entra in LIUCMyLiucEnglish
European General Data Protection Regulation (GDPR)

Università Carlo Cattaneo – LIUC (hereinafter referred to as  the “Università”), with its registered office at Corso Matteotti 22, Castellanza, declares to fall within the scope of application of the General Regulations on Protection of Personal Data (hereinafter referred to as the “Law” or “GDPR”), with reference to the use of personal data (hereinafter referred to as the “data”), including data considered “sensitive” (in the broadest sense of the term provided by law), that is to say information relating to health, one’s own or of family members, provided by the data subject.

 

1 General principles

The collected data will be:

  1. handled in a lawful, correct and transparent way towards the data subject according to the principles of “lawfulness, correctness and transparency”;
  2. collected for specific, explicit and legitimate purposes and, subsequently, processed in ways that are not incompatible with these purposes;
  3. adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, in accordance with the principle of “data minimisation”;
  4. accurate and, if necessary, updated; all reasonable measures will be taken to cancel or correct inaccurate data in relation to the purposes for which they are processed, in accordance with the principle of “accuracy”;
  5. stored in a form that allows identification of data subjects for a period of time not exceeding the achievement of the purposes for which they are processed, in accordance with the principle of “limitation of conservation”;
  6. processed in such a way as to ensure adequate security of personal data, including protection, through appropriate technical and organisational measures, unauthorised or unlawful processing and accidental loss, destruction or damage, in accordance with the principle of “integrity and confidentiality” ». (Article 5 GDPR).

 

2 Methods of processing

The processing of personal data may take place using manual, computerised and telematic tools, though always under the supervision of technical and organisational measures to guarantee security and confidentiality, especially in order to reduce the risk of destruction or loss, even accidental, of data, unauthorised access, or processing that is not allowed or does not comply with the purpose of the collection.

Except as provided for in the specific information, concerning data for which consent is not required or can not be deleted, the data will be kept only for the time and scope for which they were collected.

 

The Università can avail itself of the support of external suppliers for the provision of some services necessary for technical-administrative management, which may be aware of the personal data of the data subjects, for the sole purpose of the requested service.

 

3 Rights of the data subject

In relation to the processing of personal data, an data subject has the right to request:

  1. access: they may ask for confirmation whether or not data is being processed concerning them;
  2. correction: they may request to rectify or supplement the data that they have provided or otherwise is in possession of the Università, if they consider such data to be inaccurate, in any case where they can not modify them independently;
  3. cancellation: they may request that the data acquired or processed by the Università be cancelled, if such data are no longer necessary for the purposes indicated, in any case of revocation of consent or opposition to treatment, in any case of unlawful processing, or if there is a legal obligation cancellation policy;

Please note that pursuant to article 6 and article17, third paragraph of the Law, the data will be processed in any case where it is necessary to fulfill a legal obligation to which the data processor is subject, if the processing and storage or storage of data are necessary for the execution of a task of public interest, or connected to the exercise of public authority for which the data processor is invested;

  1. limitation: they may request the limitation of the processing of personal data, when one of the conditions is set forth in article 18 of the GDPR; in this case, the data will not be processed, except for storage, without consent, with the exception of what is stated in the same article, in paragraph 2;
  2. opposition: they may oppose at any time the processing of their data on the basis of a legitimate interest of the Università. In some cases (such as in the exercise of their institutional functions, or defence in a court of Law) the legitimate interest of the Università prevails over that of the data subject; the opposition of the data subject will instead always and always in the interest of the Università in the case of data processing for marketing or commercial purposes. Article 21 of the Law will apply
  3. portability: they may ask to receive their data, or send the data to another owner indicated by them, in a structured format, commonly used and readable by an automatic device.
  4. right to be forgotten: this information only concerns the processing of personal data that the data subject has provided to the Università, possibly also by purchasing services provided against payment or by participating in initiatives and courses – and those that, eventually, the Università will acquire during the course of the relationship.

If the data subject wants to assert the above rights, in particular the right to be forgotten (article 17 of the GDPR), they should send a written request to the e-mail address privacy@liuc.it

 

Please note that having regard to article 6 and article 17, third paragraph of the Law, the data will be processed in any case where it is necessary to fulfill a legal obligation to which the data processor is subject, if the processing and storage or storage of data are necessary for the execution of a task of public interest, or related to the exercise of official authority vested in the data processor.

 

4 Contacts

Any questions concerning this privacy statement or how to process personal data should be addressed to the person responsible for Personal Data Protection, contactable at the following email address: rpd@liuc.it

 

5 Changes to the Privacy and Cookie Policy

The Università reserves the right to make changes to this Privacy Policy at any time, by giving notice by publishing it on the LIUC website. Data subjects are therefore invited to check such updates on the LIUC webite.

If any changes are particularly significant and/or impact heavily on the rights of the data subject, the Università could also communicate them via a different method (such as sending an email).