Privacy policy document for the MRBS - INFN Pisa service

Name of the service

MRBS - INFN Pisa

portale.pi.infn.it/mrbs/

Description of the service

The service MRBS - INFN Pisa enables personnel affiliated to organizations with which we collaborate, such as the University of Pisa, CNR and Scuola Normale Superiore, to access our room booking system.

Data Controller

Istituto Nazionale di Fisica Nucleare (INFN)

Via E. Fermi n. 54, 00044 Frascati (Roma)

email: presidenza@presid.infn.it

PEC: amm.ne.centrale@pec.infn.it Data Protection Officer

email: dpo@infn.it

Contact Person

Servizio Calcolo e Reti
Istituto Nazionale di Fisica Nucleare (INFN) - Sezione di Pisa
Edificio C – Polo Fibonacci Largo B. Pontecorvo, 3 – 56127 Pisa
email: gruppo.calcolo AT lists.pi.infn.it

Jurisdiction

IT-RM Italy Rome

Processed data

The following personal information is requested from the Identity Provider server of your home organisation every time you log in to the service:

• Name (cn)
• Email address
• Unique ID used to identify the user (eduPersonPrincipalName or SAML persistent ID/eduPersonTargetedID)
• Affiliation (eduPersonAffiliation, eduPersonScopedAffiliation)

Purpose of the processing of personal data

Personal data and log files are used for:

• User authentication and authorization

Regular disclousure of personal data to third parties

Personal data is not regularly disclosed to third parties.

Data retention

Personal data is stored until the user asks to be removed from the service by interacting with the contact person for the service. Access logs are deleted after 12 months.

Transfer of personal data outside the EU or EEA

Personal data shall not be transferred outside the European Union or the European Economic Area.

How to access, rectify and delete the personal data

Get in contact with the contact person for the service. To rectify the data released by a Home Organisation, contact that Home Organisation’s IT helpdesk.

Data protection code of conduct

Personal data will be protected according to the Code of Conduct for Service Providers, a common standard for the research and higher education sector to protect the user’s privacy.