INFORMATION ON THE PROCESSING OF PERSONAL DATA OPEN INNOVATION PORTAL

Article 13 EU Regulation 2016/679

Before you provide us with personal data concerning you, in compliance with the provisions of European Regulation 2016/679 on the protection of personal data (General Data Protection Regulation) and Legislative Decree No. 196 of 30 June 2003 (so-called Privacy Code) as amended pursuant to Legislative Decree 10 August 2018, no. 101, the purpose of which is to protect the fundamental rights and freedoms of natural persons, in particular the right to the protection of personal data, it is necessary for you to take note of a series of information that can help you understand the reasons for which your personal data will be processed, specifying what your rights are and how you can exercise them.

1. Purpose and legal basis of personal data processing

1.1 You are informed that your personal data provided upon registration will be processed in order to allow you access to the Open Innovation web portal (www.openinnovation.regione.lombardia.it) and the use of the functions made available on the platform. In particular, registration allows you to, among others, publish news, open specific thematic discussions, and formulate collaboration proposals that fall within the scope of specific initiatives.

 The purpose of the Portal, therefore, is to offer innovation operators a space for comparison and sharing for the exchange of knowledge and the definition of collaborative projects, to facilitate the creation of partnerships and access to international networks, services and platforms with aims consistent with the objectives, to promote comparison with respect to regional policies in support of research, innovation and competitiveness, which is also useful for a better definition of regional support interventions.

 By virtue of the objectives pursued, the purpose of the processing of personal data required for the registration to the Open Innovation platform, is the pursuit of public interests or connected to the exercise of public authority as provided for by Article 6, par. 1, letter e) GDPR ("processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller").

1.2 With specific regard to the legal basis, expressly referred to by art. 6, par. 3 lett. b) GDPR and art. 2 ter Privacy Code as amended pursuant to Legislative Decree no. 101/2018, in relation to the purpose of processing set out above, it should be noted that the personal data you provide are processed by virtue of the implementing provisions of the Strategic Programme of the Lombardy Region for research innovation and technology transfer, in connection with the document for industrial policies ex art. 6, paragraph 2, Regional Law 24 September 2015, no. 26 ("Manifattura diffusa creativa e tecnologica 4.0") the purposes expressly provided for by Regional Law 23 November 2016, no. 29 and ss.mm.ii. ("Lombardy is research and innovation"), the aim of which is to strengthen, also through the lever of public demand for innovation, regional investment in the research and innovation sectors, in order to foster the competitiveness of the economic-productive system, the growth of human capital, sustainable development and contribute to raising social welfare and the quality of the services provided to citizens and businesses.

2. Type of data processed and how to register on the Open Innovation Portal

2.1 In order to finalise your registration to the Open Innovation Portal and allow the validation of your user profile, you are required to provide the personal data indicated below, by filling in the appropriate form. Some of the requested data, appropriately marked, are mandatory and public because they are aimed at guaranteeing a coherent interaction between registered users with respect to their specific areas of competence. In particular, in order to fully benefit from the services and functions made available on the Open Innovation Portal, it will be necessary for you to provide the following personal data:

  • First name (mandatory and public) and Last name (mandatory and public);
  • Professional presentation (mandatory and public)
  • Short presentation (optional and public);
  • Tags and Areas of Interest (mandatory and public);
  • Gender (optional and confidential);
  • Age group (optional and confidential);
  • Photos (optional and public);
  • Telephone number (optional and confidential);
  • Reference company (optional and confidential);
  • Role held (optional and confidential)
  • Valid email address (optional and confidential)

 

Registration by providing the aforementioned personal data and the consequent validation of your profile will allow you access to the services/tools made available by the Open Innovation platform, namely:

  • community: for the creation of working and/or project groups and/or sharing of common interests;
  • discussions: to facilitate and channel discussion among users on specific R&I-related topics;
  • news: share and disseminate R&I articles on the platform to other users;
  • organisations: provide a snapshot of organisations in the innovation ecosystem on the platform in order to facilitate the matching of supply and demand and foster professional collaborations;
  • surveys: collection of data for subsequent analysis;
  • collaboration proposals: search for skills, partnerships, resources needed to carry out the project or activity being proposed;
  • expression of interest: expressing interest in participating in a specific initiative;
  • EEN collaboration proposals: publish collaboration proposals to platform users;
  • initiatives: inform users of the funding opportunities available;
  • projects: inform users of ongoing or completed R&I projects;
  • results: inform users of the results achieved in ongoing or completed R&I projects;
  • My Projects: share project data and monitor project progress and costs;

 

2.2 Should you decide to limit your participation to simply consulting the content published on the Open Innovation Portal, participating in the events organised and receiving in-depth material on the topics covered therein - therefore, without the need to use the functions described above - in this case it will be sufficient for you to provide the following personal data:

  1. First and last name (reserved and mandatory);
  2. Valid email address (reserved and mandatory);
  3. Company affiliation (confidential and optional)
  4. Role held (confidential and optional)
  5. Telephone number (confidential and optional)

 

With regard to the personal data referred to in points c) d) e), we would like to point out that they are not compulsory and are functional for better organisation of the event and proper management of participants.

Alternatively, you can also register - useful for simply consulting the content published on the Open Innovation Portal - via the main social networks such as Linkedin, Facebook and Twitter.

For this purpose, it will be sufficient for you to enter the credentials (email address and password) used by you to access the aforementioned social networks, and further authorisation to process the data requested by them will be given to you during registration for the corresponding social network.

Finally, you can register with the Open Innovation Portal using the Sistema Pubblico di Identità Digitale (SPID) and the Carta Nazionale dei Servizi (CNS).

 

In the first case (SPID), the personal data relating to your access credentials (username and password) will be acquired. In the second case (CNS), you will be asked to enter your National Services Card and the corresponding pin code (personal identification number). In both cases, the system will automatically detect your tax code, which, however, will remain confidential.

In any case, the processing of sensitive and judicial data is excluded, which, if voluntarily provided by you, will be duly deleted.

 

3. Navigation data

3.1 The computer systems and software procedures used to operate the Open Innovation Portal acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols.
 This is information that is not collected in order to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. 
This category of data includes the IP addresses or domain names of the computer used by the user who connects to the site, the URI (Uniform Resource Identifier)
addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.

This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to verify its proper functioning.

3.2 Cookie Policy

For information on the cookie policy used on the Open Innovation Portal, please refer to the specific Cookie Policy published on the Portal homepage (LINK).



4. Modalities of data processing

The processing will be carried out with the aid of electronic and/or automated means, in accordance with the principles of necessity and minimisation, and so for the time strictly required to allow you to use the functions and services available on the platform. The data controller adopts appropriate technical and organisational measures to ensure a level of security appropriate to the type of data processed.



5. Data controller

Pursuant to Art. 4, par. 7 EU Regulation 2016/679, the Data Controller is Regione Lombardia (C.f. 80050050154 e P. Iva 12874720159), in the person of the President of the Regional Council pro tempore, with registered office in Milan, Piazza Città di Lombardia n. 1 (20124) Italy.



6. Data Protection Officer (DPO)

The Lombardy Region Data Protection Officer (DPO) can be contacted by you by sending an e-mail to the following address: rpd@regione.lombardia.it



7. Nature of data provision and consequences of refusal

The provision of personal data as indicated above is optional. However, since the data marked as compulsory is necessary in order to proceed with the registration and validation of your profile on the Open Innovation Portal, in the event of your refusal or the provision of inaccurate and/or incomplete information, it may result in the impossibility of validating your profile, with the consequent impossibility of using the functions on the Open Innovation Portal, including but not limited to participation in discussions, activities and initiatives of interest to you.

In this regard, please note that following the insertion of your personal data, a verification procedure is foreseen in order to verify their formal correctness, the positive outcome of which constitutes a necessary condition for the definitive validation of your profile. In the different hypothesis that you do not wish to formalise your registration to the Portal and that you only wish to participate in the events organised by Open Innovation, it will be sufficient to provide only the personal data indicated in the specific section dedicated to the events promoted by Open Innovation.   



8. Communication and dissemination of personal data

The personal data provided by you and those collected through the web services referred to in par. 2 of this statement, will be processed exclusively by the Data Controller and by the Managers appointed for this purpose in accordance with art. 28 GDPR, specifically, by Aria S.p.A. Azienda per l'Innovazione e per gli Acquisti (which carries out management and maintenance of information systems on behalf of Regione Lombardia) by Finlombarda S.p.A. (for the performance of activities and tasks instrumental to the provision of services offered by Open Innovation) by any suppliers of specific services duly appointed, as well as by their staff adequately trained in the processing and protection of your data. And this, in order to guarantee you the same level of security offered by the Data Controller.

With reference to the same personal data, ARIA S.p.A., in view of its specific competences, also performs the duties of information systems administrator, with the exclusive task of managing the proper functioning of the platform for the provision of Open Innovation services and functions.

Furthermore, your personal data will never be disclosed to third parties, except in fulfilment of possible legal obligations or motivated orders by the judicial authorities. Outside of such cases, your data will not be disseminated or communicated in any way.



9. Automated processes and profiling

The personal data provided by you are not subject to any fully automated decision-making process, including profiling, capable of producing legal effects of any kind, or even of significantly affecting you.

10. Transfer of personal data to countries outside the European Union

Your personal data collected and processed for registration on the Open Innovation Portal will not be transferred to companies or other entities outside the territory of the European Union.



11. Data retention periods

We inform you that your personal data will be kept as long as your registration on the Open Innovation Portal is active. You may cancel your registration from the Open Innovation Portal at any time. As a result, your profile will be completely anonymized and obscured, while the contributions you have provided and/or published on the Open Innovation Portal will remain accessible to active users.  Following deletion, the personal data you provided during registration will be kept for a further period of 3 years, at the end of which they will be completely deleted.

With regard to the personal data you voluntarily provide in connection with the Call Centre, Call Back, Web Chat, Write Us, Facebook interaction and Twitter services, the data retention periods are set out in the Integrated Contact Centre Services Privacy Policy.

For the Newsletter service, the data retention period is unlimited, depending on the timing of the service and your registration with the Portal. You may therefore cancel your subscription at any time by using the link shown at the bottom of the newsletter received by email. In this case, the data will be permanently deleted 13 months after your request. However, you may request the immediate cancellation of the data by writing to the following email address: presidenza@pec.regione.lombardia.it.

Browsing data, suitably anonymised, will remain available for statistical processing and will never be deleted from the servers, unless expressly requested by the user to be sent according to the procedures described in point 11 ("Rights of the interested parties") below of this information notice. The data could also be used to ascertain responsibility in the event of any computer crimes aimed at damaging the Portal.



12. Rights of the data subject

Pursuant to Articles 15-22 of the GDPR, you may assert the following rights:

  • the right to access the data, by making an appropriate request for the following information: purposes and methods of the processing; categories of personal data concerned; recipients or categories of recipients to whom the personal data have been or will be communicated; period of data retention; logic applied to the processing; identification details of the data controller and data processors;
  • right to request rectification or supplementation of data;
  • the right to request the deletion (in the cases provided for in the Regulation), transformation into anonymous form of the data and the blocking of data if processed in breach of the law, without prejudice to all storage obligations imposed by law;
  • right to data portability;
  • right to object on legitimate grounds to the processing of data.

Requests for the exercise of your rights should be sent to the certified e-mail address ricercainnovazione@pec.regione.lombardia.it, or by registered mail with return receipt to the address of Regione Lombardia, Piazza Città di Lombardia 1, (20124) Milano, for the attention of the Director pro tempore of the Direzione Ricerca, Innovazione, Università, Export e Internazionalizzazione. Furthermore, it is always possible to exercise the right to lodge a complaint with the competent Control Authority.