SCIENTIFIC RESEARCH POLICY

pursuant to articles 13 - 14 of the General Regulation for the Protection of Personal Data of natural persons (GDPR - Reg. (EU) 2016/679)

As part of the AE4EU research project, the University of Gastronomic Sciences, as Data Controller, informs you of the following.

• Research project

The EU-funded research project will contribute to research and innovation in the development of agroecology through the achievement of several strategic objectives. AE4EU will develop a road map and framework for a European network of Agroecological Living Labs (LL) and Research Infrastructures (IR). The general objective of AE4EU is to accelerate the transition towards more sustainable agriculture and food systems and to improve the research, practice and innovation of agroecology in Europe through the strengthening of networks, development and its European participants.

The research is conducted by:

• University of Gastronomic Sciences –as Leader, autonomous Data Controller

and by the following partners

• ISARA, WUR, Coventry University, Thunen University, Via Campesina, AEEU

1. Types of personal data

The following categories of personal data that directly belongs to you and/or refer to third parties related to you will be processed:

• common personal data (name, surname, date of birth, gender, contact details etc.)
• potentially those data belonging to special categories (racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership)
• information communicated spontaneously, regarding personal opinions and experiences about the subject matter of the scientific research as described in the research policy.

All information collected in this research will be treated confidentially at all stages.

Participation in the survey is voluntary and participants can withdraw at any time.

While the results will be made available to improve agroecology research, practice, and innovation in Europe, we assure you that no report of the study results will identify you personally.

• Purposes and legal bases of the data processing

Personal data is processed for the following purposes (the legal basis is indicated in brackets by reference to the articles of the GDPR):

1. to participate in scientific research (including coordination and organization of research activity, data analysis and pseudonymization, research activity, statistical analysis of the data being researched) (ref. article 6(1)(a) and (e) and article 9(2)(e) and (j) of the GDPR);
2. for further analysis of institutional purposes related to scientific research, for example the administration of questionnaires during the research and subsequently over the next 3 years. The data processing is necessary for the performance of a tasks carried out in public interest in the pursuit of the institutional purposes connected to the progress in scientific research (ref. article 6(1)(a) and (e) and article 9(2)(e) and (j) of the GDPR);

• to develop the European agroecology network, personal data (name, surname, email, telephone number, address, etc.) will be shared within the Agroecology for Europe hub (https://www.agroecology-europe-hub.org/ website) and the hub’s users will have access to them. In the hub, data are treated as described in the privacy policy (ref. article 6(1)(a) and (e) and article 9(2)(e) and (j) of the GDPR).

• Consequences of refusing to provide data

Participation in the research is voluntary, you can withdraw at any time. The provision of personal data by the data subject is optional but essential for their processing for the purposes referred to in letters a).

In the absence of consent or incomplete or incorrect provision of certain data, it will not be possible to carry out the scientific research activities. For all non-essential data, the provision is optional.

• Methods of data processing

Data processing means the collection, recording, organization, storage, processing, modification, erasure and destruction or the combination of two or more of these operations. In relation to the aforementioned purposes, personal data processing takes place in paper and digital formats through manual, computerized and telematic tools suitable for storing and managing the data with logic strictly related to the stated purposes. And in any case, so as to guarantee the security and confidentiality of personal data, it will therefore be processed in compliance with the methods indicated in art. 5 EU Reg. 2016/679, which foresee, among other things, that the data be processed in a lawful and correct manner, collected and recorded for specific, explicit and legitimate, exact, and if necessary updated, relevant purposes complete and not excessive in relation to the purposes of the processing, respecting fundamental rights and freedoms, as well as the dignity of the data subject with particular reference to confidentiality and personal identity, through protection and security measures.

An automated decision-making process (e.g., profiling) is not established.

• Non-EU transfers

The data collected will not be transferred to a country that does not belong to the European Union (so-called third country). The processing will take place mainly in Italy and possibly in the EU or EEA. However, it could also take place in non-EU and non-EEA countries if deemed necessary for the efficient fulfillment of the objectives pursued with due respect to the guarantees given to and interests of the data subjects.

• Data retention period

Personal data will be kept for as long as necessary strictly for the purposes of the processing. At the end of the retention period, personal data will be deleted. Anonymized and/or aggregate personal data will be stored indefinitely for scientific and statistical research purposes.

• Categories of recipients

The data (only the essential ones) may be communicated:

• to the appointees and data processors, both internal to the organization of the undersigned and external, who carry out specific tasks and operations;

• in the cases and to the subjects required by the law

The data relating to the research may be communicated in anonymous and/or aggregate form:

• to other research institutions that will use the data as independent data controllers, for research purposes and for historical or scientific purposes.

Apart from the research results (produced in anonymous and/or aggregate form), the data will not be disseminated unless otherwise required by law.

• Rights of the data subjects

Considering that personal data is processed for scientific research purposes or for statistical purposes pursuant to the article 89 of the GDPR, the data subject may at any time: exercise his/her rights (access, rectification, cancellation, limitation, portability, opposition, absence of automated decision-making processes) when required against the data controller, pursuant to articles from 15 to 22 of the GDPR (available at the following link Link https://eur-lex.europa.eu/legal-content/IT/TXT/HTML/?uri=CELEX:32016R0679&from=IT#d1e2168-1-1); lodge a complaint with the data protection authority (www.garanteprivacy.it); if the processing is based on consent, revoke this consent given, taking into account that the revocation of the consent does not affect the lawfulness of the processing based on the consent before the revocation.

To exercise these rights, you can contact:

•  Data controller: University of Gastronomic Sciences, which is located in in Piazza Vittorio Emanuele, 9, Pollenzo – 12042 Bra – Italy
• The Data Protection Officer (DPO) was appointed through a service contract with Spaziottantotto Srl, VAT no. 08283280017, registered office in Via Nino Bixio n.8 - 10138 Turin (TO).

The Data Controller and the DPO can be reached at the address privacy@unisg.it