Privacy and Cookie Policy

Information on the processing of personal data and the use of cookies on the ERNEST Project website.

Last updated: 15 October 2026.

1. Scope of this notice

Under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003, as amended, this notice describes the processing of personal data relating to users who visit web.infn.it/ernest-project. It applies only to this website and not to external resources reached through links.

2. Data controller

The Data Controller is the Istituto Nazionale di Fisica Nucleare (INFN), registered office at Via E. Fermi 40/54, 00044 Frascati (Rome), Italy. Email: presidenza@presid.infn.it. Certified email (PEC): amm.ne.centrale@pec.infn.it.

3. Data Protection Officer

The INFN Data Protection Officer (DPO) can be contacted at dpo@infn.it.

4. Purposes and legal basis

INFN processes data in pursuit of its institutional purposes, including promoting scientific education and the dissemination of culture, in the performance of tasks carried out in the public interest or in the exercise of official authority.

5. Data processed

5.1 Browsing data

During normal operation, IT systems acquire data that are implicit in the use of Internet protocols, including IP address, browser type, referring website, pages visited, time of access, server response status and operating-system parameters. These data are used for anonymous statistics, proper operation and security. Except where required to investigate computer crimes, they are retained only for the time needed for security checks and in any event for no longer than 7 days.

5.2 Data provided voluntarily

Voluntarily sending messages to the addresses shown on the website entails acquiring the sender’s address and any data included in the communication. These data are used solely to reply and are retained only for the necessary period. Users are asked not to send unnecessary special categories of personal data.

5.3 Online Platform and local storage

The Online Platform does not require an account. Quiz answers and individual results are neither transmitted to nor stored by the website. Earned stamps and the unlocking of the PDF passport are stored only in the browser’s sessionStorage and are deleted when the browsing session ends. The PDF is generated directly on the user’s device and contains no name, date or other identifier.

The feedback questionnaire is hosted on Qualtrics and is reached only when the user chooses to open the corresponding link. Any information provided in the questionnaire is processed under the notice displayed by that service. On returning to the Online Platform, the website receives only a technical completion signal containing no answers, names or identifiers relating to the person.

6. Cookies and tracking technologies

The website uses only technical or session cookies strictly necessary for operation, security, technical preferences and, in restricted administration areas, authentication. It does not use profiling cookies, behavioural advertising, Google Analytics or other tracking systems for commercial purposes.

Technical cookies do not require prior consent; therefore, the website does not display an “Accept/Reject” banner. Cookies can be managed or deleted in the browser settings, although blocking technical cookies may impair some functions. Social-network buttons are simple external links and do not install cookies unless they are opened.

7. Recipients, security and transfers

Data may be processed by authorised INFN staff and by technical providers appointed, where necessary, as processors. They may be disclosed to public authorities or judicial authorities where required by law. They are not disseminated and are not transferred outside the EU. Appropriate technical and organisational measures are applied to prevent loss, unlawful use and unauthorised access.

8. Rights of data subjects

Data subjects may exercise the rights provided by Articles 15 and following of the GDPR, including access, rectification, erasure, restriction and objection, by contacting dpo@infn.it. They may also lodge a complaint with the Italian Data Protection Authority or seek judicial redress.

9. Updates

This notice may be updated to reflect regulatory or technical changes. Users are invited to consult it periodically.