Privacy Policy
Personal data collected and their purposes:
If you create a personal account and access the private session of the website there will be treated the following personal data: an e-mail address, the log-events (utilization data) and, in case you use the growth self-monitoring tool you will find within the private session, the age, length and weight of your child. The above-mentioned data will be stored in the website server for two purposes:
1- to allow you to access the site private session, containing the educational pages and the self-monitoring tool;
2- to allow the TAPE-Obesity researchers to assess whether the number of log-events, which is a proxy of the website use intensity, correlates with the body mass index of the users’ children at the end of the study.
Data controller and data processor:
The data Controller is the University of Verona (Via S. Francesco, 22, 37129 Verona VR. privacy@ateneo.univr.it. +39 045/8028752) and the Data Processor is Webmotion s.r.l. (Via Felice Cavallotti, 10, 37124 Verona VR info@webmotion.it +39 0458350569).
Data Protection Office (DPO):
The DPO can be contacted at DPO@ateneo.univr.it.
Data treatment modes:
The server hosting this website will store the data in a crypted way, i.e., it will change all the data into codes, so that they cannot be associated with the actual entered data in case of server violation. Moreover, in no case, you shall enter data that make your child identifiable. In fact, the account username will be the random pseudonym the doctor gave you when you gave the written consent for your child to participate in the TAPE-Obesity study, and your password shall not be a personal name but a safe combination of letters, numbers and special characters. In addition, the growth-monitoring tool you will find in the private session will require that you enter your child age in months and not the birth date.
Place of the data treatment:
The data is processed at the operational offices of the Data Controller and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User's Personal Data may be transferred to a country other than the one in which the User is located. For further information about the location of the processing, the User can refer to the section concerning the details of the processing of Personal Data.
Duration of data treatment:
Personal Data is processed and stored for the time necessary for the purposes for which they were collected. At the end of the TAPE-Obesity Study, the data Processor will remove all the data from the website server and the data will be anonymously processed by the Controller for the time needed for the study statistical analyses.
Legal bases of the data treatment:
The data are treated in accordance with the General Data Protection Regulation (GDPR) of the European Union. In the specific case, the treatment of personal data is made possible after informing the user, who will tick the “I READ THE PRIVACY POLICY” box at the bottom of this window, and is based on the GDPR articles 9, paragraph 2, letter a, concerning the child’s health, and on the article 6, paragraph 1, letter e, on the data treatment for purposes of public interest.
Rights of the data subjects:
The user has the right to:
1.Withdraw consent at any time. The user can withdraw consent for the processing of their personal data previously given by ticking a special box in their personal area.
2.Access their data. The user will find their personal data in the “HISTORY” tab of the growth calculator (measures inserted) and in their “personal profile” tab (log-events history).
3.Verify and request correction. The user shall verify the accuracy of their data and shall correct/remove them personally in the growth calculator.
4.Obtain the deletion or removal of their personal data. The user can request the deletion of their data by the data controller simply ticking a special box in the same window of the consent withdrawal.
5.Receive their data or have it transferred to another controller (data portability). The user has the right to receive their data in a commonly used, structured, and machine-readable format and, where technically feasible, obtain its transfer to another controller without hindrance. In the specific case, the growth calculator data will be loadable in PDF format.
6.Lodge a complaint. The user can lodge a complaint with the competent data protection supervisory authority or take legal action.