INFORMATION ON THE PROCESSING OF PERSONAL DATA
 
Pursuant to Art. 13 or Art. 14 of EU Regulation No. 679/2016 of 27.04.2016 “General Data Protection Regulation” (hereinafter “GDPR”) and Legislative Decree No. 196/2003 “Personal Data Protection Code”, as amended by Legislative Decree No. 101 of 10.08.2018, laying down provisions for adapting national legislation to the European Regulation, and subsequent amendments. 
 
Data Controller
Contact details of the Data Controller: 
Name: University of Rome “La Sapienza”, Contact Details: Phone number: (+39) 06 49911, Email address: rettricesapienza@uniroma1.it, Address: Piazzale Aldo Moro n. 5, RomeWebsite: www.uniroma1.it, PEC: protocollosapienza@cert.uniroma1.it; 
Data Protection Officer (DPO): Contact details of the Data Protection Officer: Name: DPO Contact Details: Email address: responsabileprotezionedati@uniroma1.it; Address: Piazzale Aldo Moro n. 5, ZIP code 00185 – Rome;
 
Article 6(1)(e) – Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller.
Purpose of Processing: Why are my data processed? Participation in the 19th edition of the international conference “IFLA ILDS 2026: Interlending and Document Supply Conference”.
Types of Data Processed: Which personal data are processed to pursue the purpose? Category: Personal identification data, Type: First name and surname, date and place of birth, email address;
Category: Accounting, tax, and financial data, Type: Tax code and similar identifiers 
Category: Media data: Type: Audio, photos, videos 
Category: Dietary requirements, Type: Food intolerances, allergies 
Category: Data processing for the event subscription takes place through the management software SEM 2000 (all information available at this link)  
Category: Data processing for administrative and accounting operations takes place through the management software TeamSystem (more information available at this link);
Category: Data processing for the Newsletter issue and for information to participants registered to the events promoted or carried out by Symposia takes place via the web-based platform MailChimp (all the information available at: https://mailchimp.com/legal/privacy); 
Category: Data processing for abstract collections and author notification takes place through the web-based platform Conftool (more information about data security is available at this link).
 
 
Optional or Mandatory Nature of Data Provision: Is providing my data optional or mandatory? The communication of personal data as specified in this information notice is mandatory.
Consent and Possible Consequences of Failure to Provide Data: What consequences may arise in case of failure to provide data or refusal to grant consent? Impossibility of participating in the aforementioned conference. 
Data Retention: How and for how long will my data be stored? Data will be retained for as long as strictly necessary to achieve the purpose of the processing, and in any case for 18 months from the date of conclusion of the conference (September 30, 2026).
Rights of the Data Subject: What rights are recognised to the data subject? 
 
Access: The data subject has the right to obtain access to personal data concerning them, for example to obtain confirmation of whether or not such data exist, even if not yet recorded, and their communication in an intelligible form. 
Portability: The data subject has the right to receive the personal data concerning them, provided to a data controller, in a structured, commonly used, and machine-readable format, and has the right to transmit those data to another controller without hindrance from the controller to which they were provided. 
Rectification: The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning them without undue delay. Taking into account the purposes of processing, the data subject has the right to have incomplete personal data completed, including by providing a supplementary statement. 
Erasure: The data subject has the right to obtain from the data controller the erasure of personal data concerning them without undue delay, and the data controller has the obligation to erase personal data without undue delay. 
Restriction: The data subject has the right to obtain from the data controller the restriction of processing when the accuracy of the personal data is contested (for the period necessary to verify accuracy), when the processing of data is unlawful and the data subject requests restriction of its use, when the data are required in court proceedings even if the controller no longer needs them, or pending verification of whether the legitimate grounds of the controller override those of the data subject who objected to processing.
Objection: The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them pursuant to Article 6(1)(e) (for the performance of a task in the public interest) or (f) (for the pursuit of legitimate interests, including profiling based on those provisions).
Withdrawal of consent: The data subject has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. 
Lodge a complaint with a supervisory authority: Exercise of Rights and Complaint to the Supervisory Authority
How can I exercise my rights? Without prejudice to the above, the data subject may exercise their rights under Articles 15–22 of the Regulation using the contact details provided on page 1 of this information notice.
For further information, the data subject may consult the Guide for Exercising Rights published on the webpage https://www.uniroma1.it/it/pagina/settore-privacy in the dedicated section “Exercising rights regarding personal data protection” (Esercizio dei diritti in materia di protezione dei dati personali).
In the event of a violation of the provisions of the Regulation, the data subject also has the right to lodge a complaint with the Supervisory Authority (Garante per la protezione dei dati personali), pursuant to Article 77 of the Regulation, according to the template published on the website https://www.garanteprivacy.it.Categories of Data Subjects: Who are the data subjects of the processing? The data subjects are the registered participants of the “IFLA ILDS 2026” conference.
Communication Due to Legal or Contractual Obligation: Are my data communicated to fulfil a legal or contractual obligation? The communication of personal data as specified in this information notice is a legal or contractual obligation.
Dissemination of Data: Are the data disseminated? No, dissemination of data is not carried out.
Communication of Data: Are the data disseminated or communicated to third parties?
No, the data are not communicated to third parties.
Communication and Overseas Transfer of Data: Are the data communicated abroad?
Data are not communicated abroad.