controlled by public authorities, RSE aims to promote its research activities and to expand scientific knowledge to the benefit of the international community.

Personal data collected and purpose

Personal data of visitors to the website

The computer systems and software procedures used to operate the website acquire certain personal data whose transmission is implicit in the use of Internet communication protocols.

This includes the IP addresses or domain names of the devices used by visitors to the website, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system.

Personal data is also processed for the purposes of:

  • obtaining statistical information on the use of the services (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.);
  • monitoring the proper functioning of the services offered.

This website and any third-party services may collect files that record interaction with this website (system logs) use other personal data (such as the IP address) for operation and maintenance purposes.

Personal data submitted by users

The optional, explicit and voluntary sending of personal data by filling in the registration form or other forms on the website or sending messages to RSE’s contact addresses or institutional profiles/pages on social media entails the acquisition of the sender’s contact data. The submitting of personal data is necessary to download the material provided or to allow RSE to respond to users’ requests. Personal data sent voluntarily can include identification data, contact data, addresses, life and professional habits, consumption, tracking movements, etc.

Users are responsible for any third-party personal data obtained, published or shared through this website and confirm that they have the third party’s consent to provide the data to the owner of the website.

Data processing through RSE’s social media platforms

RSE is active on the following platforms:

The personal data of users is processed in compliance with the policies implemented by each platform (YouTube – to consult the relevant Privacy Policy (link) and Cookie Policy (link); Linkedin – Privacy Policy (link) and Cookie Policy (link); X (formerly Twitter) – Privacy Policy (link) and Cookie Policy (link).

Personal or sensitive data included in public comments or posts on RSE’s social media channels may be removed.

Data shared by users through private messages sent directly to social media managers will be processed in accordance with current data protection regulations.

Data recipients

Data may be processed only by duly authorized and instructed internal personnel (Article 29 GDPR).

The data controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of personal data.

Data retention

Personal data will be retained until the conclusion of the research carried out and in any case for no longer than 3 years after their acquisition.

Data protection rights

According to GDPR, as a data subject, you may exercise the following rights: right of access to your personal data, right to rectification and to erasure of your personal data, right to data portability, right to object to personal data processing, right to lodge a complaint with the competent authority within the EU, right to restriction of processing of your personal data (Articles 15-22 GDPR). If you would like to exercise any of these rights, you can contact RSE at: privacy@rse-web.it.

Data protection authority

If any participant feels that RSE has not responded to their complaint in a satisfactory manner, they may contact the Italian Data Protection Authority.

Specific data processing

Please find attached the information on the specific data processing carried out by RSE: