privacy

Privacy Policy

01

Data Controller

The data controller is the Comitato Biometrics, the association that organises the International Summer School on Biometrics, Behavior and Vision.

Piazza Duomo 6, 07041 Alghero (SS), Italy · Tax code 92100630901

Legal representative: Prof. Massimo Tistarelli, President of the Comitato Biometrics.

02

Data Protection Officer

The Controller has not appointed a Data Protection Officer. For any request about your personal data, please contact the President of the Committee, Prof. Massimo Tistarelli, at biometricsummerschool@gmail.com.

03

Personal Data we Process

Personal data means any information relating to an identified or identifiable natural person (the “data subject”).

Application form: first and last name, email address, institution, department, country of residence, registration category, attendance mode, travel dates, motivation and research focus, curriculum vitae, requests for the Best Paper Contest, visa support and scholarships, and the related details (year of PhD, preferred grant, membership numbers).

Registration form (accepted participants): title, first and last name, email address, phone number, institution, student status and study course, gender (only to assign shared rooms), accommodation options, billing address, payment method, payment receipt and total amount due.

Browsing data: technical data that your browser sends when you visit the website, such as IP address, browser type and pages visited, recorded in the server logs of the hosting provider and of the University’s reverse proxy.

Email correspondence: the data you include when you write to us.

04

Provision of Data

Fields marked with an asterisk (*) are required: without them we cannot process your application or registration. All other fields are optional.

05

Purposes and legal basis

Evaluating applications and selecting participantsPre-contractual measures at your request, art. 6(1)(b)
Evaluating scholarship and travel grant requestsPre-contractual measures at your request, art. 6(1)(b)
Managing registration, accommodation, payments and the school activitiesPerformance of a contract, art. 6(1)(b)
Issuing visa support letters, on requestPerformance of a contract, art. 6(1)(b)
Accounting and tax obligationsLegal obligation, art. 6(1)(c)
Answering your emails and requestsPre-contractual measures at your request, art. 6(1)(b)
Operating and protecting the websiteLegitimate interest, art. 6(1)(f)

06

Data retention

  • Applications and CVs of candidates not admitted: until 12 months after the end of the school edition.

  • Application and registration data of participants: until 12 months after the end of the school edition.

  • Payment and accounting records: for the period required by Italian tax and accounting law (generally 10 years).

  • Email correspondence: 24 months after the last exchange.

  • Server logs: for the period set by the hosting provider.

07

Recipients

  • Members of the School Committee and organisers authorised to process the data (art. 29 GDPR), including those who evaluate applications and scholarship requests.

  • Hostinger, which hosts the website on servers in the European Union (Germany), as data processor.

  • Università degli Studi di Sassari, which manages the biometrics.uniss.it domain and provides the secure connection to the website (reverse proxy).

  • Google, which provides the school’s email service, as data processor.

  • Hotel Dei Pini, for participants’ accommodation.

  • PayPal, for credit card payments, as an independent controller.

  • The Committee’s bank, accountants and consultants, for payments and legal obligations.

  • Public authorities, when required by law.

  • Scholarship sponsors (EAB, EURASIP, IAPR, IEEE, IDEMIA), only for the evaluation of scholarship requests.

Your data are not disclosed to the public or sold to third parties.

08

Transfers outside the EEA

Some providers, such as Google, may process data outside the European Economic Area. In these cases the transfer is based on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or on the Standard Contractual Clauses (art. 44 and following, GDPR).

09

Cookies and third-party content

The website uses only one technical cookie, _lscache_vary, set by the caching system to serve pages correctly. It does not use analytics, profiling or advertising cookies, so no consent is required.

The map on the Venue page loads map images from OpenFreeMap: to show them, your browser sends your IP address to that service. The “Open in Maps” and “Add to Google Calendar” buttons open Google services only when you click them.

10

Data rights

  • Access to your personal data (art. 15)

  • Rectification, erasure or restriction of processing (art. 16, 17 and 18)

  • Data portability (art. 20)

  • Objection to processing based on legitimate interest (art. 21)

  • Complaint to the supervisory authority, the Garante per la protezione dei dati personali

To exercise your rights, write to biometricsummerschool@gmail.com or to the pr.ivacy autority:

11

Automated decisions

No decision is taken by automated means. Applications and scholarship requests are evaluated by the School Committee.

Last updated: November 2026