Privacy statement and cookie policy

Pursuant to Regulation (EU) 2016/679 (GDPR) and Legislative Decree No. 196 of June 30, 2003, as amended, and more generally in accordance with the principle of transparency established by the GDPR, this policy describes the types of data relating to Users who visit our web pages and use any services provided through them, as well as how such data is collected, shared, and protected.

Automatically processed data and purposes of processing

When browsing this website, reading its pages, or downloading the information it contains, the website automatically collects certain browsing data, the transmission of which is inherent in the use of Internet communication protocols.

This category includes: the User’s IP address, the type of browser used, the addresses of the websites from which the site was accessed, the pages visited within the site, the time of access, the numeric code indicating the status of the response provided by the server, and other parameters relating to the User’s operating system and IT environment.

This data is not collected for the purpose of associating it with identified Users, but is used for the following purposes:

  1. To ensure the proper functioning and security of the site and to make the site more useful to visitors (technical purposes);
  2. To obtain aggregated information on the use of the site in order to improve the user experience and accessibility (anonymous statistical analysis);
  3. To enable the display of integrated third-party graphic resources, fonts, and multimedia components (use of external content).

This data may be used to determine liability in the event of cybercrime or actions that damage the site.

No information relating to Users/visitors will be sold, shared, or used for commercial purposes.

Data voluntarily provided by users and purposes of processing

The optional, voluntary, and explicit submission of personal data while browsing the site, for example by registering for the Newsletter or submitting a request for patronage, results in the subsequent collection of such data solely for the purpose of responding to Users’ requests and managing the related services. Processing carried out for these purposes is based on the User’s specific consent, and the data is retained only for the duration of the required activity.
Users may unsubscribe from the Newsletter service at any time, and their email address and the data provided will be deleted.The optional, explicit, and voluntary submission of personal data to the addresses indicated on this site or through specific contact request forms results in the processing of the sender’s email address, which is necessary to respond to requests, as well as any other personal data included in the message. The processing of special categories of personal data or judicial data is excluded; if such data is provided by Users, it will be deleted.

Personal data provided by Users is used to manage online services relating to FBK websites solely for purposes connected with the institutional objectives of scientific research and administrative procedures and may be used to determine Users’ liability in the event of cybercrime committed against the site.

Users should always be aware that personal data may be downloaded by so-called web scrapers or web crawlers. Although FBK has adopted certain technical and procedural measures to mitigate the risk of web scraping, we cannot guarantee that web scraping will not occur.

Third-Party Cookies and Services (Assets & CDNs)

A cookie is a small text file that websites send to a browser and that is stored on the User’s device, such as a personal computer, mobile phone, tablet, or other device. These files allow the website to monitor, personalize, and store information about each User’s session, such as language and preferred settings, which may facilitate subsequent visits and make the site more useful to the User. A “session” refers to the period of time the User spends on a website. Cookies play an important role in improving the User experience on the web.
This information may be reused during the same visit to the website (session cookies) or at a later time, including after several days (persistent cookies).

When browsing the site or using our services, Users may consent to our use of cookies through the dedicated pop-up banner.Users may also prevent cookies from being generated and delete them by selecting the appropriate settings in their browser.

Our website uses the following cookies:

Based on the characteristics and use of cookies, several categories can be identified:

  • technical cookies for browsing and functionality, used solely to ensure the proper functioning of the website and of the newsletter;
  • analytical cookies for collecting aggregated information on the number of Users and how they visit the website;
  • third-party profiling cookies used to provide additional services.

Technical Cookies and Necessary Third-Party Services

These are cookies and resources necessary for the website to function properly, for the website interface to load correctly, and to ensure security, fast loading times, and the proper display of graphic elements. These third-party cookies and services are used exclusively for the technical and functional purposes described above and not for user profiling or tracking. Their use therefore does not require the User’s consent.

 

Domain / Resource Provider Description Duration Privacy policy
cdnjs.cloudflare.com Cloudflare, Inc. Deployment of JavaScript and CSS libraries to optimize site performance and security. User session https://www.cloudflare.com/it-it/privacypolicy/
ajax.googleapis.com Google Ireland Ltd. Loading jQuery libraries and essential scripts for interface interactivity. User session Privacy Policy – Privacy and Terms – Google
www.gstatic.com Google Ireland Ltd. A static domain used to efficiently load graphic assets and technical components. User session Privacy Policy – Privacy and Terms – Google
ww.google.com/recaptcha/

(and gstatic.com subdomains)

Google Ireland Ltd. Protection of contact forms against spam and automated bots (api.js, which manages the ENID cookie), including management of the interface’s graphic resources Up to 13 months (ENID cookie) Privacy Policy – Privacy and Terms – Google
kit.fontawesome.com Fonticons, Inc. Loading the code required to display vector icons.
The libraries are hosted directly on the Foundation’s servers.
User session Font Awesome Privacy Policy
ka-p.fontawesome.com Fonticons, Inc. Technical telemetry service and icon kit (Pro/Performance version). User session Font Awesome Privacy Policy
real_cookie_banner*, real_cookie_banner*-tcf, real_cookie_banner-test Real cookie banner (devowl.io) Management of the cookie banner and user consent preferences. 365 days Devowl Privacy Policy

Analytical cookies

FBK’s institutional websites use Matomo, a data analytics service designed to monitor website user visits in an aggregated and anonymous manner. Statistics services collect anonymized data about website visitors. The data allows us to better understand visitors and optimize the website. These cookies are treated as technical cookies and, therefore, their installation does not require the User’s prior consent.

Domain / Resource Provider Description Duration Privacy policy
_pk_id (Integration) Matomo (First party / Fondazione Bruno Kessler) Analytical cookie. It collects statistics in aggregated and anonymous form (visits, time spent, pages viewed) to optimize the website. 13 months Matomo Policy / FBK Policy
_pk_ses (Integration) Matomo (First party / Fondazione Bruno Kessler) Session analytical cookie. Temporarily stores a visitor’s browsing data during a single visit. 30 minutes Matomo Policy / FBK Policy

Newsletter-related cookies

The website offers a newsletter subscription service, and cookies may be used to remember whether Users are already registered. The duration of newsletter cookies can be persistent or variable depending on the action taken by the user. The newsletter management service used is MailerLite, which supports User activity on the institutional website. Specifically, the standard technical cookies used by MailerLite forms are:

  • mailerlite:webform:shown: Records whether the form (e.g., a pop-up) has already been displayed to the site visitor in order to comply with behavioral settings (e.g., not displaying it again for a certain number of days if the User closes it).
  • mailerlite:session_id: A technical session identifier used to manage the visitor’s interaction with the form.
  • mailerlite:forms:submitted:[ID]: Stores whether a User has successfully submitted a specific form, identified by its ID, so that the invitation to subscribe is not displayed again.

These markers are necessary for the proper functioning and usability of the registration form.


Third-party profiling cookies

Certain services external to FBK, such as Google Fonts, Google Maps, and YouTube, may use their own cookies for User profiling purposes.These cookies are installed by third parties other than FBK (Google), and their installation requires the User’s consent. If consent is denied, they will not be installed. Without such consent, profiling cookies will not be installed, and the display of videos or other content may be blocked or restricted until consent is provided.

Users can learn more about the relevant processing methods and customize their options and preferences by consulting the provider’s privacy policy:

Domain / Resource Provider Purpose of data processing Privacy policy
www.youtube.com / youtube-nocookie.com Google Ireland Ltd. Embedding and playing multimedia videos, storing viewing preferences and profiling (subject to the user’s consent). Privacy Policy – Privacy and Terms – Google

 

Managing cookies and third-party services in the browser

Users may disable, remove, or block cookies installed on their devices by adjusting the settings of the browser installed on their device, for example by consulting the browser’s Help section or enabling the DNT (Do Not Track) option, if available. Users may also prevent connections to third-party domains through:

  1. Browser settings: Block third-party scripts, although doing so may affect the appearance and functionality of the site.
  2. Dedicated extensions: Use add-ons such as uBlock Origin, Privacy Badger, or NoScript to monitor and selectively block requests to specific domains.

FBK does not guarantee that the website will function fully if cookies are disabled.  If Users block the use of cookies in their browser, certain services may be unavailable or some website features may be limited.Some browsers can be configured to apply specific cookie rules to different websites, providing more precise control over privacy. Instructions for disabling cookies in browsers:

Data processing methods and retention

The Foundation’s goal is to minimize the amount of personal data collected through its various processing activities. Where the retention period is linked to the duration of cookies, it corresponds to the lifetime of the cookies themselves; where data is retained for operational purposes or to provide information to users, the retention period will not exceed 13 months.

Personal data is processed primarily using electronic procedures and systems and in a lawful, fair, and relevant manner, limited to what is necessary to achieve the purposes of the processing and only for the time strictly necessary to fulfill the purposes for which the data was collected, in accordance with the principles set out in Article 5 of the GDPR.
Specific security measures have been implemented to prevent data loss, misuse or improper use, and unauthorized access.  All technical and organizational measures adopted by FBK to ensure the proportionality and necessity of the processing and to prevent unlawful access, unauthorized modification, loss, and breaches of personal data are available at the following link: bit.ly/MisureFBK. No automated decision-making or profiling is carried out.

Methods of processing and disclosure of personal data

Personal data available on the website and through the related online services is processed mainly at the Technology Hub in Povo, Via Sommarive 18, 38123 Trento. It is processed only by staff of the Communications and External Relations Unit and by designated contacts responsible for managing websites updated by staff of the Research Centers and the FBK Administration and Research Support Services Division, each with respect to the website(s) under their responsibility.Personal data may also be processed by the providers of the services offered, who have been designated as Data Processors pursuant to Article 28 of the GDPR; these providers are generally located in the European Union or in countries for which the Commission has adopted an adequacy decision regarding the protection of personal data or, in the absence thereof, through the signing of Standard Contractual Clauses (SCCs) for data protection adopted by the European Commission with the provider.

The data collected will not be disseminated or disclosed to third parties except as provided by law and, in any event, only in the manner permitted by law.

Rights of data subjects

Users (Data Subjects) have the right to contact the Data Controller at any time to exercise the rights set out in Chapter III of the GDPR and, in particular, to:

  • request confirmation as to whether their personal data is being processed;
  • obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data has been or will be communicated and, where possible, the storage period;
  • request rectification and deletion of personal data;
  • obtain the limitation of the processing;
  • object to the processing at any time.

The Data Subjects have the right to withdraw consent at any time, without affecting the lawfulness of any processing carried out on the basis of that consent before it was withdrawn.
For information and contacts specifically related to the protection of personal data, including the exercise of the rights listed above, please email: .
Data subjects have the right to lodge a complaint with the Data Protection Authority.

Data Controller

The Data Controller is Fondazione Bruno Kessler (FBK), headquartered at Via Santa Croce 77, Trento. The Foundation’s Data Protection Officer can be contacted by email at

Changes to this policy

The Data Controller reserves the right to make any necessary changes to this policy, currently updated as of October 8, 2026, and to provide Data Subjects with the widest possible notice of such changes.


See also “Fondazione Bruno Kessler’s Social Media Policy“