IBSA Foundation has always paid the utmost attention to the confidentiality, protection and security of the information in its possession, all the more so if it relates to the personal data of its customers and the parties they come into contact with. The purpose of this Policy is to describe the procedures used for the processing of the personal data of the users and visitors of this website, which can be reached at the following address https://ibsafoundation.org/privacy-policy/. We recommend that you read this privacy policy carefully before continuing to browse and when providing your personal data.

Regulatory framework: This communication is provided in accordance with the European Union legislation on the processing of personal data (Regulation EU 2016/679 and Directive 2002/58/EC).

Data Controller is IBSA Foundation for scientific research – Via del Piano – CH 6926 Collina d’Oro – Switzerland (below also the “Controller”).

Data Processors: The updated list of the data processors and the group’s affiliates is available by sending a request to privacy@ibsafoundation.org. 

Scope of this policy: This Privacy Policy applies to this website and not to other websites that are not owned by the Controller, which may be visited by you by browsing the links.

Redirect to external websites: This website can be accessed from other third-party websites using links provided for this purpose. The Controller does not accept any responsibility or liability in relation to the handling of personal data by third-party websites and regarding the management of authentication credentials provided by third parties.

Policy and information notices: This website performs the function of providing information about the activities carried out by the Controller. Therefore, in most cases, it does collect personal data from you. In certain circumstances, such as for the sections below, you are required to complete a data collection form. In these cases, we provide the privacy notice that specifies the use of the data and the other information required by law. We recommend that you read this notice before providing the data. In addition, in the few cases where personal information is collected for other purposes, this will be clearly highlighted in the legally-required notices, for the purposes of transparency and to make sure you are fully informed.

Consent to the processing of the data: The notices are aimed at defining the limits and methods of the data processing for each service, based on which visitors can freely express their consent (if necessary) and authorise the collection of the data and their subsequent use.

Browsing data or metadata: The information technology systems and software procedures used for this website acquire some traces or metadata (considered personal data), during their normal operation, whose transmission is implicit in the use of Internet communication protocols. The acquisition of this information (which is also called “passive” for this reason) can take place even if you are not registered for the services and without you playing an active role. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and addresses of websites from which access or exit has been made, information on the pages visited by users within the site, the time of access, the length of stay on the individual page, the analysis of the internal path and other parameters relating to the user’s operating system and computer environment. These technical and electronic data are collected and used exclusively in an aggregate and not immediately identifiable form. They may be used to determine responsibility in the event of alleged computer crimes against the website or on request from the public authorities.

Cookie (redirect): For information about the installation of cookies by this website, please see the Cookie policy (https://www.ibsafoundation.org/cookies-policy/).

Sections of the data collection website: The following are the sections of the site where you can provide your personal data, together with a brief description of the purposes for which they are collected. The relevant privacy notice is included in the respective pages.

Contact us: The data received through the contact form (https://www.ibsafoundation.org/contact-us/) of the website is used to respond to requests from you and could be stored and used to send update emails on the activities of the IBSA Foundation.

Registration to the Forum: the data received through the registration form to the Forum (https://www.ibsafoundation.org/forums/) are used to respond to user requests and are stored in order to send update mail on the activities of the IBSA Foundation.

Processing methods: The processing of personal data is carried out using electronic procedures and media.

Storage of personal data: The personal data are only kept for as long as they are necessary for the purposes they were collected for. In any event, you have the specific rights described further below.

Optional provision of data: The provision of personal data requested from the data subject is optional, unless otherwise specified. However, failure to provide the data may result in the inability to obtain what is requested or to perform the activity indicated.

Place where the data is processed: The processing associated with the web services of this website takes place at Heritage House reputation Architects – Via Hoepli, 3 – 20121 Milan, Italy, which performs the management of its server.  

Scope of circulation of the personal data: Unless otherwise stated in the specific notices, the personal data acquired through this website are only accessed by persons acting on behalf of the Controller, specifically designated as data processors or persons in charge and responsible for managing the requested service.

Dissemination of the personal data acquired by the site: The personal data acquired by the site are not disclosed to unspecified recipients.

Data flows abroad: The data acquired by the site are not transmitted outside the territory of the European Union.

Personal data protection rights: In relation to the processing of personal data, the data subject can at any time obtain confirmation of the existence or otherwise of that data held by the Controller and information about its content and origin. The data subject can also request the supplementation or correction of the data or, in the cases provided for by law, the portability, restriction of processing, and erasure of the data processed, in addition to objecting to the processing of the personal data, on legitimate grounds. The data subject can also obtain the updated list of the Data Processors on request. The data subject also has the right to lodge a complaint with the Personal Data Protection Authority if they consider that their rights have not been respected or that they have not received a response to their requests in accordance with the law.

How to exercise your rights: You can exercise your rights by contacting privacy@ibsafoundation.org.

Amendments to the policy: The entry into force of new sector regulations, as well as the ongoing review and updating of user services, may result in the need for changes in how your personal data is processed. This policy may therefore change over time, so we recommend you check this page periodically. To this end, the policy document states the date it was last updated.

Drafting Date: 18/05/2018 

Last Update: 01/01/2019

Our cookie policy

This policy aims to explain how this website uses cookies to provide clear and relevant information to allow you to make choices to control what happens when you access the site. This policy uses the term ‘cookie’ to refer to cookies and similar technologies covered by law (such as, for example, Local Shared Objects – commonly referred to as ‘flash cookies’, web beacons or web bugs, including clear gifs). 

The information collected concerns data that may allow the identification of users/visitors through association and processing with data held by third parties (such as, for example, IP addresses and domain names of computers used by people who connect to the website). These data are used for statistical purposes only.

This document is an integral and substantial part of the Privacy Policy and the notice contained therein issued pursuant to Articles 13 and 14 of Regulation (EU) 2016/679. We therefore invite you to read that document.

Applicable law – This subject is regulated by European Directive 2002/58/EC – subsequently amended by Directive 2009/136/EC and transposed by the national laws of the Member States of the European Union – which requires us to inform you and obtain your consent for the use of cookies and similar technologies.

What is a cookie: A cookie is a small text file, usually consisting of letters and numbers, downloaded onto your device when you access the website. Cookies are then sent to the original site at each subsequent visit. 

This information may relate to you, your preferences or the device you use to access the site (computer, tablet or mobile phone) and is primarily used to tailor the functioning of the site to your expectations or to collect data for statistical purposes.

The use of cookies and similar technologies has long been common practice, because cookies are important in the provision of many online services. The use of these technologies is not, therefore, prohibited by law but requires that you be informed about the cookies and given the opportunity to accept them or not.

Different types of cookies: Cookies are classified differently according to the aspect considered. With regard to the duration of the cookies, a distinction is made between session and persistent cookies.  

Session cookies: Cookies can expire at the end of a browser session (i.e., they last from when you open the browser window until you exit the browser). They allow websites to track your actions during a browser session. They can be used for a variety of purposes, such as remembering what you have put in your shopping cart while browsing a site. They can also be used for security when you access internet banking services or to facilitate the use of webmail. These session cookies expire after a browser session.

The use of session cookies (which, in any case, are not permanently stored on your computer and are automatically deleted as soon as the browser is closed) is strictly limited to the purpose of transmitting data (consisting of random numbers generated by the server) that identify the specific session and are necessary to enable secure and efficient browsing. The session cookies used in this site do not use other information technology that could compromise the privacy of the users browsing the web.

Persistent cookies: These cookies can be stored longer than a session. They are stored on your device between different browser sessions and enable your actions in a website to be remembered. Persistent cookies can be used for a variety of purposes, including remembering your preferences and choices when using a site (or in some cases through different websites).

“First-party” and “third-party” cookies: With reference to the party setting the cookie, a distinction is made between first-party and third-party cookies. Whether a cookie is a “first-party” or “third-party” cookie is strictly linked to the website or domain that uses that cookie. “First-party” cookies are cookies set by the website visited by you, in other words the site displayed in the URL window: in our case, this means the cookies set by this website of the Controller. “Third-party” cookies are cookies set by a different domain from the one visited by you: i.e., cookies set by websites different from the website of this Controller. If you visit a website (such as this one) and a third-party company sets a cookie through this website, that cookie is a “third-party” cookie.

Technical cookies: Technical cookies are necessary for communication on the electronic network and are usually installed directly by the Controller or operator of the website. They are used for the proper functioning of the website or to improve the service provided to you. The installation of these cookies does not require your prior consent, but you must be informed of their presence.

Profiling cookies: Profiling cookies are designed to create user profiles and are used to send advertising messages in line with the preferences expressed by you during your web browsing. For profiling cookies, you must be informed of their presence and consent to their use.

We use cookies on this site that enable us to understand how visitors use the site, in order to be able to assess and improve its functioning. Your personal data will not be accessible to us, except in anonymous and aggregate form. We use Google Analytics cookies for this purpose.

Cookies for advertising targeting: These cookies derive from third-party services and allow us to provide advertising agencies with information about your visit to our site so you can see advertising messages based on your interests. These cookies also allow us to connect to social networks, which may also use information about your visit to our site to display advertising messages.

Data Controller:  IBSA Foundation for scientific research, as identified in the Privacy Policy, is the Data Controller –  and is liable –  solely for its own cookies, i.e. “first party” cookies. All other cookies, i.e. “third-party” cookies, are under the control of the companies that own them.

Consent for cookies: This site uses various techniques to obtain your consent. One method is by clicking the box that appears on the site notifying you of the use of cookies.

Your browser settings are another way of giving or refusing consent to cookies. You can set your browser to tell you when cookies are present, so you can decide whether or not to accept the cookies. It is also possible to automatically reject all cookies, by enabling this option in the browser.

Each browser provides instructions for this purpose. If you want to disable the use of cookies, you can change the browser settings to block them. See your browser’s help manual for details on how to do this. Please note that if you disable all cookies, your use of the website and the services we offer may be affected in whole or in part.

List of cookies used 

COOKIE: _gat
DURATA: 10 minutes
DETTAGLIO: Google Analytics, used to speed up user requests
TIPO DI COOKIE: Analytics

COOKIE: _ga
DURATA: 2 years
DETTAGLIO: Google Analytics, used to distinguish users by assigning them a random number
TIPO DI COOKIE: Analytics

COOKIE: _gid
DURATA: 24 hours
DETTAGLIO: Google Analytics uses this cookie to store and update a unique value for each page visited
TIPO DI COOKIE: Analytics

COOKIE: moove_gdpr_popup
DURATA: 12 months
DETTAGLIO: Cookies that keep in memory your preference about the use of cookies and consent to our privacy policy

TIPO DI COOKIE: Tecnico
COOKIE: SAPISID, HSID, NID, OGPC, SSID, APISID, SID, SIDCC, CONSENT, 1P_JAR
DURATA: from 6 months to 2 years
DETTAGLIO: Cookies that keep in memory some navigation options
TIPO DI COOKIE: Google

COOKIE: wpml_browser_redirect_test, _icl_current_admin_language, _icl_current_language, _icl_visitor_lang_js
DURATA: 1 day
DETTAGLIO: Cookies used to manage the multi-lingual nature of this website
TIPO DI COOKIE: WPML

More information about the cookies: For more information about the cookies installed through this Site, you can contact the following email address: privacy@ibsafoundation.org

Updating of the policy: The entry into force of new sector regulations, as well as the ongoing review and updating of user services, may result in the need for changes in how your personal data is processed. This policy may therefore change over time, so we recommend you check this page periodically. To this end, the policy document states the date it was last updated.

Drafting Date: 18/5/2018 

Last Update: 18/5/2018

PERSONAL DATA PROTECTION NOTICE FOR THE PERSONNEL/CONSULTANTS OF THE SUPPLIER

1.1 INTRODUCTION

Whereas

• IBSA Foundation for scientific research is in the process of establishing or already has a contractual relationship with its suppliers and consultants (below the “Supplier”) in accordance with the current legislation on personal data protection:
  • the Data Controller is the natural or legal person responsible for decisions regarding the purposes and methods of the processing of the personal data and the instruments used, also with respect to security. With regard to the personal data of the employees of the Supplier used by IBSA Foundation for scientific research in managing its business dealings with the Supplier, the Data Controller for that data is IBSA Foundation for scientific research;
  • the “data subject” means the natural person that the personal data belongs to, which cannot therefore be a legal person;
  • the Data Controller is required to inform the data subject and the person from whom the personal data are collected in advance about the processing of that data;
• in the case of relationships between legal persons, as is currently the case between IBSA Foundation for scientific research and the Supplier, the notice to any data subjects involved in the related processing – when they provide work or professional or consultancy services to the Supplier and whose data can in any case be communicated, known and/or processed by the Data Controller in the execution and performance of the main relationship – is issued by the Controller through the Supplier;
• the Supplier undertakes to ensure that the data subject is fully aware of the essential elements of this notice
• In consideration of the above, IBSA Foundation for scientific research, with registered office in Via del Piano 29, 6926 Montagnola – Collina d’Oro, Switzerland as the Data Controller, hereby notifies the data subjects about the purposes and methods of processing of the personal data collected, their scope of communication and dissemination, as well as the nature of their provision.

1.2 PURPOSE OF THE PERSONAL DATA PROCESSING

We wish to inform you that the company IBSA Foundation for scientific research, as the Data Controller (below the “Company” or the “Controller”), processes the personal data of the data subjects for the sole purpose of the execution and management of the provision of services, including professional and qualified services, as well as for purposes strictly related to this.

1.3 DATA PROCESSED

The data processed are the identification and contact data of the supplier’s personnel that the Company is in contact with for the purpose of providing the service regarding the supplier and are necessary for the execution and management of the contractual relationship between the Controller and the Supplier.

1.4 HOW THE DATA ARE PROCESSED

The personal data are used through electronic means, as well as non-automated instruments.

1.5 SCOPE OF CIRCULATION OF THE DATA

The data may be used by personnel of the Company that have been assigned a specific role and have been given appropriate operating instructions. The data may also be used by third-party companies providing operational services on behalf of the Data Controller, which act as external data processors under the direction and supervision of the Controller.

The list of the Data Processors is available by sending a request to privacy@ibsafoundation.org

1.6 COMMUNICATION OF THE DATA

In addition, the data may also be communicated to the other companies of the group with which specific agreements are in place for the purposes of shared processing, for administrative and accounting purposes and to be used for the same purposes, to public bodies for the fulfilment of legal requirements, as well as to third parties and companies, such as banks, credit institutions and companies strictly linked to the collection of credit; legal and industry-sector consultants; auditors; and companies providing credit recovery, administration and contractual advice. The third parties indicated will act as independent data controllers.

Further information on the names of the individual companies in the group or on the categories of data recipients can be obtained by writing to privacy@ibsafoundation.org

1.7 NON-DISSEMINATION OF THE DATA

The personal data are not disclosed to unspecified recipients.

1.8 TRANSFER OF THE DATA ABROAD

The personal data can be transferred to foreign countries where branches of our company are based. With regard to the possible transfer of the Data to third countries outside Switzerland and EU, including countries that may not provide the same level of protection envisaged by the applicable legislation, we inform you that the transfer of data abroad is subject to specific guarantees for the protection of personal data through the adoption of standard contractual clauses.

1.9 HOW LONG THE DATA ARE KEPT

The data will be kept for the duration of the entire contractual relationship and in any case up to the statutory and legal time limit in compliance with the rights and the resulting obligations.

1.10 DATA CONTROLLER

The Controller is the company IBSA Foundation for scientific research with registered office in Via del Piano 29, 6926 Montagnola – Collina d’Oro, Switzerland.

1.11 RIGHTS OF THE DATA SUBJECT

In relation to the processing of your personal data, you have the right to obtain confirmation at any time of the existence or otherwise of the data held, to be informed about its content and origin, to verify its accuracy and to request the supplementation or correction of the data. You also have the right to request the erasure, transformation into anonymous form or blocking of the data processed in breach of the law, and to object to the processing of the personal data, on legitimate grounds.

Requests should be addressed as follows:

• by e-mail, to: privacy@ibsafoundation.org

 You are reminded that data subjects also have the right to lodge a complaint with the Personal Data Protection Authority if they consider that their rights have not been respected or that they have not received a response in accordance with the law.

Drafting Date: 18/05/2018

Last Update: 01/01/2019