Privacy Policy

Effective Date: January 1, 2026 | Last Revised: 2026-03-29 | Domain: scenesgarreelradr.rest

1. Introduction & Statutory Scope

This Privacy Policy delineates the operational protocols and statutory standards adhered to by Scenesgarreelradr Curatorial Trust ("we", "us", "our", or "the Archive") in handling personal data acquired through the web portal scenesgarreelradr.rest. We conduct our digital operations in rigorous conformity with the European Union General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR), the Italian Personal Data Protection Code (Legislative Decree no. 196/2003 as modified by Legislative Decree no. 101/2018), and applicable global data privacy statutes including the California Consumer Privacy Act (CCPA/CPRA).

2. Data Controller & Data Protection Officer Contact

The Data Controller accountable for processing activities executed on this platform is:

Scenesgarreelradr Curatorial Trust
Company Registration No: IT-9821034-PAL
Registered Headquarters: Via Botanica Monte Cervo 42, 90028 Polizzi Generosa (PA), Sicily, Italy
Designated Data Protection Liaison: [email protected]

3. Categories of Data Collected & Processing Purpose

We process information exclusively when a lawful basis exists under Article 6 of the GDPR:

Direct Academic & Inquiry Communications: When you submit scientific queries, loan applications, or herbarium inquiries via our contact interfaces, we collect your full legal name, institutional affiliation, academic email address, and the descriptive content of your scientific communication. This data is handled under your voluntary consent and our legitimate interest in advancing botanical scholarship.
Technical Connection & System Metadata: During server interactions, our systems log non-identifying technical data including your IP address (anonymized where feasible), browser type and version, operating environment, HTTP referral sources, and network timestamp signatures. This metadata is processed to preserve server security, defend against distributed cyber threats, and audit server health.
Preference Storage: Through browser-native local storage mechanisms, we maintain your explicit consent or refusal regarding non-essential cookie deployment, ensuring you are not repeatedly prompted upon return visits.

4. Cookies & Web Tracking Technologies

Our digital architecture prioritizes privacy-by-design. We do not engage in behavioral cross-site retargeting or commercial advertising profiling. Technical cookies deployed on scenesgarreelradr.rest are restricted to those vital for structural functionality, security verification, and anonymous statistical analysis of educational visits. Full disclosures regarding cookie classes, expiration intervals, and opt-out controls are provided in our dedicated Cookie Policy.

5. Third-Party Data Processors & Cross-Border Transfers

We do not monetize, rent, or vend personal information to commercial data brokers. Information is shared strictly with vetted technological service processors bound by written Data Processing Agreements (DPAs) in compliance with Article 28 of the GDPR. These include infrastructure hosting providers operating within the European Economic Area (EEA), secure encrypted email transit services, and cloud backup systems adhering to ISO/IEC 27001 data security standards. Where cross-border transmission outside the EEA occurs, such transfers are strictly anchored to European Commission Standard Contractual Clauses (SCCs).

6. Data Retention Period

Inquiry submissions and research correspondence are archived for a maximum period of twenty-four (24) months from the completion of the research correspondence, unless a statutory legal mandate, academic voucher archival requirement, or dispute resolution procedure requires continued retention. Server access logs are routinely scrubbed and overwritten after ninety (90) days.

7. Data Subject Rights Under GDPR & International Law

Pursuant to Articles 15 through 22 of the GDPR, visitors possess actionable statutory rights regarding their personal records:

Right of Access (Art. 15): You may request formal verification of whether personal data pertaining to you is under active processing, alongside a structured copy thereof.
Right to Rectification (Art. 16): You are entitled to demand immediate amendment of erroneous or incomplete personal data.
Right to Erasure ("Right to be Forgotten", Art. 17): You may demand the definitive deletion of personal data when it is no longer requisite for its collection purpose.
Right to Restriction of Processing (Art. 18): You may contest processing accuracy and request temporary operational freezes.
Right to Data Portability (Art. 20): You may receive your provided personal data in a structured, machine-readable format.
Right to Object (Art. 21): You may object at any moment to processing grounded in legitimate curatorial interests.

To exercise any of these privileges, lodge a verifiable request with our Data Protection Officer at [email protected]. We verify requests within thirty (30) business days without fee. Furthermore, European residents retain the right to lodge formal complaints with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it).

8. Security Architecture

The Archive deploys TLS 1.3 cryptographic protocols across all communication channels, continuous intrusion mitigation software, strict role-based access restrictions, and periodic vulnerability evaluations to protect digital records from unlawful access, alteration, destruction, or exposure.