Privacy and Cookie Policy

This Privacy and Cookie Policy describes how the personal data of users visiting the website https://rivierade.eu (hereinafter the “Website”) are processed.

The Website is dedicated to RIVIERADE – Improving modelling methods to produce climate services for resilient European seas and coasts in a decadal to multi-decadal horizon, a project funded by the European Union under the Horizon Europe programme, Grant Agreement No. 101181983.

This information is provided pursuant to Article 13 of Regulation (EU) 2016/679 (the General Data Protection Regulation, hereinafter “GDPR”).

The Data Controller is:

National Institute of Oceanography and Applied Geophysics – OGS

Borgo Grotta Gigante 42/C

34010 Sgonico (Trieste), Italy

Telephone: +39 040 21401

Certified email: ogs@pec.it

For information concerning the processing of personal data or to exercise the rights provided by the GDPR, users may contact the Data Controller using the contact details above.

OGS has appointed a Data Protection Officer, who can be contacted at:

Email: dpo@inogs.it

Browsing data

During their normal operation, the IT systems and software procedures used to operate the Website acquire certain personal data whose transmission is implicit in the use of Internet communication protocols.

These data may include:

• the IP addresses or domain names of the devices used to access the Website;

• the URI/URL addresses of the requested resources;

• the date and time of the request;

• the method used to submit the request to the server;

• the size of the file received in response;

• the numerical code indicating the server response status;

• information concerning the user’s operating system, browser and IT environment.

These data are not collected to identify individual users but may, by their nature and through association with data held by third parties, make it possible to identify them.

Purpose and legal basis

Browsing data are processed to:

• enable users to access and navigate the Website;

• ensure the security and proper functioning of the Website;

• diagnose and resolve technical problems;

• obtain statistical information about the use of the Website;

• investigate possible cybercrime or other unlawful activities affecting the Website.

The processing is carried out in connection with the performance of OGS’s institutional tasks and activities in the public interest, pursuant to Article 6(1)(e) of the GDPR, and to comply with applicable legal and security obligations.

Provision of data

Browsing data are collected automatically when users access the Website. Their provision is necessary for the Website to function and to deliver its content.

Retention period

Browsing data and server logs are retained for a maximum period of 30 days, except where a longer retention period is necessary to investigate security incidents or unlawful activities, comply with legal obligations or respond to requests from the competent authorities.

The Website does not currently provide contact forms, user registration, newsletter subscription or other services through which personal data are collected directly.

Users may nevertheless contact the RIVIERADE project or OGS through the email addresses published on the Website. Sending an email is voluntary and results in the processing of the sender’s contact details and any other personal data included in the communication.

These data will be used solely to respond to and manage the request. The legal basis is the performance of OGS’s institutional tasks in the public interest pursuant to Article 6(1)(e) of the GDPR or, where applicable, taking steps at the user’s request pursuant to Article 6(1)(b) of the GDPR.

The data will be retained for the time necessary to respond to and manage the request, without prejudice to any longer period required by law or necessary for institutional record-keeping.

Users are invited not to include unnecessary personal data or special categories of personal data in their communications.

Personal data may be accessed by:

• OGS personnel authorised to process personal data;

• service providers processing data on behalf of OGS and appointed, where required, as Data Processors pursuant to Article 28 of the GDPR;

• public authorities or other entities where disclosure is required by law.

The Website is hosted on infrastructure managed by CINECA – Interuniversity Consortium, which may process technical and browsing data on behalf of OGS for hosting, maintenance, security and technical support purposes.

Personal data will not be disclosed or disseminated except where required by law.

The Website uses Matomo Analytics to obtain statistical information about visits and understand how its content is used. The information collected may include:

• visited pages;

• date, time and duration of visits;

• approximate geographical area;

• referring page or website;

• browser and device type;

• interactions with the Website, such as downloads and outbound links;

• an anonymised version of the user’s IP address.

OGS has configured Matomo to anonymise visitors’ IP addresses, thereby reducing the possibility of identifying individual users through analytics data. The Website does not retain the visitor’s complete IP address for analytics purposes.

Matomo uses first-party cookies and similar technologies to distinguish visits and produce aggregate statistics on the use of the Website. These analytics tools are activated only after the user has given consent through the Website’s consent management platform. The legal basis for this processing is the user’s consent pursuant to Article 6(1)(a) of the GDPR.

Consent is optional and may be refused or withdrawn at any time without affecting access to the Website. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

The cookies and tracking technologies used by Matomo, including their purposes and retention periods, are listed in the Cookie Declaration available below.

Cookies are small text files that websites store on a user’s device and retrieve during subsequent visits. Similar functions may be performed by other tracking technologies.

The Website may use the following categories:

Necessary cookies

These cookies are required for the Website to operate, provide its core functions, maintain security and remember the user’s privacy preferences. They do not require consent but are described in this policy in accordance with applicable legislation.

Statistical cookies

These cookies help OGS understand how visitors use the Website by collecting statistical information. Where these cookies or similar identifiers are not strictly necessary, they are installed only after the user has given consent.

At present, this category may include cookies used by Matomo Analytics.

Preference and marketing cookies

The Website does not currently use cookies for advertising, profiling or personalised marketing purposes.

Should services of this kind be introduced, the policy and Cookie Declaration will be updated, and the relevant tools will not be activated before the user has given consent.

When first accessing the Website, users can:

• accept all optional cookies;

• reject all optional cookies;

• select individual cookie categories;

• continue using the Website with necessary cookies only.

Users can subsequently modify or withdraw their consent at any time through the Cookie settings link or icon available on the Website.

Optional cookies and tracking tools must remain disabled until valid consent has been provided.

The following declaration is generated and periodically updated by the consent management platform used by the Website. It identifies the cookies and other tracking technologies detected on the Website, including their provider, purpose, category and retention period.

Personal data are processed, as a general rule, within the European Economic Area.

If any service provider processes personal data in a country outside the European Economic Area, the transfer will take place only in accordance with Chapter V of the GDPR, on the basis of an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Questa formulazione prudenziale è preferibile alla frase della policy OGS secondo cui non avvengono trasferimenti: prima bisogna verificare il fornitore effettivo della piattaforma CMP e la configurazione di Matomo.

OGS and its service providers apply appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Under the conditions established by the GDPR, data subjects have the right to:

• obtain confirmation as to whether their personal data are being processed and access those data pursuant to Article 15;

• request the rectification of inaccurate personal data pursuant to Article 16;

• request the erasure of personal data pursuant to Article 17;

• request restriction of processing pursuant to Article 18;

• receive personal data in a structured, commonly used and machine-readable format where the right to data portability applies pursuant to Article 20;

• object to processing under the conditions established by Article 21;

• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before its withdrawal.

Requests may be addressed to OGS or its Data Protection Officer using the contact details provided above.

Data subjects who consider that the processing of their personal data infringes the GDPR also have the right to lodge a complaint with the Italian Data Protection Authority or another competent supervisory authority pursuant to Article 77 of the GDPR.

Italian Data Protection Authority – Garante per la protezione dei dati personali

www.garanteprivacy.it

The Website may contain links to websites operated by third parties. OGS does not control the processing of personal data carried out through those websites. Users should consult the privacy policies of the relevant third parties before using their services.

This Privacy and Cookie Policy may be updated to reflect changes to the Website, the services used or applicable legislation. Users are encouraged to consult this page periodically.

Last updated: 30/07/2026