Website information

The following is information on the processing of personal data of the users who visit the CSI Piemonte websites, whether they are simply browsing or using specific services. Pursuant to Article 13 of Regulation (EU) 2016/679 "General Data Protection Regulation" (GDPR), this information is provided to people who interact with the CSI Piemonte websites only and not with other websites accessible via links.

Data Controller and Data Protection Officer

The Data Controller is CSI Piemonte, with registered office in Turin, Corso Unione Sovietica 216, represented by its Legal Representative, whose contact details are: protocollo@cert.csi.it
The Data Controller has appointed a Data Protection Officer (DPO) who can be contacted at the following email address: rpd.privacy@csi.it

Type of data treated

When browsing the CSI Piemonte websites, the following data is processed:

  • Data provided voluntarily by the user
    The voluntary, explicit sending of personal or contact information (name, surname, email, and telephone number) to the email addresses indicated in the various access channels of these websites entails the subsequent acquisition of the user's data needed to respond to requests or to provide the requested service (newsletter, event registration, information requests, applications and notices). Further information regarding the processing of user data for the purposes related to the requested services, as well as the retention periods, are provided or displayed on the specific pages of the website dedicated to these services.
     
  • Browsing data
    Personal data is not required when simply browsing websites, apart from data that is collected automatically, as described below. The computer systems and applications used to operate websites collect some personal data during browsing operations. The transmission of such data is implicit in the use of Internet communication protocols. This data is not collected for the purpose of identifying users, but by its very nature could allow users to be identified through processing and association with data held by third parties. This category of data includes the IP addresses or domain names of the devices used to connect to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the user's operating system and IT environment. This data is used for the following purposes: to obtain anonymous statistical information on website usage, to check that the websites are operating properly, to ensure greater computer security, to identify anomalies or abuse, and to respond to requests from competent authorities as part of investigations or for determining liability in court, in compliance with the regulations in force. This data is stored on servers located at CSI Piemonte for a period of 180 days.
  • Cookies
    Cookies are small text files that the web server deposits on the user's device, which are then transmitted back to the website on the user’s next visit. A cookie cannot read personal data stored on the user's hard drive. The use of cookies allows a website to remember a user's actions and preferences (such as login information, preferred language, font size and other display settings) so that they do not have to be re-entered when the user goes back to that website.

    There are different types of cookies with different features and functions: technical or functional (necessary to enable or improve browsing), analytical (they allow the website manager to collect statistical data on visits, most read pages, etc.) or profiling (they allow the sending of personalised advertising messages based on the user's tastes and preferences). They can be stored on the device permanently and have a pre-established duration (permanent or persistent cookies) or disappear when the browser is closed (session cookies). Cookies can be installed by the website visited (first-party cookies) or by other websites (third-party cookies). According to the law, only profiling cookies require the express, free, specific consent of the user, due to their commercial and intrusive nature; third-party analytical cookies that have been anonymised and technical cookies can be used without the user's consent.

    The pages of the CSI Piemonte websites use only the following types of cookies:

    1. Technical cookies:these are necessary to enable websites to be browsed safely and efficiently; they may be session or persistent cookies, and generally domain cookies such as user preference cookies and tracking cookies. Technical cookies are used to avoid the use of other IT techniques that could potentially compromise the privacy of the user browsing experience, as they do not allow the acquisition of personal data that could identify the user.
    2. Analytics cookies [Google]:These are used to facilitate website browsing and the way in which visitors arrive there, to collect information on the number of users and how they visit websites, and to compile general statistics on the service and its use. The websites use Google Analytics, a web analytics service provided by Google, which collects information only in aggregate form. Tools are used that reduce the identifying power of cookies by masking significant portions of the IP address. Furthermore, the appropriate Google Analytics settings have been activated so that Google – which acts as an independent data controller of the collected data – does not cross-reference this data with other information it already possesses. The related policy, which also includes information on cookie retention times, can be found on the Google Analytics website
    Use of this service may involve the transfer of data to countries outside Europe, particularly the United States, whose data protection legislation does not “adequately” guarantee the rights of European data subjects. For this reason, this service can only be used with prior consent.

    3. Analytics cookies [Matomo]: In order to facilitate website browsing and the way in which visitors arrive there, the website uses Matomo, an open-source web analysis software that guarantees full compatibility with European data protection laws. To analyse the most interesting points of the websites visited by the user, Matomo uses cookies for statistical purposes and collects information in aggregate form only, without associating the user's browsing IP address with any other previously collected data. Tools have been adopted that reduce the identifying power of cookies by masking significant portions of the IP address. The privacy policy can be viewed on the Web Analytics Italia website

    4. Third-party cookies: on some pages linked to social networks and other multimedia applications, other third-party cookies may be set that are capable of monitoring the browser and creating a profile of the visitor's interests. This may affect what is displayed when browsing other websites.Like the Google Analytics cookies, these cookies may involve the transfer of data to non-European countries, particularly the United States, and can therefore only be used with the user’s prior consent.

    The updated links to the cookie information are listed below, also for the purpose of allowing users to disable the related cookies installed and to know the retention periods: Youtube

    The cookies used by CSI Piemonte do not collect information about user identity. The information is always processed in aggregate and anonymous form. Except as indicated above, the CSI Piemonte websites do not use other cookies to transmit personal information and do not use other systems to track users.

How to disable cookies (opt-out)

Most browsers automatically accept cookies, but you can refuse them. If you do not wish to receive or store cookies, you can change the security settings of your browser (Internet Explorer, Google Chrome, Mozilla Firefox, Safari Opera, etc.). Each browser has different procedures for managing settings. Normally, you need to access the "options/settings/advanced preferences" section of your browser and then access a section called "privacy/security/data". Depending on your browser, you can block all cookies, choose to block only third-party cookies or choose to have cookies deleted when you close your browser.

We wish to inform users that, while disabling third-party cookies will not affect their browsing of the CSI Piemonte websites in any way, disabling technical or functional cookies may result in the websites being unavailable or some services and features not being available or not working properly. Users may also be required to change or manually enter certain information or preferences each time they visit the websites.

Furthermore, the CSI Piemonte websites contain buttons (called social buttons/widgets) that depict the icons of social networks and other websites (such as Facebook, LinkedIn and YouTube). These allow users to access social networks with one click, and the user's data will be acquired directly, whereas CSI Piemonte will not share any browsing information or user data with them. We encourage you to view the privacy policies, including those relating to the cookies used by various social networks which act as independent data controllers.

Purpose of the processing

Your personal data is collected and processed in accordance with the principles of correctness, lawfulness, minimisation of data and protection of confidentiality, exclusively for the following purposes:

  • in the case of data sent voluntarily to the email addresses indicated on the CSI Piemonte websites, to reply to requests or to provide the requested service;
  • in the case of browsing data, to obtain anonymous statistical information on website usage and, if necessary, in the event of abuse, to respond to requests from the competent authorities as part of investigations or for determining liability in court.

Legal basis for the processing

Your personal data is collected and processed in compliance with the principles of fairness, lawfulness, transparency, data minimisation and confidentiality. The legal basis for the data processing is therefore as follows:

  • in the case of data sent voluntarily to the email addresses indicated on the CSI Piemonte websites, in providing a response or the expressly requested service (Article 6, paragraph 1, letter b) of the GDPR). Providing personal data for these purposes is optional, but failure to provide it would make it impossible to activate the services provided;
  • in the case of browsing data and cookies, in fulfilling legal obligations and pursuing the legitimate interests of CSI Piemonte (Article 6, paragraph 1, letters c) and f) of the GDPR).

Data processing methods

Your data is processed electronically, exclusively by persons authorised and trained to do so by the data controller and bound by the obligation of confidentiality, and taking all appropriate technical and organisational measures to protect your rights, freedoms and legitimate interests as data subject in accordance with the law.

Data communication and distribution

Your data may be disclosed to third-party recipients – entities typically acting as data processors – whose services are necessary for the performance of the data controller's activities, judicial authorities (for the detection and prosecution of crimes), or to those entities to whom disclosure is mandatory by law. Your personal data will not be disclosed or disseminated in any way other than as described above or as specifically indicated in the privacy notices for the various services requested, nor will it be transferred to a non-European third country or be used for automated decision-making processes, including profiling.

Rights of the data subject

In the cases expressly indicated, and preferably using the specific form published on this page in the Documents section, as data subject you may exercise the rights provided for under Articles 15 to 22 of the GDPR, and may, in particular, at any time:  

  • obtain confirmation as to whether or not personal data concerning you is being processed and, in that event, have access to your data
  • have a copy of the processed data in an intelligible form
  • obtain the rectification and deletion of your data
  • request the limitation or portability of the data processed
  • make a request to object to the processing for reasons related to your specific situation

or ask for further information, by contacting the Data Controller or the Data Protection Officer using the contact details provided above. If you believe that the processing of your personal data violates the provisions of the GDPR, you may also exercise your right to lodge a complaint with the Supervisory Authority by following the instructions published on the Authority's website or by appealing to the competent courts (Articles 77 and 79 of the GDPR).  

Changes to this informative note on privacy

This document is current as of May 2022. CSI Piemonte reserves the right to update this policy at any time, in part or in full, including due to changes in applicable legislation. Users agree to periodically visit this section to review any changes and stay up-to-date on the data that is collected and how CSI Piemonte uses it.

 Information on communication initiatives

updated as of 3 September 2025

The personal data provided by you or collected by CSI Piemonte is processed according to the provisions of European Regulation 2016/679 (hereinafter GDPR) concerning the protection of individuals with regard to the processing of personal data and on the free movement of such data.

Pursuant to Articles 13 and 14 of the GDPR, we therefore provide you with the following information:

Data Controller and Data Protection Officer

The Data Controller is CSI Piemonte, with registered office in Turin, Corso Unione Sovietica 216, represented by its Legal Representative (protocollo@cert.csi.it, tel. 011-3168111). The Data Controller has appointed a Data Protection Officer (DPO) who can be contacted at the following email address: rpd.privacy@csi.it

Purpose of the processing

Your personal data is collected and processed in accordance with the principles of correctness, lawfulness, minimisation of data and protection of confidentiality, exclusively for the following purposes:

  • to allow you to register for, participate in and receive documentation relating to events organised by CSI Piemonte;
  • to inform you of further activities, events and similar initiatives organised by CSI Piemonte and to enable you to participate in customer satisfaction surveys;
  • to provide you with information on CSI Piemonte's services and solutions.

Legal basis for the processing

Providing your data is not mandatory, but it is necessary for the above purposes. The legal basis for the data processing is therefore the above purposes:

  • in the provision of a service requested by the data subject upon registration (Article 6, paragraph 1, letter b) of the GDPR;
  • in pursuit of the legitimate interest of the data controller, taking into account the relationship existing between the data subject and the data controller (Article 6, paragraph 1, letter f) of the GDPR.

Data processing methods

Your data is processed using paper and electronic means, exclusively by persons authorised and trained to do so by the data controller and bound by the obligation of confidentiality, or by entities/companies expressly appointed as data processors. Your data may be processed directly, indirectly and/or incidentally also by entities connected to the CSI Piemonte due to the services provided. Your data may also be processed through CSI's social media channels for the purposes indicated above and to send messages and content to specific user groups (targeting). With reference to this activity, CSI operates under a joint ownership scheme governed by specific agreements (addendum) that the Consortium has stipulated with the Meta and LinkedIn platforms, which are available on the their respective websites. In any case, your data will be processed by adopting all appropriate technical and organisational measures to protect your rights, freedoms and legitimate interests as data subject in accordance with the law.

Data storage

Your personal data will be processed for the purposes referred to in point 1 for a period of 5 years and, subsequently, for archiving purposes, for the period of time indicated in the company’s policies or for the mandatory retention period defined by CSI Piemonte and for the purposes referred to in points 2 and 3 until you request its deletion.

Data disclosure and transfer

Your data may be disclosed to third-party recipients – entities typically acting as data processors – whose services are necessary for the performance of the data controller's activities, judicial authorities (for the detection and prosecution of crimes), or to those entities to whom disclosure is mandatory by law. Your personal data will not be disclosed or disseminated in any way other than as described above or as specifically indicated in the privacy notices for the various services requested, nor will it be transferred to a non-European third country or be used for automated decision-making processes, including profiling.

Rights of the data subject

In the cases indicated, as data subject you may exercise the rights provided for in Articles 15 to 22 of the GDPR (including the right to obtain confirmation of whether or not your personal data is being processed and disclosed in an intelligible form; to be informed of the logic and purposes underlying the processing; to obtain the erasure, anonymisation, restriction or blocking of unlawfully processed data, as well as the updating, rectification, or, if interested, integration of the data; to object to the processing for legitimate reasons) by contacting the data controller or the data protection officer using the contact details provided above. You may also exercise the right to lodge a complaint with the Supervisory Authority or appeal to the competent courts if the processing of your personal data violates the provisions of the GDPR, in accordance with Articles 77 and 79 of the GDPR.

Erasure

If you wish to have your data erased, please send an email to comunicazione@csi.it, specifying "Request for erasure of my personal data" in the subject line.