IMPACT project markIMPACTPrecision pathology researchBack to home

Legal

Privacy Policy

Last updated: 12 July 2026

This Privacy Policy explains how personal data is processed when you visit this website and when you contact the IMPACT project consortium, in accordance with Regulation (EU) 2016/679 (the “GDPR”) and applicable Italian data protection law (Legislative Decree 196/2003, as amended).

1. Data Controller

The data controller for personal data processed through this website is Genoa Instruments, host institution and lead of the IMPACT project.

A Data Protection Officer (DPO) has not been appointed, as appointment is not mandatory for the processing described here. Should one be designated, their contact details will be published in this policy.

2. Personal data we process

We process only the personal data necessary to operate this website and respond to enquiries:

  • Contact data. If you write to us (for example by email), we process the email address you use, any name you provide and the content of your message.
  • Navigation and technical data. Like any website, web servers and our hosting/CDN provider automatically record technical data such as IP address, browser and device type, referring pages, and access timestamps. This data is used for security and to ensure the correct operation of the site.

This website does not use profiling, analytics or advertising cookies and does not track visitors across sites. See our Cookie Policy for details.

3. Purposes and legal bases

  • Responding to your enquiries and managing communications with you — legal basis: our legitimate interest in replying to messages we receive, or steps taken at your request prior to a possible agreement (Art. 6(1)(f) and Art. 6(1)(b) GDPR).
  • Security and correct operation of the website — legal basis: our legitimate interest in protecting the site and its users (Art. 6(1)(f) GDPR).
  • Compliance with legal obligations to which the controller is subject — legal basis: Art. 6(1)(c) GDPR.

4. Recipients and data processors

Personal data may be processed on our behalf by service providers acting as data processors under Art. 28 GDPR, in particular our website hosting and content delivery provider and our email provider. Data may be shared with consortium partners only where strictly necessary to respond to a specific request. We do not sell personal data and we do not disclose it to third parties for their own marketing purposes.

5. Transfers outside the European Economic Area

Some providers may process data outside the European Economic Area. Where this occurs, transfers are safeguarded by an adequacy decision of the European Commission or by appropriate safeguards such as Standard Contractual Clauses pursuant to Art. 46 GDPR.

6. Retention

Contact data is retained for as long as necessary to handle your request and for any subsequent period required to comply with legal obligations or to establish, exercise or defend legal claims. Technical server logs are retained for a limited period for security and diagnostic purposes.

7. Your rights

Under Articles 15 to 22 GDPR you have the right to request access to your personal data and its rectification or erasure, the restriction of processing, and data portability, as well as the right to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.

To exercise these rights, contact us at impact@genoainstruments.com. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, or with the supervisory authority of your country of residence.

8. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or in applicable law. The date at the top of this page indicates when it was last revised.