Information on the processing of personal data

Istituto Nazionale di Astrofisica, INAF,
IASF-Palermo, Istituto di Astrofisica Spaziale e Fisica Cosmica di Palermo

Information on the processing of personal data of users of the website of the National Institute for Astrophysics and for the use of its online services  

What is this information?

Pursuant to Article 13 of the EU Regulation 2016/679 the information provided below describes the processing operations performed on the personal data::

  • of the users visiting the website of the Istituto di Astrofisica Spaziale e Fisica Cosmica di Palermo of the National Institute for Astrophysics (hereinafter “INAF”), that can be accessed at oppure 
  • of those who use the online services, where avaible, provided through the website  

The information provided does not concern other online websites, pages or services that can be accessed via hyperlinks on the above websites but relate to resources outside the IASF INAF’s domain.

Data Controller

The data controller is the National Institute for Astrophysics, located in Viale del Parco Mellini n. 84, IT-00136, Roma (PEC:, centralino +39 06.355339).

Data Protection Officer

INAF has appointed a Data Protection Officer (DPO) who can be contacted at the following addresses:

Legal basis for the processing

The personal data are processed by the Data Controller in providing services through this website, exclusively for the purposes that fall within the institutional goals of INAF and of public interest or for the formalities required by law or regulation. As part of the aforementioned purposes, the processing also concerns the personal data necessary to enable the users who requests it to use online services, where available, provided through the website
Any refusal to provide personal data by the interested party makes it impossible for her/him to use the aforementioned services for which an identified registration is required. Registration for the institutional mailing list must be specifically requested, giving specific consent at the time of registration; consent can be revoked at any time, with consequent deactivation of the service, by accessing the restricted area.

Categories of personal data and purposes of the processing

Browsing data 
The information systems and software procedures relied upon to operate this web site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols.
This data category includes the IP addresses and/or the domain names of the computers and terminal equipment used by any user, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user’s operating system and computer environment.
These data are necessary to use web-based services and are also processed in order to:

  • extract statistical information on service usage (most visited pages, visitors by time/date, geographical areas of origin, etc.);
  • check functioning of the services.

However, due to their nature, they could allow the identification of the users through processing and association of data held by third parties, especially where it is necessary to ascertain responsibility in the event of cyber-attack against the website.

Data communicated by users
Sending messages, on the basis of the user’s free, voluntary, explicit choice, to the INAF’s contact addresses entail the acquisition of the sender’s contact information – which is necessary to provide a reply – as well as of any and all the personal data communicated in that manner.
Furthermore, in relation to the services that can also be used online through the website, must collect the following personal data:

  • name and surname
  • date of birth
  • home address
  • fiscal code
  • email address and phone number
  • identity document parameter

The provision of the above listed data is necessary to use the services provided through this website.

Cookies and other tracking devices

So-called session (non-persistent) cookies are used exclusively to the extent this is necessary to enable secure, efficient browsing. In particular, the website not uses cookies. The intranet web site use only technical cookies.
No sensitive data is exchanged via cookies. 
The cookies created by it do not store personal data that allow to trace and / or know directly the identity of the user and that do not represent a risk to the privacy or integrity of the devices and systems used to access the network or the website.
The user can at any time disable the use of cookies from her/his browser; this choice could cause difficulties in navigating the site.
More information on the cookie policy of this website is available at the following link: Information on cookies

Data processing and storage methods

The personal data shall be processed even through automated means by the Data Controller, by the Data processor and/or by persons who, under the direct authority of the controller or processor, are authorised to process personal data, in compliance with the aforementioned legislation.
In compliance with the principles of lawfulness, limitation of purposes and minimization of data, pursuant to Article 5 of EU Regulation 2016/679, the personal data shall be processed for no longer than required for the purposes for which they are collected, prior free and explicit consent of the user expressed at the time of registration.

Data recipients

For the purposes above indicated, the Data Controller Data my disclose the personal data to companies, organizations or associations expressly appointed as data processors by the INAF IASF Palermo, pursuant to Article 28 of the Regulation. The personal data may also be disclosed to persons who, under the direct authority of the controller or processor, are authorised to process personal data.
The personal data collected as above are also processed by staff from the INAF IASF Palermo, acting on specific instructions concerning purposes and arrangements of such processing.

Transfer of personal data outside the EU

The personal data shall not be transferred outside the EU.

Rights of data subjects

Data subjects have the right to obtain from the INAF, where appropriate, access to their personal data as well as rectification or erasure of such data or the restriction of the processing concerning them, and to object to the processing (pursuant to Articles 15 to 22 of the Regulation).
Please contact the INAF’s DPO (Istituto Nazionale di Astrofisica – Responsabile della Protezione dei dati personali, Viale del Parco Mellini, 84, IT-00136, Roma, email: to lodge all requests to exercise these rights.

Right to lodge a complaint

If a data subject considers that the processing of personal data relating to him or her as performed via this website infringes the Regulation, he or she has the right to lodge a complaint with the Garante pursuant to Article 77 of the Regulation, or else to bring a judicial proceeding against the INAF pursuant to Article 79 of the Regulation.