Preaload Image
Back

COOKIE POLICY

Learn and manage how cookies are used

Cookie Policy – DataScientia

 

This Cookie Policy is provided pursuant to Art. 122 of Legislative Decree no. 196/2003 (Italian Personal Data Protection Code), Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”), and the Guidelines on cookies and other tracking tools of the Italian Data Protection Authority of 10 June 2021. It explains which cookies and similar technologies we use, why, and how you can control them.

Scope of this policy

It is the single cookie policy for:

Registration and login are available only on the DataScientia Community and Marketplace portals, through the DataScientia login service (Keycloak) hosted at https://datascientia.eu/auth/.

This policy applies to all visitors, wherever they are located, and replaces the previous cookie policies of the DataScientia Community and Marketplace portals. The former addresses datascientia.it and datascientia.disi.unitn.it permanently redirect to datascientia.eu and set no cookies. Other processing of personal data is described in the Privacy Policy and the Registration Privacy Notice.

In this policy, “we”, “us” and “our” refer to the University of Trento, including the KnowDive research group acting on its behalf.

1. Data controller

The data controller is the University of Trento (Università degli Studi di Trento), via Calepina 14, 38122 Trento (TN), Italy.

The DataScientia website and portals are developed and managed by the KnowDive research group of the Department of Information Engineering and Computer Science (DISI). The Director of DISI is in charge of this processing on behalf of the University.

2. Data Protection Officer

The University’s Data Protection Officer (DPO) can be contacted at rpd@unitn.it for any question about this policy or to exercise your rights.

3. What cookies and similar technologies are

Cookies are small text files that a website saves in your browser and reads back on later visits. Websites can also store data in your browser using similar technologies:

  • Local storage: kept until the website or you delete it.
  • Session storage: kept only until you close the browser tab.
  • IndexedDB: a small database in your browser, used by some web applications.

In this policy, “cookies” means both cookies and these similar technologies.

Cookies can be:

  • First-party: set by the site you are visiting (datascientia.eu or ds.datascientia.eu).
  • Third-party: set by another organisation whose content is embedded in our pages, such as YouTube.
  • Session: deleted when you close the browser or log out.
  • Persistent: kept for the period shown in the tables below.

We use three categories of cookies. Only necessary cookies are set without your consent; all others are set only after you accept them.

Category

Where used

Purpose

Consent required

Necessary

datascientia.eu, DataScientia Community and Marketplace portals

Make the website and portals work: remember your cookie choices, keep you logged in, protect your account and requests

No. Exempt under Art. 122(1) of the Italian Privacy Code (Legislative Decree 196/2003). Any related processing is based on the performance of the University’s institutional tasks (Art. 6(1)(e) GDPR)

Analytics

datascientia.eu only

First-party cookies that record how visitors reach the website (for example directly, from a search engine or another site), to help us improve it

Yes. Art. 122(1) of the Italian Privacy Code and Art. 6(1)(a) GDPR

Advertisement (third-party content)

datascientia.eu pages with embedded YouTube videos

Set by YouTube (Google) when a video loads. Google may use them to track your activity and personalise content and advertising

Yes. Art. 122(1) of the Italian Privacy Code and Art. 6(1)(a) GDPR

We do not use cookies to profile visitors or to show advertising. Google may do so through YouTube cookies, but only if you accept the Advertisement category.

How consent works?

When you first visit datascientia.eu, a cookie consent banner lets you:

  • click Accept All to accept all categories of cookies;
  • click Reject All, or close the banner with the X, to refuse all non-necessary cookies;
  • click Customise to accept or refuse each category individually.

If you refuse to accept the Advertisement category cookies, embedded videos on pages are not loaded and a video placeholder is shown instead. Refusing cookies does not otherwise limit your access to the website.

Your consent choice is stored for 12 months, after which the banner is shown again. We also ask for your consent again if changes to cookies mechanism affects your choice. Your choice applies to only the Main DataScientia Website (datascientia.eu) since DataScientia Community and Marketplace portals only use necessary cookies.

5. Cookies used on the DataScientia Website (datascientia.eu)

Necessary

Name

Set by (domain)

Purpose

Duration

cookieyes-consent

datascientia.eu (CookieYes)

Stores your cookie choices (which categories you accepted or refused) so they are respected on later visits. Contains only a random consent ID.

1 year

These first-party cookies are set by the Sourcebuster.js script. The information stays in your browser and on our website and is not shared with third parties.

Name

Set by (domain)

Purpose

Duration

sbjs_current

datascientia.eu

Records how you arrived at the website on this visit (directly, from a search engine, a link or a campaign).

Session

sbjs_current_add

datascientia.eu

Records the entry page, the referring page and the time of this visit.

Session

sbjs_first

datascientia.eu

Records how you arrived at the website on your first visit.

Session

sbjs_first_add

datascientia.eu

Records the entry page, the referring page and the time of your first visit.

Session

sbjs_udata

datascientia.eu

Stores technical information about your browser and device, such as the user agent.

Session

sbjs_session

datascientia.eu

Counts the pages viewed in the current session and whether the session is still active.

1 hour

sbjs_migrations

datascientia.eu

Internal technical cookie that manages the format of the other Sourcebuster cookies.

Session

These cookies and storage items are set by YouTube (Google Ireland Limited) only when a page with an embedded video is loaded after you have accepted this category. Items marked “browser storage” are kept in IndexedDB or local storage rather than as cookies.

Name

Set by (domain)

Purpose

Duration

__Secure-YNID

youtube.com

Protects security and prevents fraud; may be used by Google to recognise your browser.

6 months

__Secure-YENID

youtube.com

Identifies the browser to prevent fraud and misuse; may be used by Google to link activity on embedded videos.

1 year 1 month

__Secure-ROLLOUT_TOKEN

youtube.com

Manages the rollout of new features and experiments in the YouTube player.

6 months

__Secure-BUCKET

youtube.com

Assigns your browser to a test group for YouTube experiments.

6 months

__Secure-YEC

youtube.com

Technical cookie supporting the operation of the YouTube player.

Session

YSC

youtube.com

Tracks views of embedded videos and keeps video statistics accurate.

Session

VISITOR_INFO1_LIVE

youtube.com

Estimates your connection bandwidth to choose video quality; also used for recommendations.

6 months

VISITOR_PRIVACY_METADATA

youtube.com

Stores your cookie consent state for YouTube on this website.

6 months

PREF

youtube.com

Stores preferences such as time zone and player settings; may be used to personalise content.

1 year 1 month

ytidb::LAST_RESULT_ENTRY_KEY

youtube.com (browser storage)

Records your last interaction with YouTube content to improve results and recommendations.

Until deleted

LogsDatabaseV2:*

youtube.com (browser storage)

Temporarily stores player activity and error logs before sending them to YouTube.

Until deleted

ServiceWorkerLogsDatabase

youtube.com (browser storage)

Stores logs from YouTube’s background service worker, sent to YouTube to monitor performance and errors.

Until deleted

YtIdbMeta

youtube.com (browser storage)

Stores technical information about the other databases YouTube uses in your browser.

Until deleted

6. Cookies used on the DataScientia Community and Marketplace portals

The DataScientia Community and Marketplace portals use only necessary cookies and browser storage, needed to log you in, keep your session secure and run the application. Neither portal uses analytics or advertising cookies, so your consent is not required. Both portals rely on the same DataScientia login service (Keycloak) at https://datascientia.eu/auth/, so the cookies and storage items listed below apply to both portals.

Cookies

Name

Set by (domain)

Purpose

Duration

AUTH_SESSION_ID

datascientia.eu (login service)

Identifies your login session while you sign in or register.

Session

KC_AUTH_SESSION_HASH

datascientia.eu (login service)

Protects the login process by linking its steps to the same browser.

During login

KC_RESTART

datascientia.eu (login service)

Allows an interrupted login to be resumed.

During login

KEYCLOAK_IDENTITY

datascientia.eu (login service)

Contains the signed identity token that keeps you logged in across the portals (single sign-on).

Until logout, max 10 hours

KEYCLOAK_SESSION

datascientia.eu (login service)

Keeps your single sign-on session active across the portals.

Until logout, max 10 hours

ds_session

ds.datascientia.eu

Keeps your session on the portal active after login.

Until logout, max 3 hours

XSRF-TOKEN

ds.datascientia.eu

Security cookie that protects your account against cross-site request forgery. Contains a random value only.

1 year

Session storage

These items are deleted as soon as your session expires or you log out.

Name

Purpose

access_token, refresh_token, id_token

Security tokens issued by the login service that let the portal act on your behalf and renew your session.

id_token_claims_obj

Basic account information contained in the identity token (for example name, email and account ID).

access_token_stored_at, expires_at, id_token_stored_at, id_token_expires_at

Times at which the tokens were issued and expire.

granted_scopes, session_state, nonce, and the login verifier value

Technical values that secure the login process and keep the session consistent with the login service.

Local storage

These items are deleted as soon as your session expires or you log out.

Name

Purpose

Encrypted account data (stored under random-looking keys)

Stores your account details so the portal does not have to request them from the server on every page: first name, family name, email and username provided at registration, your login service ID, your roles in the portal (for example member, researcher, participant, financial administrator, system manager, study coordinator) and the related internal IDs, the role you selected, your profile picture, and the lists of institutions and departments. Stored in encrypted form.

currentUser

Basic information about the logged-in user, used to display the portal correctly.

lang, theme, choose_skin, choose_skin_active, choose_logoheader, menuOption, isRtl

Remember your interface choices: language, colour theme, header logo style, menu layout and text direction.

Logging in with an external account

If you choose to log in or register with an external account, you are redirected to that provider’s login page, which sets its own cookies on its own domain:

  • University of Trento login (idp.unitn.it): the University’s single sign-on service sets necessary session cookies (such as __Host-JSESSIONID and srv_route) for the duration of the login.
  • Google account: Google sets its own cookies on Google domains, governed by the Google Privacy Policy. These cookies are set only if you choose to use Google login, and are not set or read by DataScientia.

7. Third parties and transfers outside the EU

The portal’s necessary and analytics cookies are first-party: the information they contain is not shared with third parties. Two external providers are involved:

Provider

Role

What they receive

Transfers outside the EU

CookieYes Limited

Data processor appointed by the University under Art. 28 GDPR, providing the cookie consent banner

A record of your consent choices (consent ID, date and time, categories accepted or refused)

United Kingdom, covered by an EU adequacy decision

Google Ireland Limited (YouTube)

Independent data controller for the data collected through its cookies, only if you accept the Advertisement category

Data about your browser, device and interaction with embedded videos, which Google may combine with other data it holds

Possible transfer to Google LLC in the United States, certified under the EU-US Data Privacy Framework

For details on how Google processes this data, see the Google Privacy Policy and how Google uses information from sites that use its services.

You can change your choices or withdraw your consent at any time on datascientia.eu, by clicking the cookie icon in the corner of the screen. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

The DataScientia Community and Marketplace portals use only necessary cookies, which do not require consent, so they have no cookie banner or settings.

You can also manage cookies in your browser settings: block all or some cookies, and delete cookies and site data already stored. Deleting cookies also deletes your consent choice, so the banner will be shown again on your next visit. Instructions from the browser makers:

For other browsers, see the help section of your browser.

If you block necessary cookies or browser storage, you will not be able to log in to the DataScientia Community and Marketplace portals.

9. Rights of the data subject

Under Articles 15 to 22 GDPR, and within the limits set by those articles, you have the right to:

  • access your personal data and obtain a copy of it (Art. 15);
  • obtain the rectification or erasure of your data (Articles 16 and 17);
  • obtain the restriction of processing (Art. 18);
  • object to processing based on Art. 6(1)(e) GDPR (Art. 21);
  • withdraw your consent to analytics or advertisement cookies at any time, as described in section 8, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3)).

To exercise your rights, write to the Data Protection Officer at rpd@unitn.it or to the data controller at the addresses in section 1. Exercising your rights is free of charge. We will reply without undue delay and at the latest within one month; this period may be extended by two further months for complex or numerous requests, in which case we will tell you within the first month (Art. 12(3) GDPR).

For data collected by YouTube, you can also exercise your rights directly with Google, as described in the Google Privacy Policy.

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work (Art. 77 GDPR), or to seek a judicial remedy (Art. 79 GDPR).

10. Changes to this policy

We will update this policy when the cookies we use change. The date of the latest update is shown at the top of this page. If a change affects the choices you made, the cookie banner will ask for your consent again.