Privacy Policy

Istituto per la ricerca sociale (IRS) is an organization which is designed to control the risk of each data treatment, which validates the purposes and means of the processing of personal data and which is able to adopt the necessary organizational measures to ensure the conformity with the privacy policy.

In particular, we ensure that all our activities comply strictly with national and EU data protection legislation, especially with the EU Regulation on the protection of natural persons with regard to the processing of personal data 2016/679 of the European Parliament and of the Council of 27 april 2016, and, as far as the Italian legislation is concerned, with the DL 30 giugno 2003, n.196, as modified by DL 10/8/18, n. 101.

From the first of January 2022, IRS' DPO will be Nicola La Triglia, who can be reached at

Pursuant to art. 13 and 14 of DPGR 2016/679, we give you our INFORMATION NOTICE TO NATURAL PERSONS (hereinafter "notice") IRS ISTITUTO PER LA RICERCA SOCIALE, with registered office in MILANO, VIA XX SETTEMBRE 24, VAT registration number IT01767140153 ("Data Controller") processes your personal data (the "Personal Data") for the following purposes:


Among the Personal Data that the Data Controller processes, are included biographical data (i.e. name, last name, address, email address, bank details, etc) communicated to the Data Controller by you to fulfil the work agreements and the resulting obligations.


Your Personal Data are processed by Data Controller

  1. without your express consent (Art. 24 a), b), c) Dlgs 196/03 and art. 6 b), c) GDPR) for the following purposes:
    1. Providing services and performing contracts. The submission of your Personal Data needed to perform the contracts (including the steps to be taken prior to entering into a contract) is not mandatory, but refusal to provide this Personal Data do not allow the Data Controller to correctly perform all the obligations.
    2. Complying with the provisions of national and EU legislation. The processing of your Personal Data, in order to comply with the regulatory provisions is mandatory and your consent is not required.
    3. Legitimate interest of the Data Controller.The processing of your Personal Data is necessary to pursue a legitimate interest of the Bank.
  2. only after your specific consent (art. 23 and 130 Dlgs 196/2003 and art. 7 GDPR), for the following purposes:
    1. to send email and/or newsletter, commercial information and/or advertising related to products and/or services provided by the Data Controller and/or satisfaction surveys.

We inform you that if you are our client, we will send commercial information about our services and products except in case of your express refusal (art. 130 section 4 Dlgs 196/03).


Your Personal Data will be processed according to art. 4 Dlgs 196/03 and art. 4 nr. 2 GDPR and, precisely: collection, registration, organization, storage, consultation, elaboration, modification, selection, comparison, use, interconnection, blocking, communication, cancellation and destruction. Your Persona Data will be processed using manual, electronic and telematic tools and in a way that ensures its security and confidentiality. In particular, your Personal Data are generally retained for a time period of 10 years for Services purposed and for a time period no longer that two year in case of other Purposes.


Your Persona Data will be accessible for the Purposes under art. 2 A) and 2 B):

  • To the employees and collaborators of Data Controller who act as person in charge and/or internal managers of the process and /or system administrator;
  • Third parties and/or other person (i.e. bank, consultants, provider website, cloud provider, e-payment service provider, supplier, hardware and software assistance companies, shippers, carriers) who act as mangers of the process on behalf ot the Data Controller.


Without your express consent (art. 24 a), b), d) Dlgs 196/03 and art. 6 b), c) GDPR) Controller Data will communicate your Personal Data only according to purposes listed in Section 2 A) to Judicial Authority, supervisory bodies and those people to whom the communication is mandatory. Those people will manage your Personal Data as autonomous data controller.


The Data Controller, has adopted various security system to protect data against risk of loss, abuse and/or alteration. Specifically, he has adopted the measures provided in art. 32-34 of Dlgs 196/03 an art. 32 GDPR.


Communication of data for the purposes provided under Section 2 A) is mandatory; without the above mentioned data we will not be able to fulfil the contract and to correctly perform all the obligations.


In your capacity as Data subject you have the rights listed in art. 7 DLgs 196/03 and art. 15 GDPR and, specifically the right:

  1. To obtain the confirmation of the existence and/or non existence of your Personal Data even if not yet registered and their communication in an intelligible way;
  2. To obtain the indication of a) origin of Personal Data; b) purposes and method of management; c) logical criterion applied to data processing made by electronic methods; d) identification data of Data Controller, person in charge, and/or officer named according to art. 5 section 2 Dlgs 196/03 and art. 3 section 1 GDPR; e) identification of people and/or categories of people to whom your data must be communicated;
  3. To obtain a) the update, integration, correction of your data; b) erasure, anonymous transformation or blocking of data processed contra legem, included those data whose conservation is not necessary for the purposes for which the data were collected and/or processed; c) the declaration that the operation under a) and b) have been communicated and / or disclosed to the subject, except in the case where this fulfilment is found to be impossible or involves a use of means manifestly disproportionate respect to the protected right.
  4. To make opposition, whole or in part, a) for legitimate reasons, to the process of your Personal Data even if relevant to the purposes; b) to the process of your Personal Data collected for the purpose of sending advertising material or for carrying out research or commercial communication, through the use of automated call systems, email and/or traditional marketing systems through mail and telephone. We inform you that the right to the opposition provided in the above mentioned letter b) referred to marketing purposes through automated call systems, is extended to traditional marketing system. The subject can decide to receive only communications through traditional system or automated communications or neither one nor the other. If applicable the subject has the right provided in art. 16-21 GDPR (right of correction, right to be forgotten, right to the limitation of process, right to the portability, right to the opposition) and the right to file a complaint to the Garante della Privacy.


You can exercise your rights sending a registered letter and/or an email to: IRS ISTITUTO PER LA RICERCA SOCIALE, MILANO, VIA XX SETTEMBRE 24,


The Data Controller is IRS ISTITUTO PER LA RICERCA SOCIALE, MILANO, VIA XX SETTEMBRE 24. The list updated of persons in charge is kept in the office of Data Controller.



Under current European legislation of Cookies (EU ePrivacy Directive 2009/136 / EC) and its implementation promoted by the National Authority for the Protection of Personal Data (Identification of simplified procedures for the information and the acquisition of consent to the use of cookies - May 8, 2014 - published in the Gazzetta Ufficiale No. 126 of June 3, 2014), all sites are required to inform the user of the use of cookies on the site itself.


The owner and manager of the data collected on this website in accordance with art. 29 of the Code regarding the protection of personal data is ISTITUTO PER LA RICERCA SOCIALE Soc. Coop., headquartered in Via XX Settembre 24, 20123 Milan, Italy



The computer systems and software procedures used to operate the site acquire, during their normal operation, some data whose transmission is implicit in the communication protocols of the Internet.

This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) of requested resources, time of request, the method used to submit the request to the server, the file size obtained in response, the numerical code indicating the status of response from the server (successful, error, etc.) and other parameters regarding the operating system and computer environment. These data are used exclusively from ISTITUTO PER LA RICERCA SOCIALE Soc. Coop anonymously and for statistical purposes related to the use of the site and its correct functioning.

The ISTITUTO PER LA RICERCA SOCIALE Soc. Coop., never collects such data in a way which allows identification of users.

DATA voluntarly PROVIDED BY the user

The collection of personal data can take place on a voluntary basis, by sending e-mail to the address listed on the website or through the shipment of electronic forms on the same from the users. Sending mail involves the collection, by the Owner, the email address of the sender's need to respond to the request, as well as any other personal data contained in the communication. The personal data collected in this way will be used by the owner for the sole purpose of responding to the e-mail message received and any subsequent related communications.

The submission of forms to request information involves the collection of information sent through the modules.


When you log in to a site or sites related to it, it may set or read cookie and/or other types of identifiers about the browser and / or the device you are using.

A cookie is a small text file that is stored on the computer of someone viewing a website in order to record certain information about your visit and to create a system to recognize you even in moments later. Identifiers of devices, however, are generated by collecting and processing some information such as IP address and / or the user agent (browser version, type and version of the operating system) or other characteristics of the device, again in order to reconnect with certain information to a specific user.

A Web site may set a cookie on your browser only if the preferences configured for this permit it. It is important to know that a browser may allow a particular Web site access exclusively to cookies set by it and not those set by other websites: there is no risk to your privacy in this regard.


This site uses cookies to make our services simple and efficient for users who visit its pages.


Following are the various types of cookies that may be used by this site depending on the purpose of use


This type of cookie allows the proper operation of certain sections of the site. There are two categories, persistent and session:

  • persistent: once the browser is closed, they are not destroyed but remain up to a preset expiration date;
  • session: they are destroyed every time the browser is closed.

These cookies, always sent from our domain, are required to view the site and in relation to technical services offered, will be increasingly used and then sent, unless the user does not change the settings in your browser (thus affecting the display of site pages).


Cookies in this category are used to collect information about the site. This is information about anonymous statistical analysis. This type of cookie collects anonymous data on the activity of users and how it arrived at the site. The analytical cookies are sent from the site itself.

This site, according to current legislation, is not required to seek consent for cookies technical and analytical.

For all other types of cookies consent may be expressed by the user with one or more of the following modes:

  • By specific configurations of the browser or its programs used to navigate pages that make up the site.
  • By changing settings in the use of third-party services.

Both of these solutions may prevent the user from use or display parts of the site.


Those cookies are needed to create user profiles in order to send advertising messages in line with the preferences expressed by the user within the pages of a site. Our sites do not contain cookie of this type.


The Site may contain links to other Web sites that have their own privacy policy which can be different from the one adopted by this site and therefore not responsible for these sites.



Run the Chrome browser

Click the Chrome menu settings

Select Settings

Click Show Advanced Settings

In the "Privacy" section click on the button "Content Settings"

In the "Cookies" section you can change the following cookie settings:

Allow saving data locally

Edit the local data only until you close your browser

Do not allow sites to set cookies

To block third-party cookies and site data

Handling exceptions for some internet sites

Deleting one or all cookies

For more information visit the page


Run the Internet Explorer Browser

Click the Tools button and choose Internet Options

Click the Privacy tab under Settings and change the slider according to the action desired by the cookies:

Block all cookies

Allow all cookies

Selection of sites from which to obtain cookie: move the cursor in an intermediate position so as not to block or allow all cookies, press then click Sites, Web Site Address box to enter a website and then press to Block or Allow

For more information visit the page


Run the Mozilla Firefox Browser

Click on the menu at the toolbar of the browser next to the entry window url navigation

Select Options

Select the Privacy panel

Click Show Advanced Settings

In the "Privacy" section click on the button "Content Settings"

In the "Tracking" you can change the following cookie settings:

Request to sites not to make any tracking

Notify sites availability to be traced

Do not express any preference on the tracking data

From "History" section, you can:

Enabling "Use custom settings" select to accept third party cookies (again, from most sites visited or never) and keep them for a specified period (until they expire at the close of Firefox or ask every time)

Remove individual cookies stored

For more information visit the page


Run the Opera Browser

Click the Preferences and then click Advanced, and then click Cookies

Select from the following options:

Accept all cookies

Accept cookies only from the site I visit: the third-party cookies that are sent to and from a domain other than the one you are visiting will be rejected

Never accept cookies: all cookies will never be saved

For more information visit the page


Run the Safari Browser

Click Safari, select Preferences and click on Privacy

Under Block Cookie specify how Safari must accept cookies from websites.

To see which sites have stored cookies click Details

For more information visit the page


Run the iOS Safari Browser

Touch Settings, then Safari

It's up to Block Cookies and choose from several options: "Never", "Third-party advertisers and" or "Always"

To delete all cookies stored by Safari, tap Settings, then Safari, and then click Delete Cookies and Data

For more information visit the page


Under Article. 7 of the Privacy Act you have the right to:

the confirmation of the existence of personal data concerning him, even if not yet registered, and their communication in intelligible form;

information on: a) origin of personal data; b) the purposes and methods of treatment; c) the logic applied in case of treatment with the help of electronic means; d) the identity of the owner, manager and the representative appointed under article 5, paragraph 2, of the Code; e) subjects or categories of persons to whom the data may be communicated or who can learn about them as appointed representative in the State, managers or agents;

a) updating, rectification or, when interested, integration of data;

b) the cancellation, anonymization or blocking of data processed unlawfully, including data that need not be kept for the purposes for which the data were collected or subsequently processed;

c) confirmation that the operations in letters a) and b) have been notified, also as regards their content, of those to whom the data were communicated or disseminated, unless this requirement impossible or involves the use of means clearly disproportionate to the protected right. You have the right to object, in whole or in part: a) for legitimate reasons to the processing of personal data, pertinent for collection purposes; b) to the processing of personal data for purposes of sending advertising materials or direct sales or for carrying out market research or commercial communication.

All rights referred to above art. 7 of the Privacy Code may be exercised by the user by contacting in writing the Istituto per la Ricerca Sociale Soc. Coop. via e-mail (

This page is visible through the link at the bottom of all the pages of the Site in accordance with art. 122 seconds paragraph of Legislative Decree no. 196/2003 and following the procedures simplified information and acquisition of consent for the use of cookies published in the Gazzetta Ufficiale 126 of June 3, 2014 and its record of the action 229 of 8 May 2014.