The Data Controller is the University of Pavia, represented by the Rector, with registered office at Corso Strada Nuova 65, 27100 Pavia, Italy (Certified Email/PEC: amministrazione-centrale@certunipv.it).
The Data Protection Officer (DPO) can be contacted at: privacy@unipv.it.
The Scientific Coordinator of the Project is Prof. Giulia Scalet.
The hosting infrastructure of the platform is provided by Aruba S.p.A., appointed as Data Processor pursuant to Article 28 GDPR.
The University has entrusted PLAY YOUR GAME with the development and, where required, the technical maintenance of the dedicated website. Should the provider, in the performance of maintenance or support activities, have access to personal data processed through the platform, it shall act as Data Processor pursuant to Article 28 of Regulation (EU) 2016/679 (GDPR), under a specific data processing agreement concluded with the University.
The personal data provided by the user are processed for the purpose of enabling user registration and account management, granting access to the restricted areas of the “MyInVitroCloud” platform, managing collaborative activities among researchers, and ensuring the security of the IT systems used within the framework of the project.
The processing is carried out by the University of Pavia in the performance of its institutional tasks relating to research and the promotion of scientific collaboration, pursuant to Article 6(1)(e) of Regulation (EU) 2016/679 (GDPR) and Article 2-ter of Italian Legislative Decree No. 196/2003, as amended.
Pursuant to Article 13(3) and Article 14(4) of Regulation (EU) 2016/679 (GDPR), where the Data Controller intends to further process personal data for a purpose other than that for which the personal data were collected, the Data Controller shall, prior to that further processing, provide the data subject with information on that other purpose and with any relevant further information.
The categories of data processed relate to registered users and research materials uploaded to the platform, and may include:
The user is responsible for ensuring the lawfulness of the content uploaded to the platform, verifying whether such content contains information subject to confidentiality obligations, and ensuring that it complies with the applicable legislation on personal data protection and intellectual property rights.
The user shall indemnify and hold harmless the Data Controller and the website administrators from and against any claims, liabilities, or damages arising from any infringement of copyright and/or intellectual property rights.
Data are processed in accordance with the principles of lawfulness, fairness, transparency, data minimization, and integrity set out in Article 5 of the GDPR, using both paper-based and electronic means.
Data sharing is carried out through:
Registered users may access only the information and content for which they have been authorized according to the access profiles defined within the platform.
Where materials containing personal data are uploaded (subject to the conditions set out in Section 7), access is restricted to the individuals authorized within the relevant project or working group.
Authorized personnel (platform users) are bound by confidentiality obligations.
Appropriate technical and organizational measures have been implemented, in accordance with Article 32 of the GDPR and AgID Circular No. 2/2017, to prevent unauthorized access, loss, disclosure, or unlawful processing of personal data, including:
The provision of personal data is voluntary; however, it is necessary in order to access the “MyInVitroCloud” collaboration platform (www.myinvitrocloud.com).
The retention period for personal data is determined in accordance with the principle of storage limitation and is proportionate to the purposes for which the data were collected. In particular:
Requests of this nature must be submitted exclusively by e-mail to: support.myinvitrocloud@unipv.it
Data processed for security purposes will be deleted or anonymized as soon as they are no longer necessary for the purposes for which they were collected and, in any event, no later than six months after collection, unless a longer retention period is required by law.
The personal data of users may be accessed and processed, in compliance with the applicable data protection legislation, by public authorities where required by law, as well as by employees and collaborators of the competent offices of the entities involved, who have been duly authorized and appropriately instructed by the Data Controller, or by the providers of the platforms used to deliver the services.
External service providers are contractually bound to process personal data in accordance with the applicable European data protection legislation, including the implementation of technical and organizational measures appropriate to the nature of the processing activities.
IT service providers are appointed as Data Processors pursuant to Article 28 of the GDPR, following verification that they provide sufficient guarantees for compliance with the applicable data protection requirements.
All data are stored in data centers located within the European Union. No transfers of personal data outside the European Union are envisaged.
The platform is intended for the sharing of scientific and technical documentation. The upload of datasets or materials containing personal data is not permitted, unless expressly authorized and carried out in compliance with the applicable data protection legislation.
Research materials uploaded by users are accessible exclusively to individuals authorized within the platform and in accordance with the access profiles defined for the relevant projects or working groups.
The personal data collected for the registration and management of platform users will not be disclosed to the public. Such data may be communicated only to persons authorized to process personal data and to service providers acting on behalf of the University in compliance with the applicable legislation.
PLAY YOUR GAME has been authorized to access the content of the website’s informational pages.
The University has entrusted PLAY YOUR GAME with the development and, where required, the technical maintenance of the website. Should the provider, in the performance of maintenance or support activities, have access to personal data processed through the platform, it shall act as Data Processor pursuant to Article 28 of Regulation (EU) 2016/679 (GDPR), under a specific data processing agreement concluded with the University.
The platform uses technical cookies only, which are strictly necessary for its operation and user authentication.
The platform does not use:
Technical cookies (or equivalent technologies) are essential for the proper functioning of the website and are necessary to:
These technical cookies do not collect users’ personal data for profiling purposes.
Further information is available in the dedicated Cookie Policy published on www.myinvitrocloud.com.
Pursuant to the GDPR, data subjects may exercise the following rights:
Requests to exercise these rights should be submitted by e-mail to: support.myinvitrocloud@unipv.it
Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it).
This Privacy Notice may be updated from time to time.
Any amendments will be communicated through the official channels of the institutions involved and published on www.myinvitrocloud.com.
By accessing the “MyInVitroCloud” collaboration platform, users may view and share non-public information and materials.
Users undertake to:
Materials uploaded to the platform shall remain the property of their respective authors and/or affiliated institutions.
Users are granted a limited, non-exclusive, non-transferable licence to use such materials solely within the “MyInVitroCloud” collaboration platform.
Any external reuse, publication, distribution, or disclosure of the materials requires the prior written authorization of the author who created them or of the relevant affiliated institution.
Users warrant that they upload only materials for which they hold the necessary rights or have obtained the appropriate authorization.
All content uploaded and/or shared through the platform (including, but not limited to, documents, images, datasets, technical specifications, textual information, analyses, and draft publications) shall remain the property of the author who created it or of the relevant affiliated institution.
The upload and/or sharing of such content shall not result in the transfer of ownership or the granting of any implied licence to the associated economic copyright or other intellectual property rights.
The upload or sharing of materials grants authorized users of the project a limited, non-exclusive, non-transferable internal licence to use such materials solely for the following purposes:
Any other use is prohibited unless the prior written authorization of the author has been obtained.
The following activities are prohibited:
Users are responsible for ensuring the lawfulness of the content they upload, verifying whether such content contains information subject to specific confidentiality obligations, and ensuring that it complies with the applicable legislation on the protection of personal data and intellectual property rights.
Users shall indemnify and hold harmless the Data Controller and the website administrators from and against any claims, liabilities, or damages arising from any infringement of copyright and/or other intellectual property rights.
Users who upload content to the platform warrant that the collection, use, and any sharing of the data contained in the uploaded materials are carried out in compliance with the applicable legislation and under the sole responsibility of the user uploading such content.
Any use of the materials for:
requires the prior written authorization of the author or of the institution holding the relevant rights.
The original authors must be properly acknowledged, and substantial intellectual contributions shall be recognized in accordance with accepted academic practices, including, where appropriate, co-authorship.
Upon agreement between the Parties, materials may be made available under specific licences (e.g., Creative Commons CC BY-NC).
In the absence of any specific indication, the standard provisions of applicable copyright law shall apply.
Upon the conclusion of the project or the termination of the “MyInVitroCloud” collaboration platform: