Clauses for the registration of .It domains

Declarations and assumptions of responsibility The registrant of the domain name in question specifically declares under its own responsibility:-______-.

• a) to be a national or resident of one of the countries of the European Economic Area (EEA), the Vatican State, the Republic of San Marino or the Swiss Confederation (in the case of registration for a natural person);
• b) to be established in one of the countries of the European Economic Area (EEA), the Vatican State, the Republic of San Marino or the Swiss Confederation (in case of registration for another organisation);
• c) to be aware of and to accept that the registration and management of a domain name are subject to the "Regulation for the Assignment and Management of Domain Names in the ccTLD .it" and the "Regulation for Dispute Resolution in the ccTLD.it" and their subsequent amendments;
• d) that it is entitled to the use and/or legal availability of the domain name applied for and that it does not infringe the rights of third parties with this application for registration;
• e) to be aware that for the purposes of the inclusion of personal data in the database of assigned domain names, and their possible dissemination and accessibility via the Internet, it is necessary to expressly provide consent by ticking the appropriate boxes on the basis of the information below. The document "The .it Registry's policy on the Whois database" can be consulted on the Registry's website (http://www.nic.it);
• f) to be aware and to accept that in the event of an erroneous or false declaration in this application, the Registry shall immediately revoke the Domain Name, without prejudice to any further legal action. In such case, the revocation shall in no way give rise to claims against the Registry;
• g) to release the Registry from any liability deriving from the allocation and use of the domain name by the applicant; h) to accept Italian jurisdiction and the laws of the Italian State Order. 

Information pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data (hereinafter referred to as EU Reg. 2016/679). For the performance of the activities to which this notice refers: 

• The data controller is the CNR, through the CNR Institute of Informatics and Telematics, Registro.it (http://www.nic.it); 
• the data controller is the Registrar that from time to time manages the contractual relationship with the Registrant; its identification details are contained in the contract in force between the aforementioned Registrar and the 

 

Registrant, and therefore known to the data subject. A list of data processors is available on the website of the Registry (http://www.nic.it). The Registrar remains the data controller with respect to the contractual relationship directly with the Registrant, which is not covered by this notice; 

• the Data Protection Officer -RDP- for the .it Registry - IIT CNR, is Dr. Giuliano Salberini; 
• Mandatory information is information that is indispensable for the performance of the requested service. The Registrant's personal data are collected by G Tech Group which from time to time manages the contractual relationship with the Registrant by means of this form, in order to register and manage the domain name in the Database of Assigned Names at the CNR Institute of Informatics and Telematics, Registro.it. The following information is also specified:
• a) Purpose of collection. The Registrant's personal data are collected by the Registrar for the purpose of registering and managing the domain name in the database of names assigned at the Istituto di Informatica e Telematica IIT- Registry.
• b) Method of data collection and processing. The data is processed by our authorised personnel using automated tools in compliance with current legislation and in accordance with the principles of correctness, lawfulness, transparency, protection of your privacy and your rights, for the time strictly necessary to use the service. Our computer system is structured in such a way as to prevent the loss of data, unlawful or incorrect use and unauthorised access.
• c) Consequences in case of refusal. The information collected will be processed for purposes of administrative and accounting management, protection of rights, and other purposes related to the registration, management, dispute, transfer and cancellation of the domain name, as well as to comply with legal obligations, regulations or EU legislation, and communicated to third parties for activities ancillary to or necessary for the fulfilment of the aforementioned purposes. The collection of personal data provided by you is necessary for the performance of the service offered. Failure to provide or incomplete provision of the personal data requested renders the service unsuitable. The Whois service does not allow the display of any data relating to the contacts of a domain name (registrant, admin and tech), if the domain name itself has been registered by a natural person and this person has not expressed consent to the publication of the data (consentForPublishing field with the value 'false'. Consent for the dissemination and accessibility of personal data is not required in cases where the data must be made public in order to comply with legal obligations. Pursuant to Article 40, paragraph 2, letter B) of Decree-Law no. 201 of 6 December 2011, converted, with amendments, by Law no. 214 of 22 December 2011, legal persons, entities or associations no longer have the status of data subjects, and therefore these categories of persons are no longer entitled to receive the information and any request for consent provided for by EU Reg. 2016/679. Natural persons whose data are processed in connection with the activities related to this contract continue to be entitled, even if provided for this purpose by persons who no longer have the status of data subjects, with application of the obligations of information and possible consent by the aforementioned persons.
• d) Persons to whom the data may be disclosed.

Your data will be communicated to the IT Registry for the purpose of executing the contract and carrying out the related technical, administrative, accounting, statistical and research activities. The data communicated will only be that which is strictly indispensable for the performance of the service requested. The communication of such data is obligatory in order to be able to carry out the services offered to you. The data will not be used and communicated to third parties for activities of marketing or direct marketing. Your data will in no way be disclosed to third parties without your prior and specific consent, however, it may be made available to the Judicial Authorities, should they request it.

• e) Transfer of data to third countries or international organisations. Your data may be transferred to third countries outside the EU, in accordance with the regulations in force.
• f) Duration of personal data retention. Your personal data will be kept for as long as it is deemed useful for the performance of the service requested or for the management of subsequent administrative and accounting activities.
• (g) Rights of the Registrant and revocation of consent given

Right of access (Art. 15 - EU Reg. 2016/679): the right of access includes in all cases the right to receive a copy of the personal data being processed. This includes the planned retention period or, if this is not possible, the criteria used to define this period, as well as the safeguards applied in the event of data being transferred to third countries. 

Right to data portability (Art. 20 - EU Reg. 2016/679): The Registrant has the right to request at any time that his or her data be transferred from one Registrar to another through automated procedures. 

If you believe that your data has been processed unlawfully, you have the right to lodge a complaint with the Supervisory Authority. 

You may also revoke your consent given in this information sheet at any time. In such cases, the service offered will no longer be provided. The exercise of the aforementioned rights may be exercised by making a request to the Registrar who from time to time manages the contractual relationship with the Registrant, and secondarily to the Istituto di Informatica e Telematica del CNR, Via Giuseppe Moruzzi, 1, I-56124 Pisa, Italy