Privacy Policy

This Privacy Policy is rendered in compliance with Article 13 of the GDPR 2016/679 (General Data Protection Regulation, European Data Protection Regulation) and the Authority’s Guidelines on cookies and other tracking tools – 10 June 2021. This information is provided only for the E-RIHS website (www.e-rihs.eu) and catalogue of services (catalogue.e-rihs.eu), not for any other websites that the user may reach via links. 

Who we are 

E-RIHS is the European Research Infrastructure for Heritage Science, supporting the study, interpretation, conservation, documentation, and management of cultural heritage. On 28 March 2025, the European Commission Implementing Decision (EU) 2025/709 officially established E-RIHS as a European Research Infrastructure Consortium (ERIC) under Council Regulation (EC) No 723/2009 of 25 June 2009. 

Data controller and Owner Data Protection 

The data controller of personal data is E-RIHS ERIC with a registered office in Florence, c/o Manifattura Tabacchi Via delle Cascine, 35, 50144 (FI), Italy. The point of contact for the exercise of the rights of the data subjects is the E-RIHS communication office, who can be reached at the email address: communication@e-rihs.eu 

For further inquiries, you can contact admin@e-rihs.eu.  

Purpose of the data processing and legal base 

The processing of personal data carried out through E-RIHS website relates exclusively to navigation data received through HTTP requests (such as IP address, operating system, web browser, device and headersrelated to client-server content negotiation).  

In addition to the navigation data, the E-RIHS catalogue of services collects and store personal data through the user registration workflow. During the process, through a dedicated form, the user provides contact information (name, surname, email) and data related to his birth, gender and professional condition. 

These data are kept for one year, then anonymised and stored indefinitely for statistical and security purposes only. 

The data are processed by the E-RIHS ERIC in the performance of its tasks of public interest or any case related to the exercise of its public powers, including the purposes of scientific research and analysis for statistical purposes, teaching, and administration, by Article 6, paragraph 1, letter a) also, to provide and improve the web services offered. This data is processed by internal staff trained in advance in a lawful, correct, relevant manner, limited to what is necessary to achieve the purposes of the processing under the principles set out in Article 5 of EU Regulation 2016/679. The data is retained only for any need for the investigation of criminal offences by the judicial authorities. Specific security measures are observed to prevent data loss, unlawful or incorrect use and unauthorised access.  

When you visit the E-RIHS websites, some personal data could be collected. For full details of how E-RIHS use cookies on their website, please see E-RIHS cookies policy. 

The use of your personal information is necessary for the legitimate interests of E-RIHS in operating and improving their websites, analysing their use and ensuring their security. Furthermore, E-RIHS uses personal data for the improvement of their services. The E-RIHS websites use personal information in ways that are compatible with your rights and freedoms. When you enter your personal information into an online form on E-RIHS websites for any specified purpose, you will be told about the use they will make of that information (e.g. to send you newsletters, to enable your attendance at an event and to submit your access application form). E-RIHS websites have a contact button, which activates your email software and invites you to send your comments to a specific mailbox. When you send such a message, your data is only collected to reply. You can manage it anytime. 

Your Rights 

Data subjects have the right to request from the data controller access to and rectification or erasure of their data or restriction of the processing concerning them or to object to the processing by Art. 15 et seq. of EU Regulation 2016/679. 

The data subject has the right to submit their request to the Data Controller. Requests should be addressed to E-RIHS communication office, who can be reached at the email address: communication@e-rihs.eu 

The data subject, if the conditions are met, also has the right to complain with the Data Protection Supervisor. 

According to Reg. 2016/679, the Data Controller is E-RIHS ERIC, via delle Cascine 35, 50144 Firenze, Italy. 

According to Reg. 2016/679 art. 28, Data Processors are: 

  • E-RIHS ERIC, represented by its Director General, dg@e-rihs.eu 

    For further inquiries, you can contact admin@e-rihs.eu.  

    Right to rectification and erasure – You have the right to correct any inaccurate personal data held by E-RIHS. You also have the right to request the erasure of any data that is no longer necessary for the purpose for which it was collected. 

    Right to restriction of processing and withdrawal of consent – You have the right to restrict the processing of your data or object to the processing of your data. You also have the right to withdraw previously given consent to process personal data. 

    If you wish to withdraw consent for the processing of your data or otherwise restrict or object to the processing of your data, please contact E-RIHS team at communication@e-rihs.eu. You can exercise your rights anytime. 

    Cookies Policy 

    A “cookie” is a small text file created by some websites on the user’s computer at the time the user accesses a particular site, for the purpose of storing and transporting information. Cookies are sent from a web server (which is the computer on which the visited website is running) to the user’s browser (Internet Explorer, Mozilla Firefox, Google Chrome, etc…) and stored on the user’s computer; they are, then, re-sent to the website at the time of subsequent visits. 

    Some operations could not be accomplished without the use of cookies, which, in some cases, are therefore technically necessary. In other cases, the website displayed uses cookies to facilitate and facilitate navigation by the user or to enable the user to take advantage of specifically requested services. 

    Cookies may remain in the system for long periods of time and may also contain a unique identification code. This allows the sites that use them to keep track of the user’s navigation within the site itself, for statistical or advertising purposes, that is, to create a personalized profile of the user from the pages he or she has visited and then show and/or send him or her targeted advertising (so-called Behavioural Advertising). 

    Cookies used on this website 

    This website uses only session cookies that are strictly necessary to enable specific required functions that ensure normal navigation and use of the website and are automatically deleted at the end of each navigation. 

    Transfer of data to countries outside the EU 

    This site may share some of the data collected with services located outside the European Union area. In particular with Youtube and LinkedIn via social plugins. The transfer is authorized according to specific decisions of the European Commission, or according to the standard contractual clauses of the individual services.

    Security Measures 

    We process visitor/user data lawfully and fairly, taking appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of data. We are committed to protecting the security of your personal data during its submission, using Secure Sockets Layer (SSL) technology, which encrypts information in transit. Processing is carried out using computer and/or telematic tools, with organizational methods and logics strictly related to the purposes indicated. 

    Disabling cookies 

    The user can refuse the use of cookies and at any time can revoke a consent already provided. Since cookies are linked to the browser used, they can be disabled directly from the browser, thus refusing/revoking consent to the use of cookies, or through the banner placed at the bottom of the page. 

    Disabling cookies may prevent the proper use of some features of the site itself, in particular services provided by third parties may not be accessible, and therefore may not be viewable: 

    • YouTube videos or other video sharing services; 
    • Social network social buttons; 

    Instructions for disabling cookies can be found at the following web pages: 

    Mozilla Firefox | Microsoft Internet Explorer | Microsoft Edge | Google Chrome | Opera | Apple Safari 

    Third-party Cookies 

    This Site uses technical cookies to save the User’s session and to perform other activities strictly necessary for its operation. Users’ prior consent is not required for their installation. Cookies are not used for user profiling. 

    Plausible Analytics 

    Plausible Analytics is committed to complying with GDPR, CCPA, PECR and other privacy regulations on their website and in their analytics product. Plausible data policy is accessible for details on the information collected of website visitors. In this policy, it is shown what data are collected and why, how data is handled and your rights to your data.  

    Website visitors’ data collected via the Plausible script on www.e-rihs.eu site is processed entirely within the European Union and never leaves the EU. Data are not sold to third parties. 

    Information about Plausible data controller is the following: 

    Plausible Insights OÜ
    Tartu, Estonia
    Contact: privacy@plausible.io
    For full company details, see Plausible imprint 

    Social Networks 

    We use some of the major social networks to keep in touch with our users. This third-party service may issue cookies for its proper functioning. For sharing on Facebook, Twitter, YouTube and LinkedIn some personal information may be acquired by the operators of the social network platforms whenever the User decides to interact with the plug-ins. For more information on the logic and methods of processing the collected data, Users are invited to read the privacy notices provided by the entities providing the services in question: 

        Contact Information 

        The data controller of personal data is E-RIHS ERIC with a registered office in Florence, c/o Manifattura Tabacchi Via delle Cascine 35, 50144 (FI), Italy.  The Data Protection Officer (DPO) can be reached at the following email address: admin@e-rihs.eu.
         

        Last Updated On: 10 June 2026