\ Information on the Rights of the Data Subject and how to exercise them

Information on the Rights of the Data Subject and how to exercise them

As a Data Subject, you may exercise the rights set out under Regulation (EU) 2016/679 – GDPR and listed below at any time with respect to the Controller by filling in the online form or by sending a request in writing to the email address: rpd@areasciencepark.it or by standard mail to the address Area Science Park, Padriciano, 99 – 34149 Trieste (to the attention of the Data Protection Officer), using the appropriate form available on the official website of Area Science Park (in the section Privacy and in the Transparent Administration section).  

You may revoke any consent you may have given at any time using the same procedure.  

Any communications and actions taken by Area Science Park in connection with the exercise of the rights listed below shall be carried out free of charge. However, if your requests are manifestly unfounded or excessive, especially if they are too repetitive, Area Science Park may charge you a fee, taking into account the administrative costs incurred, or refuse to comply with your requests.  

1. Right of access 

You may obtain confirmation as to whether or not your Personal Data are being processed from Area Science Park, and, if so, obtain access to your Personal Data and the information set out under article 15 of the Regulation, including but not limited to: the purpose of the processing, the categories of Personal Data processed, etc.  

If the Personal Data are transferred to a third country or international organisation, you have the right to be informed of the existence of appropriate safeguards relating to said transfer, as specified in section 5.  

If requested, Area Science Park may provide you with a copy of the Personal Data being processed. Area Science Park may charge you a reasonable fee for any additional copies based on administrative costs. If the request in question is submitted by electronic means, and unless otherwise stated, the information will be provided to you by Area Science Park in a commonly used electronic format.  

2. Right of rectification 

You may obtain the rectification of any Personal Data that are inaccurate from Area Science Park and, taking into account the purpose of the processing, the right to have the data completed if they are incomplete, by providing an additional declaration.  

3. Right to cancellation 

You may ask Area Science Park to delete your Personal Data if one of the reasons set out under article 17 of the Regulation applies, including, for example, if the Personal Data are no longer necessary for the purposes for which they were collected or otherwise processed.  

Please note that Area Science Park may not delete your Personal Data if they have to be processed, for example, to fulfil a legal obligation, for reasons of public interest or for the establishment, exercise or defence of a legal claim. 

4. Right of restriction of processing

You may obtain a restriction to the processing of your Personal Data in the event of one of the cases provided for under article 18 of the Regulation, including, for example: 

  • the accuracy of your Personal Data is contested for the period necessary for the Controller to carry out verifications 
  • an objection to the processing, pending appropriate verification by the Data Controller as to the overriding validity of the reasons justifying the processing.  

5. Right to data portability 

Where the processing of your Personal Data is based on consent or is necessary for the performance of a contract or pre-contractual measures and the processing is carried out by automated means, you may:  

  • ask to receive the Personal Data you provided in a structured, commonly used and machine-readable format (e.g. computer and/or tablet)  
  • send the Personal Data that you receive to another Data Controller without objection by Area Science Park.  

You may also ask for your Personal Data to be sent by Area Science Park directly to another data controller indicated by you. In this case, you shall be responsible for providing us with the exact details of the new data controller to whom you intend to transfer your Personal Data, and to provide us with written authorisation to do so.  

6. Right to object 

You may object at any time to the processing of your Personal Data if the processing is based on the performance of a task carried out in the public interest or the exercise of official authority vested in the Controller.  

If you decide to exercise your right to object as described here, Area Science Park will refrain from processing your personal data further unless there are legitimate grounds for processing (grounds which override the interests, rights and freedoms of the data subject), or the processing is necessary for the establishment, exercise or defence of legal claims.  

Where personal data are processed for scientific or historical research purposes or for statistical purposes, the data subject shall have the right, on grounds relating to his or her particular situation, to object to the processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest. 

7. Automated decision-making concerning natural persons, including profiling 

Where Area Science Park adopts automated decision-making processes, providing, in such cases, more details in a specific information notice and acquiring express consent to this end, the Regulation provides for the right of the data subject not to be subject to a decision based solely on automated processing of his or her Personal Data, including profiling, which produces legal effects concerning him or her or significantly affects him or her unless such decision:  

  1. (a) is necessary for the finalisation or performance of a contract between the data subject and Area Science Park 
  2. (b) is authorised by Italian or European law 
  3. c) is based on the express consent of the Data Subject. 

In cases (a) and (c), Area Science Park will implement appropriate measures to protect your rights, freedoms and legitimate interests and you may exercise your right to obtain human intervention by Area Science Park, to express your opinion or to object to the decision.  

8. Right to lodge a complaint with the Data Protection Supervisory Authority 

Without prejudice to your right of recourse in any other administrative or judicial forum, if you believe that the processing of your Personal Data by the Controller is in breach of the Regulation and/or applicable legislation, you may lodge a complaint with the competent Data Protection Supervisory Authority.