This information is provided pursuant to the Articles 13 and 14 of the EU Regulation 679/2016 (GDPR) as well as any legislation and/or regulation implementing or created pursued to the GDPR and any national applicable laws in reference to the use of the services provided by the web site intranet.fulbright.it

The responsible entity, pursuant to Art. 4 para. 7 of the EU Data Protection Basic Regulation is:

the US-Italy Fulbright Commission, Via Castelfidardo 8, 00185 Roma, Italy, Tel. +39 064888.211, E-mail: info@fulbright.it, public web site: www.fulbright.it

In what follows, the US-Italy Fulbright Commission will be briefly referred to as “the Commission”.

People concerned

The concerned people include

• people that in past years have been awarded study or research grants by the Commission; they will be referred to as grantees
• students and researchers that have applied for grant awarding; they will be referred to as applicants
• experts that collaborate with the Commission in evaluating the grant applications, to allow a fair choice of those to be funded; they will be referred to as evaluators.

Data concerning the grantees

Purpose of processing

The Controller will process personal data to maintain a historical register of the grants awarded over the years, to get some statistical data on them and to be able to contact subsets of the grantees based on their interest area of expertise and their current position and residence.

Personal data processed

Data include:

• identification and contact information (name, date of birth, username, address, email address, phone numbers, etc.)
• origin (nationality and place of origin)
• professional information (academic history, work history, current professional position, etc.)

Legal basis for processing

The academic exchanges between Italy and the United States being promoted and funded by the Commission are to be considered in the public domain and the related information useful for the image and the professional career of the grantee and the progress of culture. The grantees always have been aware of that.

Data concerning the applicants

Personal data processed

Data include:

• identification and contact information (name, date of birth, username, address, email address, phone numbers, etc.)
• national origin (nationality and place of origin)
• professional information (education history, work history, etc.)
• professional plans
• application-related documents (copy of the application form, publications, reference letters, etc.).

Legal basis for processing

Following the applicant consent, we process personal data for the following purposes:

• to fulfil a contract, or take steps linked to a contract; this includes services rendered/offered by the Commission, when awarding a grant
• to conduct our business and pursue our legitimate interests, in particular: reporting activities against the Ministry of Foreign Affairs, networking activities, exchanging aggregated data with donors, investigating any complaints received from the applicants themselves.

Data concerning the evaluators

Personal data processed

Data include:

• identification information (name, username, email address)
• data related to the application evaluations assigned to each evaluator: a set of numeric scores and some textual comments; they aren’t disclosed to anybody, except the members of the selection committees.

Legal basis for processing

Following the applicant consent, we process personal data only for

• keeping in contact with the evaluators
• find the best-match with the applications to be evaluated, possibly keeping also into account co-identity relationships between evaluators and grantees.

Information concerning grantees, applicants and evaluators

Consequences of not providing consent

As a rule, not providing consent, at least in an implicit way, prevents the creation of a relationship that would require the subsequent processing of related data.

Withdrawing consent

Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above.

Recipients or categories of recipients

Your personal data could be shared with

• third party service providers, who will process personal data on behalf of Controller for the purposes identified above
• legal counsel representing the Controller
• judicial institutions, government authorities and/or law enforcement officials if required for the purposes above.

Security

The Controller will implement, and undertake that its data processors implement, appropriate technical and organizational measures to ensure an appropriate level of security of all personal data.

What rights do you have?

You have the following rights:

• right to access, review, and rectify your personal data; you may be entitled to ask us for a copy of your information, to review or correct it
• right to erasure: you have the right to erasure of all the personal data processed by us in case we no longer need it for the purposes for which the personal data were initially collected or processed
• right to object or restriction of processing: under certain circumstances described in the data protection legislation, you may ask for a restriction of processing or object to the processing of your personal data.

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping.

To exercise any of these rights, you can get in touch with us, using the contact details set out below.

If you have unresolved concerns, you have the right to lodge a complaint with an EU data protection authority where you live, work or where you believe a breach may have occurred.

Details on the responsible entity

The responsible entity, pursuant to Art. 4 para. 7 of the EU Data Protection Basic Regulation is:

US-Italy Fulbright Commission
Via Castelfidardo 8, 00185 Roma, Italy
Tel. +39 064888.211, E-mail: info@fulbright.it, public web site: www.fulbright.it

Our data protection commissioner is:

…

You can find the up-to-date version of this notice at the following web address:

intranet.fulbright.it/gdpr/