(pursuant to Articles 13 and 14 of Regulation (EU) 2016/679)

Premise

This Privacy Policy has been drafted in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter also referred to as the “Regulation” or “GDPR”) to inform those who interact with the website https://iccb2025.org/ (hereinafter referred to as the “Website”) about how their personal data will be processed, both through simple consultation and the use of specific services made available through the Website.

This policy applies exclusively to the aforementioned website and not to other websites or sections/pages/spaces owned by third parties that may be consulted by the user through dedicated links, such as https://www.conftool.org/iccb2025/register.php in the “Abstract Submission” section, for which the respective privacy policies should be consulted.

1.CONTROLLER AND DATA PROTECTION OFFICER

The Data Controller is the Campus Bio-Medico University of Rome (hereinafter, “UCBM“, “University” or “Data Controller“), Tax Code 97087620585 with registered office in Rome, Via Álvaro del Portillo n. 21.

The Data Protection Officer (hereinafter referred to as the “Data Protection Officer” or “DPO”) can be contacted at the following addresses:

• by e-mail, to the address: dpo@unicampus.it;

• by ordinary mail, to the address of the Campus Bio Medico University, based in Rome (RM) at via Alvaro del Portillo, n. 21, CAP 00128, c.a. of the Data Protection Officer.

2. PERSONAL DATA SUBJECT TO PROCESSING

The Controller will process the following categories of Personal Data:

a)Common data voluntarily provided

The Controller will process common types of Personal Data voluntarily provided within requests sent to the email addresses on the website.

b)Browsing data

The Controller will process common types of Personal Data collected during browsing on the Website. These Personal Data include, for example, the IP address, location (country), domain names of the computer or device used, URI (Uniform Resource Identifier) addresses of requested resources on the Website, request times, method used to submit requests to the server, file size obtained in response, numerical codes indicating the status of the server response (success, error, etc.), and other parameters related to the user’s operating system and IT environment.

The functioning of the Website involves the use of IT systems and software procedures that collect information about Website users as part of their normal operation. Although the Controller does not collect such information to associate it with specific users, it is possible to identify users either directly through this information or by using other data collected. Therefore, such data is also considered personal data.

c)Data related to the e-commerce service available on the Website

The Controller will process the following data related to registration and participation in the congress, which are connected to the e-commerce service available on the Website, including:

Registration and enrollment data: name, surname, date of birth, email, phone number, profession, and affiliated discipline;

Payment data: chosen payment method, transaction details (e.g., unique transaction identifier), billing data (address, tax code, or VAT number);

Participation preference data: selection of any specific sessions, workshops, or events;

Data necessary for technical or administrative support: requests for assistance related to registration, billing, or participation in the congress.

d)Cookies

The Controller will process Personal Data collected through cookies and other tracking tools. For more information on the Personal Data processed through cookies and other tracking tools, please refer to the related Cookie Policy.

3. PURPOSES AND LEGAL BASIS FOR PROCESSING

Your data will be processed for the following purposes:

6. a) To allow navigation of the Website and interaction with its content, including the management of Website security. The Controller will process, pursuant to Article 6.1(b) of the Regulation (legal basis), the browsing data mentioned in paragraph 2 to enable access and navigation on the Website, as well as to ensure its proper functioning (Legal basis: Article 6.1(b) of the Regulation).
7. b) To manage and respond to requests
   The Controller will process, pursuant to Article 6.1(b) of the Regulation (legal basis), the common Personal Data mentioned in paragraph 2, letter b), to satisfy a request received via the email addresses available on the website.

Providing Personal Data for this purpose is optional, but failure to provide it would make it impossible to submit the request and consequently receive a response from UCBM.

6. c) To manage registration and payment for congress participation
   The Controller will process, pursuant to Article 6.1(b) of the Regulation (legal basis), the personal data provided to enable the online purchase of congress participation, including the necessary administrative and accounting operations for finalizing the transaction (Legal basis: Article 6.1(b) of the Regulation).

Providing Personal Data for this purpose is optional, but failure to provide it would make it impossible to submit the request and consequently receive a response from UCBM.

Once provided, your Personal Data will also be processed for the following purposes:

1. d) to comply with any obligations provided for by applicable laws, regulations or EU legislation, or to satisfy requests from the authorities

The Data Controller will process, pursuant to Article 6.1, letter c) of the Regulation (legal basis: legal obligation), the Personal Data referred to in paragraph 2 above in order to comply with a regulatory obligation incumbent on the same.

1. e) to meet any defensive needs, possibly related to the detection, prevention, mitigation and detection of fraudulent or illegal activities in relation to the services provided on the site

The Data Controller will process, pursuant to Article 6.1, letter f) of the Regulation (legal basis: legitimate interest), the Personal Data referred to in paragraph 2 above in order to defend its right and/or legitimate interest in and out of court. We remind you that, pursuant to art. 21 of the Regulation, you have the right to object at any time, on the basis of your particular situation, to the processing of your Personal Data for this purpose. In the event of an objection, the Data Controller reserves the right to evaluate this request, which may not be accepted if there are compelling legitimate reasons to proceed with the processing that prevail over your interests, rights and freedoms.

4. RECIPIENTS OF PERSONAL DATA

Your Personal Data may be shared, for the purposes indicated in paragraph 3, with the following entities, collectively referred to as “Recipients”:

• Persons authorized by the Controller to process Personal Data as necessary to perform activities strictly related to the provision of services;
• Entities typically acting as data processors under Article 28 of the Regulation on behalf of the Controller;
• Entities, organizations, or authorities to whom the communication of Personal Data is mandatory by law or by order of the authorities.

5. TRANSFER OF PERSONAL DATA

Your Personal Data will not be disclosed or shared with recipients located outside the European Economic Area. If it becomes necessary to transfer personal data outside the EEA, the Controller will ensure compliance with data protection regulations through one of the methods permitted under Articles 44-49 of the Regulation.

6. DATA RETENTION

Personal Data processed for registration and billing purposes will be retained for 10 years in compliance with applicable tax and accounting laws.

7. RIGHTS OF THE DATA SUBJECT

You, as a data subject, have the right to:

• Access your Personal Data;
• Request the rectification or erasure of your data;
• Restrict or object to processing;
• Request data portability.

If you believe that the processing of your Personal Data violates applicable data protection regulations, you may lodge a complaint with the relevant supervisory authority.

8. UPDATES TO THIS PRIVACY POLICY

The Controller reserves the right to modify or update this Privacy Policy in part or entirely due to changes in applicable regulations.

9. CONTACT INFORMATION

To exercise your rights, you can contact:

• By email: dpo@unicampus.it
• By mail: Università Campus Bio-Medico di Roma, Via Álvaro del Portillo No. 21, 00128 Rome, for the attention of the Data Protection Officer.