Privacy Policy

Last updated: 13 July 2026

Data controller

The data controller is the University of Verona — Department of Engineering for Innovation Medicine (DIMI). Office: Strada Le Grazie 15, 37134 Verona (VR), Italy. Certified email (PEC): ufficio.protocollo@pec.univr.it. Data Protection Officer (DPO): Prof. Mirko Faccioli, who can be contacted at dpo@ateneo.univr.it.

Nature of the site and data processed

This site is an informational showcase for the VITAM.BIO research project. It does not require or collect users' personal data: there are no contact forms, newsletter sign-ups, registrations or restricted areas, and no profiling activity. The only data that may be processed is navigation data (technical logs) collected automatically by the hosting provider for the operation and security of the site — for example IP addresses, date and time of access, and technical information about the device or browser. This data is not used to identify users or for marketing purposes.

Purposes and legal basis

Technical navigation data is processed solely to ensure the operation, security and correct delivery of the site (legal basis: the controller's legitimate interest in the security and continuity of the service, Art. 6(1)(f) GDPR, and related technical obligations). The site carries out no processing for marketing or profiling purposes.

Cookies

The site uses only the technical cookies necessary for it to function and does not use profiling cookies or third-party statistical analysis tools. See the Cookie Policy for details.

Recipients and data processors

Technical data may be processed by the hosting provider to the extent necessary to deliver the service. Hosting is provided by Hostinger International Ltd., acting as a sub-processor under Art. 28 GDPR and offering its own GDPR-compliant Data Processing Agreement (DPA). The data is neither disclosed nor sold to third parties for commercial purposes.

Data transfers

Navigation data (server logs) is stored on infrastructure located within the European Union. No transfers of data to non-EU third countries are envisaged for the hosting infrastructure.

Retention

Technical logs are retained by the hosting provider for the time strictly necessary for security and diagnostic purposes, in accordance with its policies and applicable law.

Rights of data subjects

Data subjects may exercise the rights provided by Art. 15-22 GDPR: access, rectification, erasure, restriction, objection and data portability. It is also possible to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it). To exercise your rights or for any request concerning the processing of your data, you can contact the Controller at privacy@ateneo.univr.it.

Changes

The controller reserves the right to update this policy. Changes will be published on this page together with the relevant update date.

Legal references: Regulation (EU) 2016/679 (GDPR); Legislative Decree 196/2003 as amended by Legislative Decree 101/2018; measures of the Italian Data Protection Authority.