Privacy Policy

Please note that this website only uses technical cookies or other similar tools (e.g. analytics cookies). The use of cookies aimed at creating profiles of the user (so-called profiling cookies), aimed at sending advertising messages in line with the preferences expressed by the user while surfing the web, is excluded.

Below is a description of how the https://bigmsdata.org/ website is managed with regard to the processing of the personal data of users and visitors.

This information is provided pursuant to Articles 13-14 of Regulation (EU) 2016/679 on the protection of personal data, better known by its acronym ‘GDPR’).

Identity and contact details of the Data Controller

The Data Controllers are L’Associazione Italiana Sclerosi Multipla – AISM APS/ETS, C.F. 96015150582, with registered office in Rome, Via Cavour n. 181/a, National Headquarters in Genoa, Via Operai 40 and the Fondazione Italiana Sclerosi Multipla – FISM ETS, C.F. 95051730109, with registered office in Genoa, Via Operai 40.

You may request information on the essential content of the agreement by writing to the following e-mail address

richiesteprivacy@aism.it

Data Protection Officer

The Italian Multiple Sclerosis Association and its Foundation have appointed a Data Protection Officer (hereinafter, ‘DPO’ or Data Protection Officer) who can be reached at the following addresses

dpoaism@aism.it, dpofism@aism.it

Type of data processed and storage period

Browsing data and personal data (e.g. e-mail address first name and surname)

The computer systems and software procedures used to operate the site acquire, during their normal operation, some personal data whose transmission is necessary in the use of Internet communication protocols.

This category of data includes IP addresses, the type of browser used, the operating system, the domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment, the length of time spent on the individual page, internal path analysis and other parameters relating to the user’s operating system and computer environment.

Further information on the processing of user data with respect to any services requested can be found or viewed on the specific pages of the site set up for such services and in related information.

Cookies and other tracking systems

Data are provided by the data subject by browsing the website, which uses its own cookies for technical purposes only and does not collect or transfer personal data of users without their knowledge.

Please note that the website contains hyperlinks to third-party websites, appropriately indicated with <title> tags at mouseover, which have privacy policies that are not related to that of the Data Controller. The user can decide whether or not to continue accessing and browsing the other site.

The only processing carried out on this website concerns the production of statistics through the use of analytics cookies, with pseudonymised data.

Purpose of processing and legal basis

Personal data are collected and processed in compliance with the principles of the European Data Protection Regulation (Art. 5 GDPR), exclusively for the following purposes:

– To enable site navigation and the use of services:

– navigation or session cookies, to ensure normal navigation and use of the website and allow, for example, access to reserved areas;

– functionality cookies, to allow the user to navigate according to a set of selected criteria (e.g. remembering the choices made) in order to improve the service rendered to the same.

For the above points, since these are necessary processing operations, in accordance with article 122, paragraph 1 of the Privacy Code, the user’s consent is not required.

– Analytical cookies, which help us to improve our website by collecting and reporting information on the use of the same by the user; for this type of cookie you will be asked for specific consent;

AISM does not use cookies aimed at creating user profiles (so-called profiling cookies) designed to send advertising messages in line with the preferences expressed by the user when browsing the web.

The processing of the data collected is necessary for the purposes indicated above and therefore their absence would make it impossible for the user to operate and navigate the site.

Recipients of personal data

Personal data may be processed by the Data Controller’s internal staff (e.g. employees) previously identified and appointed as ‘Persons authorised to process personal data’, who are given appropriate instructions regarding measures, precautions and modus operandi, all aimed at the effective protection of personal data.

In relation to the aforementioned purposes, personal data are generally processed using manual, computerised and telematic tools with logic strictly related to the purposes themselves and, in any case, in such a way as to guarantee the security and confidentiality of the data, in addition to compliance with specific legal obligations.

Transfers of personal data

No personal data are transferred outside the European Economic Area or to international organisations.

User’s privacy rights

Pursuant to Articles 15 to 22 of the GDPR, you have the right to request from AISM at any time, in the cases provided for, access to your Personal Data, to rectify or erase them or to object to their processing, to request the restriction of their processing, as well as to obtain in a structured, commonly used and machine-readable format the data concerning you.

Furthermore, the user has the right not to be subjected to a decision based solely on automated processing.

In any case, he/she always has the right to lodge a complaint with the Data Protection Authority or to take legal action (pursuant to Articles 77 and 79 of the GDPR, respectively), if he/she considers that the processing of his/her personal data is contrary to the legislation in force.