Privacy Policy

Last updated: October 2026

1. An overview of data protection

General information

The following information gives you a simple overview of what happens to your personal data when you visit this website. “Personal data” means any data that can be used to identify you personally. For detailed information, please read the full privacy policy below.

Data recording on this website

Who is responsible for data recording on this website (the “controller”)? The data on this website is processed by the website operator, the Italian JSPS Alumni Association. The contact details are given in section 3 of this policy.

How do we record your data? We collect data that you give us, for example when you fill in the membership application form. Other data is recorded automatically by our IT systems when you visit the website. This is mainly technical information (e.g. web browser, operating system, time of access).

What do we use your data for? Part of the data is collected to ensure that the website works without errors. The data you send through the membership form is used to evaluate your application and to contact you.

What rights do you have regarding your data? You have the right to obtain, free of charge and at any time, information about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification or erasure of your data. Where processing is based on your consent, you can withdraw it at any time with effect for the future. You may also request the restriction of processing in certain circumstances, and you have the right to lodge a complaint with the competent supervisory authority. Please contact us at any time if you have questions about data protection.

Analysis tools and third-party tools

This website does not use analytics or tracking tools, advertising cookies or social media plug-ins.

2. Hosting

Cloudflare

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”), through its Workers platform. When you visit the website, Cloudflare processes technical data such as your IP address, in server log files, in order to deliver the site and keep it secure. For details, see Cloudflare’s privacy policy: cloudflare.com/privacypolicy.

We use Cloudflare on the basis of Art. 6(1)(f) GDPR: we have a legitimate interest in presenting our website reliably and securely. Where data is transferred to the USA, the transfer is based on the EU-US Data Privacy Framework and/or the Standard Contractual Clauses of the European Commission.

3. General information and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the data protection regulations and this privacy policy. Please note that data transmitted over the Internet (e.g. by e-mail) may be exposed to security gaps. Complete protection of data against access by third parties is not possible.

Controller

The controller responsible for data processing on this website is:

Italian JSPS Alumni Association
Milan, Italy
E-mail: alumnijspsit@gmail.com

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data (e.g. names, e-mail addresses).

Storage period

Unless a more specific storage period is stated in this policy, your personal data remains with us until the purpose for which it was collected no longer applies. Data sent through the membership form is kept for as long as needed to handle your application and, if you become a member, for the duration of your membership and as long as required by law. If you submit a justified request for deletion or withdraw your consent, your data will be deleted unless we have other legally permissible reasons to keep it.

Legal basis for data processing

If you have given your consent, we process your personal data on the basis of Art. 6(1)(a) GDPR. If your data is needed to perform a contract or to take steps prior to entering into one (e.g. handling your membership application), we process it on the basis of Art. 6(1)(b) GDPR. If we are legally obliged to process it, the basis is Art. 6(1)(c) GDPR. Processing may also rely on our legitimate interest under Art. 6(1)(f) GDPR.

Recipients of personal data

We only share personal data with third parties if this is necessary to run the website or handle your request, if we are legally obliged to do so, or if another legal basis permits it. Service providers acting on our behalf are bound by data processing agreements. See section 5 for the providers used on this website.

Withdrawal of your consent

Many data processing operations are only possible with your express consent. You can withdraw consent already given at any time. The lawfulness of the processing carried out before the withdrawal remains unaffected.

Right to object (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(e) OR (f) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.

Right to lodge a complaint with a supervisory authority

If the GDPR is infringed, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement. In Italy, the competent authority is the Garante per la protezione dei dati personali (garanteprivacy.it).

Right to data portability

You have the right to receive the data we process automatically on the basis of your consent or to perform a contract, in a common, machine-readable format, or to have it transferred to another controller where technically feasible.

Access, rectification, erasure and restriction

Within the framework of the applicable law, you have the right to obtain information about your stored personal data, its origin, recipients and the purpose of processing, and to request its rectification or erasure. You may also request restriction of processing: if you contest the accuracy of your data (for the time needed to verify it); if the processing is unlawful and you prefer restriction to erasure; if we no longer need the data but you need it to establish, exercise or defend legal claims; or if you have objected under Art. 21(1) GDPR, pending verification of whose interests prevail. To exercise these rights, contact us at any time.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in the address bar and the lock icon in your browser.

Rejection of unsolicited e-mails

We object to the use of the contact data published on this website for sending promotional material that was not expressly requested.

4. Data recording on this website

Cookies and local storage

This website does not use cookies. To remember your language choice (Italian or English), the site stores a small preference in your browser’s local storage. It stays on your device, is not sent to us, and is strictly necessary for the functioning of the site you requested; you can delete it at any time from your browser settings.

Server log files

Cloudflare, our hosting provider, automatically records technical information such as browser type and version, operating system, referrer URL, host name of the accessing device, time of the request and IP address. This data is not merged with other data sources. The basis is Art. 6(1)(f) GDPR.

Membership application form

If you send us an application through the membership form, we collect and store the data you enter: name, e-mail address, affiliation, role, year, JSPS programme, host institution, field of research and short bio. We use it only to evaluate your application and to contact you. The data is sent to the association by e-mail, via an e-mail service provider. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a membership) and, for any optional information, your consent under Art. 6(1)(a) GDPR.

News and events content

News and events shown on this website are managed in Notion (Notion Labs, Inc.). Your browser does not connect to Notion: the content is retrieved by our server. No personal data of visitors is sent to Notion.

5. Plug-ins and tools

Google Fonts

This website uses Google Fonts to display text uniformly. The fonts are loaded from Google’s servers, so when you visit the site your browser connects to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and your IP address is transmitted to Google. The basis is our legitimate interest in a consistent presentation (Art. 6(1)(f) GDPR). For more information: developers.google.com/fonts/faq and policies.google.com/privacy.

Font Awesome

This website uses Font Awesome icons, loaded from the cdnjs content delivery network operated by Cloudflare. Your IP address is transmitted to Cloudflare when the files are loaded. The basis is Art. 6(1)(f) GDPR. See fontawesome.com/privacy.

Images from Unsplash

The background image of the home page is loaded from Unsplash (images.unsplash.com). When the page is loaded, your IP address is transmitted to the provider. The basis is Art. 6(1)(f) GDPR.

E-mail delivery

Membership applications are sent by e-mail through an external service provider acting on our behalf. The provider processes the content of the application only to deliver the message.

Alumni Assistant
AI preview · beta
Hello! I can answer general questions about JSPS fellowships, the association and upcoming events. How can I help?