Privacy notice
Version 1.0 — last update 27/06/2026.
This page describes the personal data processing performed by the EMC proficiency testing comparison management portal. The final text must be validated by the Controller and privacy advisor before production go-live.
Controller and contacts
| Controller | Titolare del trattamento da completare |
|---|---|
| Controller email | To be completed |
| Address | To be completed |
| Privacy contact | privacy@example.com |
| DPO | To be appointed only where legally required. |
Data processed, purposes and legal bases
The portal processes identification and professional contact data for accounts, laboratories, technical managers, shipping addresses, calendar/bookings, sample status, notifications, emails and application logs.
Main purposes: authentication, participation management, calendar management, sample logistics traceability, operational notifications, reminders, security and audit.
Typical legal bases: performance of the test participation contract/procedure, legitimate organisational interest and system security. Configured note: Gestione contrattuale/precontrattuale della prova, legittimo interesse organizzativo e sicurezza del sistema.
Cookies and technical tools
The site is configured to use only technical cookies/sessions required for authentication, form protection and IT/EN language preference. No analytics, advertising, marketing or profiling cookies are planned; in this scenario no cookie banner for non-essential purposes is required.
Language note: the technical cookie django_language is used only to remember whether the user selected IT or EN. It does not identify interests, habits or laboratory performance and is not used for analytics or profiling.
| Name | Purpose | Duration | Necessary |
|---|---|---|---|
| csrftoken | Cookie tecnico di sicurezza usato per proteggere i form da richieste non autorizzate CSRF. | Variabile secondo configurazione Django | Yes |
| django_language | Cookie tecnico di preferenza che memorizza la lingua IT/EN scelta dall’utente; non svolge finalità statistiche, marketing o profilazione. | 180 giorni, salvo diversa configurazione | Yes |
| sessionid | Cookie tecnico necessario per mantenere la sessione autenticata e distinguere i ruoli utente. | Sessione/browser, secondo configurazione Django | Yes |
Recipients, processors and transfers
Data may be processed by authorised users and by providers appointed as processors, such as hosting, email, backup, maintenance and helpdesk providers.
| Provider | Service | Country | EEA | Transfer basis |
|---|---|---|---|---|
| Processor register to be completed. | ||||
Retention periods
Data are retained only for as long as necessary for test management, traceability, security and applicable obligations. Operational retention policies are configurable in the backoffice.
| Category | Days | Action at expiry |
|---|---|---|
| Retention policies to be completed. | ||
Data subject rights
You may request access, rectification, erasure, restriction, portability, objection or information about processing. The request should be handled without undue delay and generally within one month of receipt.
Submit privacy requestSecurity, audit and data breaches
The portal records significant operations such as login, changes, sample/test status changes, email sending, exports and deletions. Logs are visible only to authorised administrators. In production, HTTPS, protected backups, secure email settings and backoffice hardening are required.