Information on Personal Data Processing (pursuant to Article 13 of EU Regulation 679/2016 – rev. 4 of 25/11/2025)

 

1. PURPOSE OF THIS INFORMATION

Fondazione Roma (“Foundation”) protects users’ privacy and ensures that navigation on this website occurs under secure conditions. This information constitutes the privacy and cookie policy of the site https://www.fondazioneroma.it/ (“Site”) and provides users with the information required by Article 13 of Regulation (EU) 679/2016 (“Regulation” or “GDPR”) regarding the methods, logic and purposes of personal data processing, as well as the measures adopted for their protection.

The information contained herein refers exclusively to the Site indicated and does not concern any services, pages or external sites accessible via links. The Site is managed in compliance with current regulations on personal data protection, both European and national.

Depending on the processing carried out, users may find additional information on the relevant pages of the Site. For certain activities, specific consent may be required, which will be collected through clear and transparent methods.

2. DATA CONTROLLER

The Data Controller is Fondazione Roma, with registered office at Via Marco Minghetti 17, Rome, IT-00187 (telephone 06 697645113; email: fgabrielli@fondazioneroma.it).

3. DATA PROTECTION OFFICER

The Data Protection Officer (DPO) is Maurizio Belli of Associazione Università del Lavoro ETS. The DPO may be contacted at the following email address: dpo_fr@unilavoro.org.

4. PURPOSE OF PROCESSING

During consultation of the site, data relating to identified or identifiable persons may be processed. The Foundation collects personal data when users navigate or voluntarily use services and features of the Site.
Data are processed to:

• ensure the functioning and security of the site, preventing abuse or fraudulent activities;
• manage contact or information requests sent by users via email;
  fulfill legal or regulatory obligations;
• protect the Foundation’s rights in legal proceedings, if necessary;
• carry out administrative activities related to the above purposes.

5. LEGAL BASIS FOR PROCESSING

The processing of personal data is lawful based on:

• necessity to execute contractual or pre-contractual obligations (Article 6, letter b GDPR);
• fulfillment of legal obligations (Article 6, letter c GDPR);
• legitimate interest of the controller, for example management, optimization and security of the site (Article 6, letter f GDPR).

6. TYPES OF PERSONAL DATA

6.1 BROWSING DATA

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with other data, allow users to be identified.

This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the user’s operating system and computing environment.

These data are used solely to obtain general and anonymous statistical information on site usage, to monitor its correct functioning and are usually deleted after processing. These data are not used for user identification, profiling or purposes other than those declared. The data could be used to ascertain liability in the event of hypothetical computer crimes against the site; in this circumstance, requests from the Judicial Authority will be respected.

Browsing data do not persist for more than seven days, except for any need to ascertain crimes by the Judicial Authority.

6.2 DATA PROVIDED VOLUNTARILY BY THE USER

6.2.1 DATA PROVIDED BY THE USER VIA E-MAIL

The optional and voluntary sending of messages and communications to the email addresses on the site entails the Controller’s acquisition of the user’s email address (message sender) and any other personal data spontaneously entered by the user in the communication. The data will be processed by the Controller solely to manage the request received and provide feedback to the user.

Messages sent spontaneously by users are managed only by persons authorized to process them. Processing is strictly limited to managing, fulfilling and closing the request, with consequent retention limited to the periods prescribed by regulations and provisions on the matter.

6.3 COOKIES AND OTHER TRACKING TOOLS

6.3.1 WHAT ARE COOKIES

Cookies are small text files that visited sites send to the user’s terminal (usually to the browser), where they are stored to be retransmitted to the same sites upon subsequent visits by the same user. During navigation on a site, users may receive cookies on their terminal (computer, smartphone, tablet, etc.) that are sent from sites or web servers other than those on which certain elements may reside, such as images, maps, sounds or specific links to pages of other domains different from the one on which the requested page is located; these are cookies set by a website other than the one being visited.

6.3.2 TYPES OF COOKIES

Cookies are classified according to:

• duration: session or persistent cookies
• origin: first-party or third-party cookies
• purpose: technical, analytical or profiling cookies

Cookies may have a duration limited to a single browsing session (session cookies), in which case they automatically deactivate when the user closes the browser, or they may have a predetermined expiration date and, in that case, will remain stored and active on the device used for navigation until that expiration date, continuing to collect information during different browsing sessions (persistent or permanent cookies).

Cookies enable web page functionality, improve the user’s browsing experience and provide site owners with certain information necessary to optimize functionality. By using a website, users usually accept that “proprietary or first-party” cookies and, where present, “third-party” cookies be installed on their device.

The definition of first or third party refers to the website or domain that installs the cookies. First-party cookies are installed directly by the site the user is visiting, while third-party cookies are installed by a domain different from the one the user is visiting.

Cookies are used for different functions: some are necessary to allow navigation on the site and use of its features (technical cookies); others are used to obtain statistical information, in aggregate or non-aggregate form, on the number of users accessing the site and how the site is used (monitoring or analytics cookies); still others are used to track the user’s profile, for example tastes and consumption habits, in order to display advertisements consistent with the user’s preferences (profiling cookies).

Cookie storage can be disabled in whole or in part; in such circumstances, the navigability of the site, or some sections of it, may be compromised or limited by the absence of certain features linked to disabled cookies.

To learn more about the different categories of cookies relating to this site, please read this information carefully to discover how they work, what they are for and freely choose whether to consent to their use or prevent it.

6.4 COOKIE USED ON THIS WEBSITE

6.4.1 TECHNICAL COOKIE

Technical cookies are used solely to enable navigation and allow use of its features; they are not used for additional purposes and are always first-party cookies installed directly by the controller managing the website.

Some technical cookies are essential to offer an optimal browsing experience or to enable features present on the site (so-called navigation cookies). Navigation cookies are normally session cookies and, therefore, once the browser is closed, they are automatically deactivated.

Other technical cookies are useful for storing certain preferences (for example, language or country of origin) without having to reset them during subsequent visits (so-called functionality cookies). For this reason, functionality cookies are often persistent cookies, as they remain stored on the device used for navigation, even after closing the browser, until their expiration date or until the user decides to delete them.

For information on the types of technical cookies used, please refer to the table below.

Nome del cookie	Durata
_ga	1 anno 1 mese
_ga_QJD34DQHS2	1 anno 1 mese
_ga_RP1WY94H5W	1 anno 1 mese
pll_language	1 anno 1 mese
cmplz_banner-status	1 anno
cmplz_consented_services	1 anno
cmplz_functional	1 anno
cmplz_marketing	1 anno
cmplz_policy_id	1 anno
cmplz_preferences	1 anno
cmplz_statistics	1 anno