Privacy Policy

Introduction

This Privacy Policy (the “Policy”) sets out the data processing practices carried out through the use of the NEXUS-NESS website: https://prima-nexus-ness.org/  (the “Website”).

In this Policy, the term “Personal Data” refers to any information with which you can be personally identified, such as your name, address and email address.

By using the Website, you consent to our use of your Personal Data in accordance with this Privacy Policy.

Please read this Policy carefully before using our Website and submitting any of your Personal Data to us since it contains important information regarding the collection, use and disclosure of Personal Data when you use the NEXUS-NESS Website. It explains what happens to your Personal Data when you visit our Website, what data we collect and what we use it for.

You do not need to submit any of your Personal Data when browsing our Website. If you do not want us to process your Personal Data, please do not submit any of your Personal Data on this Website. Please note, however, that without your Personal Data, you may not be able to use some of the services offered on this Website.

The Personal Data of users who access and use the Website are processed in compliance with the current legislation on the protection of Personal Data at national and EU level. Specifically this Policy complies with the following laws and regulations:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter “GDPR”),
  • Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications), and
  • the national law on data protection, in particular the Italian Personal Data Protection Code (with amendments introduced by the Legislative Decree no. 101 of 10 August 2018 implementing the GDPR).

This information is provided only for the Website indicated above, not also for third-party websites accessible via hyperlinks (links) contained on the Website and having different domains, for which we are in no way responsible. Where we provide links to websites of other organisations, this Policy does not cover how that organisation processes your Personal Data. We encourage you to read the privacy notices on the other websites you visit.

About NEXUS-NESS

This Website contains information about the NEXUS-NESS project.

The “Fair and Sustainable Resource Allocation Demonstrator of WEFE Nexus Economic, Social and Environmental Benefits in the Mediterranean Region” project – namely NEXUS Nature Ecosystem Society Solution (hereinafter “NEXUS-NESS”) is a research and innovation project funded by the PRIMA Programme (GA n. 2042), an Art.185 initiative supported and funded under Horizon 2020, the European Union’s Framework Programme for Research and Innovation.

The project’s goal is to support a participatory WEFE Nexus transition towards sustainable planning and management of water, energy, agricultural and natural ecosystem resources in Val di Cornia (Italy), Duero basin (Spain), Wadi Naghamish (Egypt) and Wadi Jir basin (Tunisia). The central goal of the project is to prototype a comprehensive data-driven technology – a WEFE Nexus Service, namely Nexus Ness Service (NNS) – a solution to pressing needs and issues of stakeholders that shall be co-designed, co-developed, co-tested by multiple actors of the WEFE Nexus. In addition, the project aims to co-produce and co-test with local stakeholders WEFE Nexus management plans for fair and sustainable allocation of natural resources.

The NEXUS-NESS project will last 36 months from 01/06/2021 to 31/05/2024.

The project includes 13 partners from Italy, Spain, Cyprus, Germany, France, Tunisia and Egypt.  For more details please see: https://prima-nexus-ness.org/nexus-ness/consortium/

Important information

Project Coordinator

The Coordinator of the NEXUS-NESS project and organization authorized to communicate on behalf of the Consortium in matters related to this Website, is WARREDOC, Università per Stranieri di Perugia, Italy  (hereinafter “WARREDOC”), with Prof. Fernando Nardi , as responsible person (hereinafter “Project Coordinator”).

The Project Coordinator Prof. Fernando Nardi can be reached at primanexusness@gmail.com

Data Controller

In accordance with Article 4 of the GDPR, data controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

For the purposes of the GDPR, other data protection laws applicable in EU Member states and other provisions related to data protection, the Data Controller regarding the data gathered through this Website is the Project Coordinator: Water Resources Research and Documentation Centre (WARREDOC), Università per Stranieri di Perugia, Italy (hereinafter, also “WARREDOC”), with headquarters in Piazza Fortebraccio 4, 06123 Perugia, Italy; e-mail address: primanexusness@gmail.com and warredoc@unistrapg.it

The NEXUS-NESS Data Protection Officer (hereinafter “DPO”) can be reached by e-mail at primanexusness@gmail.com

Data Processors

WARREDOC acts as the main Data Processor on behalf of the NEXUS-NESS Consortium.

Personal data gathered through this Website might also be shared with other organisations in the NEXUS-NESS consortium located in the European Union (hereinafter the “EU”).

For the personal data processed by any partner in the NEXUS-NESS Consortium, the applicable legislation is the GDPR.

Joint Data Controllers

NEXUS-NESS partners are considered as Joint Data Controllers when they jointly determine the purposes and means, or at least the essential elements of these purposes and means, for data processing operations that will be performed within the NEXUS-NESS project.

In order to provide the Newsletter service, Personal Data is processed by WARREDOC, Università per Stranieri di Perugia (Italy) and Design & Data GmbH (Germany), as Joint Data Controllers.

Legal basis for data processing

There are different bases on which we process Personal Data you provide us by using our Website:

  • Consent – When you provide us with your personal data directly, for example, when you subscribe to our Newsletter.
  • Contract – The execution of a contract of which the data subject is a part.
  • Legal obligations – We may process personal data in order to meet a legal obligation.
  • Legitimate interests – We process personal data when it is necessary for us to achieve the following legitimate interests: achievement of the NEXUS-NESS project’s objectives.

How do we collect data?

We only collect identifiable Personal Data that you submit yourself as part of the Website’s form.

As you interact with our website, we may automatically collect technical data and usage data by using cookies or server logs.

What data do we collect?

The types of data being processed include:

  1. Navigation data:

Technical data, including your anonymous IP address, browser type and version, time zone setting and location, browser plug-ins, operating system and other technology on the devices you use to access this website.

Usage data includes information about how you use our website, products, and services.

  1. Personal Data voluntarily provided by users through the forms.

A. Navigation data

During the user’s navigation on the Website, the computer systems used to operate it automatically acquire some information whose transmission is implicit in the use of Internet communication protocols.

This category of data includes the IP addresses or domain names of the computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used in submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.

These data are processed for purposes related to the provision of services offered through the Website, including the guarantee of their correct functioning.

This means that if  you only use our Website for information purposes (i.e. access and viewing – not compiling the Website’s forms), certain information may be automatically sent to the server by which the website is kept available by the internet browser used on your device.

This information is technically necessary for us to display our Website to you and to ensure the stability and security of the connection and the system. Under no circumstances do we use the aforementioned data for the purpose of drawing conclusions about you personally.

The legal basis of the processing is, therefore, constituted by the execution of a contract of which the data subject is a part, pursuant to art. 6, par. 1, lit. b) of the GDPR.

In particular, Navigation data is processed for the purpose of:

  • ensure the correct functionality of the Site and the usability of its services;
  • obtain aggregated and anonymous statistical information relating to the use of the Site (such as, for example, the most visited pages, number of visitors by hour or day, geographical areas of origin, etc.).

Our website also provides access, through the links displayed at the bottom of each page, to the online presence of the NEXUS-NESS project on social media.

Cookies are stored on your device when you use our Website, only if they are selected.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our Website and also allows us to improve our site. By continuing to browse the site, you are agreeing to our use of cookies.

In this specific website only the following cookies are used:

NECESSARY COOKIES: Necessary cookies are essential to ensure the Website’s basic functionalities and security features and do not store any personal information.

ANALYTICAL COOKIES: Analytical cookies permit us to understand how visitors interact with the Website by providing us information on metrics such as the number of visitors, bounce rate, traffic source, etc. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. We give visitors the option of not having cookies from our Website. However, if you do not accept cookies, you may not be able to use some portions of services provided by our Website.  To find out more on how to manage and delete cookies, visit www.allaboutcookies.org .

As most of the online services, our website uses cookies first-party and third-party cookies for a number of purposes.

  • The first-party cookies are mostly necessary for the website to function the right way, and they do not collect any of your personally identifiable data.
  • The third-party cookies used on our websites are used mainly for understanding how the website performs, how you interact with our website, keeping our services secure, providing advertisements that are relevant to you, and all in all providing you with a better and improved user experience and help speed up your future interactions with our website.

B. Personal Data voluntarily provided by users

WARREDOC processes the data provided voluntarily by you, by filling in the Newsletter Subscription form present in the Website or by sending e-mail messages to the e-mail addresses indicated or accessible via links on the Website, for purposes connected to the provision of the services offered through the Website.

In this case, the legal basis of the processing is constituted by the execution of a contract of which the data subject is a part, pursuant to art. 6, par. 1, lit. b) of the GDPR, as well as the data subject’s consent to the processing of his or her personal data for one or more specific purposes, pursuant to art. 6, par. 1, lit. a) of the GDPR (in case of the Newsletter Subscription form).

In particular, the Personal Data you provide may be processed for the following purposes:

  • in relation to the data provided by sending, optional and voluntary, e-mail messages to the e-mail addresses indicated on the Website (which include, in particular, the sender’s e-mail address and any other Personal Data present in the message) in order to carry out the processing activities necessary to respond to user requests;
  • in relation to the data voluntarily provided through completing the Newsletter Subscription form in the “Stay in touch” section of the Website (email address and other personal data voluntarily provided by users (first name, last name, country, organization) in order to send periodic information communications on the activities and initiatives carried out within the NEXUS-NESS project and and other relevant information regarding opportunities or actions deriving from the project.

Why we process your personal information

We process your personal information provided to us as mentioned above for the following reasons:

Information regarding your visit to the website. This information is technically necessary for us to display our website to you and to ensure the stability and security of the connection and the system.

Technical data and usage data will be also used for statistical analysis. We use aggregated data about site usage (which do not identify specific users), such as the number of users who have visited certain pages of the site, or how long users are spending on a particular page, to help us optimise our site content, products, and services.

Cookies are stored on your device when you use our website, based on your choices. Depending on the choices you make during the relevant cookie function consent, the use of the cookies are: mandatory for the correct operation of the website and your visit and analytics.

Your e-mail and other personal data you voluntarily provided us (first name, last name, country, organization) if you submit it through the “Subscribe” function displayed at the right  bottom of each page and “Stay in touch” section of the Website. This Personal Data is used only in order to send you updates on the NEXUS-NESS project and other relevant information regarding opportunities or actions deriving from the project.

How long we will store your personal information

The Personal Data being processed will be kept for a period of time not exceeding that necessary to achieve the purposes for which they were collected and subsequently processed.

In particular:

  • The data provided us by e-mail will be kept for the time necessary to provide feedback to the data subject;
  • The data processed for sending informative newsletters will be kept for no more than three (3) years (the duration of the project) or until the interested party exercises the right to object.

After the conservation terms have elapsed according to the indicated criteria, the Data Controller will take measures aimed at canceling or anonymizing data that does not need to be kept for specific regulatory obligations.

How we will process your personal information

The processing will be carried out using paper and/or IT tools, also by means of persons authorized to do so, who operate under the direct authority and according to the instructions given by the Data Controller, with logic strictly related to the purposes indicated and, in any case, in such a way as to guarantee the security and confidentiality of the data processed.

We do not use your information for profiling or for automated decision-making.

The processing operations are carried out in such a way as to guarantee the security of the data and of the systems.

Security measures

We adopted specific security measures in order to minimize the risk of destruction or loss, even accidental, of the data, unauthorized access, unauthorized or non-compliant processing with respect to the purposes indicated in this Policy, as follows:

  • The access to your Personal Data is password protected.
  • The access to your Personal Data is restricted only to a limited number of individuals who need to access it. Those individuals who have access to the data are required to maintain the confidentiality of such information.
  • We install and regularly update all security and anti-virus software in use on all of our systems.

The security measures specified above, however, do not completely exclude the risk of interception or compromise of Personal Data transmitted with telematic tools.

It is therefore recommended to verify that the device you use is equipped with software systems suitable for the protection of both incoming and outgoing data transmission (such as, for example, updated antivirus systems, firewalls and spam filters).

Which are the possible recipients of your personal information

Your Personal Data may be communicated to:

  • Specifically authorized collaborators and employees of the Data Controller/Joint Data Controllers, within the scope of their duties;
  • External consultants of the Data Controller/Joint Data Controllers, within the scope of their duties, including our professional advisers, such as lawyers, auditors and insurers;
  • Authorized personnel of the EU Partners of the NEXUS-NESS project.

In particular, Design & Data GmbH, a project partner located in Germany and responsible for communication and dissemination activities, may receive and process your Personal Data for the purposes of communication and promotion of initiatives, activities and services related to the NEXUS-NESS project through the Newsletter service, in relation to the data provided through Newsletter subscription form. In this case Design & Data GmbH will act as a joint data controller, together with WARREDOC.

In any case all NEXUS-NESS partners are obliged to respect the requirements of applicable EU and national law on data protection while processing personal data (Article 39.2 of the Grant Agreement). NEXUS-NESS partners may grant their personnel access only to data that is strictly necessary for implementing, managing and monitoring the project and the GA.

  • Authorized personnel of the European Commission and the Prima Foundation, when we are required to communicate your Personal Data to them in accordance with the Grant Agreement in relation to our work on the project.
  • Suppliers of the services offered through the Website or connected to its functioning, as follows:
    • CleverReach GmbH & Co. KG for the Newsletter service.

In case it is necessary for your information to be shared with others, not mentioned above, we will inform you accordingly.

In no case will Personal Data be communicated, disseminated, assigned or in any case transferred to third parties for illicit purposes and, in any case, without providing suitable information to the data subjects and acquiring their consent, where required by law.

The possible communication of data at the request of the judicial or public security authorities remains unaffected, in the ways and in the cases provided for by law.

To which countries or international organizations we intent to transfer your information

We store Personal Data on servers located in the EU.

All project partners that may receive and process Personal Data and other data you share with us are located in the following EU countries: Italy, Spain, Cyprus, Germany, France.  All of them are required to safeguard personal data in accordance with relevant European, including the GDPR and national data protection legislation.

No Personal Data will be transferred to such project countries as Tunisia and Egypt. All Personal Data will be de-identified before transferring between EU and non-EU countries.

In order to guarantee the provision of the services of the Website, Personal Data may be transferred to reputable third-party service providers, located in the EU (CleverReach GmbH & Co. KG) that provides us with the Newsletter service is located in Germany).

In any case, Personal Data will not be transferred to countries or international organizations not belonging to the European Union that do not guarantee an adequate level of protection, recognized, pursuant to art. 45 GDPR, based on an adequacy decision by the EU Commission.

Your rights regarding your Personal Data processed by us

In accordance with the GDPR, you have the following rights regarding our processing of your Personal Data:

  • Right to withdraw consent – You can withdraw consent that you have previously given to one or more specified purposes to process your Personal Data. This will not affect the lawfulness of any processing carried out before you withdraw your consent.
  • Right of access – You can ask us to verify whether we are processing personal data about you and, if so, to have access to a copy of such data.
  • Right to rectification and erasure / to request rectification, updating and cancellation or limitation of your Personal data, if incomplete, erroneous or collected in violation of the law – You can ask us to correct our records if you believe they contain incorrect or incomplete information about you or ask us to erase your Personal Data after you withdraw your consent to processing or when we no longer need it for the purpose it was originally collected.
  • Right to restriction of processing – You can ask us to temporarily restrict our processing of your personal data if you contest the accuracy of your personal data, prefer to restrict its use rather than having us erase it, or need us to preserve it for you to establish, exercise or defend a legal claim. A temporary restriction may apply while verifying whether we have overriding legitimate grounds to process it. You can ask us to inform you before we lift that temporary processing restriction.
  • Right to data portability – In some circumstances, where you have provided personal data to us, you can ask us to transmit that personal data (in a structured, commonly used, and machine-readable format) directly to another company.
  • Right to object – You can object to our use of your personal data for direct marketing purposes, including profiling or where processing has taken the form of automated decision-making. However, we may need to keep some minimal information (e.g., e-mail address) to comply with your request to cease marketing to you.

How you can exercise your rights

At any time, a data subject can submit any of the abovementioned relevant requests to the Data Controller and the Coordinator of the NEXUS-NESS project:

WARREDOC, Università per Stranieri di Perugia, Italy, Contact details: Prof. Fernando Nardi, primanexusness@gmail.com and warredoc@unistrapg.it , Postal address: WARREDOC, Università per Stranieri di Perugia, Piazza Fortebraccio 4, 06123 Perugia – ITALY, Att. Prof. Fernando Nardi.

The request is formulated freely and without formalities by the data subject, who has the right to receive a suitable response within a reasonable time, depending on the circumstances of the case.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information or to exercise any of your other rights.  This helps us to ensure that personal data is not disclosed to any person who has no right to receive it. Depending on the circumstances, we may be unable to comply with your request based on other lawful grounds.

The data subject can avail himself, for the exercise of his rights, of non-profit bodies, organizations or associations, whose statutory objectives are of public interest and which are active in the sector of the protection of the rights and freedoms of the interested parties with regard to the protection of Personal Data, conferring, for this purpose, a suitable mandate. The data subject may also be assisted by a trusted person.

It is possible to receive more information on the purposes and methods of processing Personal Data by writing to the e-mail address primanexusness@gmail.com  and indicating “Privacy ” in the subject.

Complaints

For complaints about the way we process your data and your rights with regards to your data, you can at primanexusness@gmail.com

Without prejudice to any other administrative or judicial appeal, the data subject has the right to lodge a complaint with a supervisory authority, especially in the Member State in which he habitually resides, works or of the place where the alleged violation occurred. In particular, you have the right to make a complaint to your local Data Protection Authority (DPA) (see https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm) regarding any concerns you may have about our data handling practices.

The privacy policy on this website falls under Italian jurisdiction, the supervisory authority in Italy is the Guarantor Authority for the protection of Personal Data (Garante per la protezione dei dati personali).

To find out your rights, lodge a complaint and always be updated on the legislation on the protection of individuals with regard to the processing of Personal Data, the data subject can contact the Italian Guarantor Authority for the protection of Personal Data, by consulting the website at address http://www.garanteprivacy.it/.

Changes to the Policy

This Policy may be updated from time to time. We keep our privacy policy under regular review to make sure it is up-to-date and accurate. The date at the top of this webpage indicates when this Policy was last updated.

The NEXUS-NESS Consortium reserves the right, at its discretion, to modify this Policy  at any time. If we make material changes to it, we will provide notice through our Website, or by other means, to provide you the opportunity to review the changes before they become effective.

If you object to any changes, do not use our Website. Your continued use of our Website after we publish or send a notice about our changes to this Policy means that you are consenting to the updated Policy.