Privacy notice on the processing of personal data for the BIS - Bologna Innovation Square project

Provided pursuant to art.13 of EU Regulation n. 679/2016 (GDPR)

 

1.Introduction

The metropolitan City of Bologna, as data controller, is required to provide information regarding the use of personal data of data subjects, pursuant to art.13 and 14 of EU Regulation n. 679/2016 and article 14 of the metropolitan Regulation for the implementation of data protection rules, approved by metropolitan Council Resolution n.45 of 14/11/2018. All the personal data acquired during project activities organized by the metropolitan City of Bologna, will be subject to processing, based on principles of correctness, lawfulness, transparency and protection of confidentiality, in full respect of the current legislation on personal data protection.

 

  1. Data controller

The Data Controller of the personal data referred to in this notice is the metropolitan City of Bologna, represented by the Mayor, Matteo Lepore, with registered office in Bologna:

Metropolitan City of Bologna
Address: via Zamboni n.13 - 40126 Bologna, Italy
Certified email: cm.bo@cert.cittametropolitana.bo.it

 

  1. Data protection officer

The metropolitan City of Bologna has appointed Lepida S.c.p.A. as its Data Protection Officer (DPO), which has designated Anna Lisa Minghetti as the point of contact.

Lepida S.c.p.A. - Tax Code: 02770891204
Address: via della Liberazione n. 15 - 40128 Bologna, Italy
Email: dpo-team@lepida.it
PEC (certified email): segreteria@pec.lepida.it

 

  1. Authorized data processors

Personal data are collected by the metropolitan City of Bologna and stored on the institution’s servers, and processed by staff members of the Joint Office for economic development, enterprises, and employment of the metropolitan City and the Municipality of Bologna, who are authorized to process the data and have received appropriate instructions regarding security measures, procedures, and operating methods aimed at effectively protecting personal data.

 

  1. Purpose of processing

The data provided may be used for various services and activities within the Bologna Innovation Square (BIS) initiative.

Specifically, data will be used for the creation of a dedicated mailing list to send:

  • informational and educational content on topics related to innovation;
  • communications concerning initiatives, projects, and events organized by partners and participants and promoted within the network;
  • communications related to the institutional activities of BIS Bologna Innovation Square.

For participants in the “Bologna for Talent” initiative only, data may also be used to:

  • provide information regarding the activities of Bologna for Talent and its institutional partners relating to talent attraction;
  • design and implement activities aimed at attracting profiles that are highly sought after by companies in the metropolitan area;
  • provide specialized support and tools related to the talent integration services in the territory;
  • perform the necessary actions to enable access to and provision of services under Bologna for Talent;
  • carry out monitoring and reporting activities, including the processing of statistics in anonymous and aggregated form;
  • manage the registration and participation in events/meetings promoted by Bologna for Talent.

Registration for some initiatives will be carried out through Google Form. 

 

  1. Data processing legal basis and data processing scope 

In pursuit of the objectives of BIS Bologna Innovation Square, different categories of data may be processed depending on the services and activities involved, including:

  • Personal data (name, surname, email address, telephone number)
  • For users of the Talent Welcome Desk within the metropolitan area only and for participants of events and meetings promoted by Bologna for Talent: additional personal data such as citizenship, municipality of residence, date of birth, field of study and other personal and/or sensitive information necessary to support the user in line with the objectives of the Bologna for Talent project, which may arise during dedicated meetings and/or through questionnaires.

Failure to consent to the processing of data will make it impossible to access the above-mentioned services.

  1. Recipients of personal data

Joint Office for economic development, enterprises, and employment of the metropolitan City and the Municipality of Bologna. Your personal data will not be subject to further communication or disclosure.

Data may be shared with third parties or made public at events and/or published on Bologna for Talent communication channels exclusively in anonymous and aggregated form for statistical purposes and dissemination of results pursuant to art. 6 of the GDPR.

 

  1. Transfer of personal data to non-EU Countries

Google’s servers are located in the USA and in the EU (https://datacenters.google/intl/locations/). Google states it complies with GDPR regulations on the basis of standard contractual clauses (https://policies.google.com/privacy/frameworks?hl=en-GB; https://cloud.google.com/privacy/gdpr?hl=en).

 

  1. Methods and duration of data retention

Data is stored on digital media that comply with the security measures established by the Agency for Digital Italy (Agid) and are retained in accordance with legal provisions on administrative document retention.

Periodic checks are carried out to ensure the data are strictly relevant, not excessive, and necessary for the relationship, service, or assignment - either ongoing or concluded - including data voluntarily provided by you. Data that, as a result of these checks, are found to be excessive, irrelevant, or unnecessary will not be used, except where the document or record containing them must be retained in accordance with the law.

Data will be retained for no longer than necessary to achieve the purposes stated above.

 

  1. Data subject rights

Data subjects have the right to obtain, in the cases provided by law, access to their personal data from the metropolitan City of Bologna and to request rectification, erasure, restriction of processing, or to object to processing (articles 15 and following of the Regulation).

Requests to exercise the rights under chapter III of the metropolitan Regulation on the implementation of data protection rules may be submitted to the metropolitan City of Bologna, Area for Economic and Social Development, Via Benedetto XIV No. 3, 40125 Bologna, using the appropriate form available on the Privacy section of the institutional website.

 

  1. Right to complain

Data subjects who believe that their personal data have been processed in violation of the Regulation through this site have the right to complaint with the Data Protection Authority (Garante per la protezione dei dati personali - Piazza di Monte Citorio 121, IT-00186 Rome, email: rpd@gpdp.it), pursuant to art. 77 of the Regulation, or to seek judicial remedy as provided by art.79 of the Regulation.

 

  1. Provision of data

Providing personal data is optional, but necessary for the purposes described above. Failure to provide data will result in the inability to deliver the aforementioned services.