entra in LIUCMyLiucEnglish
European General Data Protection Regulation (GDPR)

1 Information collected

The Università can collect the following types of personal data:

  • the name and contact information, such as address, e-mail address and telephone number, data relating to the company or business in which the data subject works;
  • information relating to previous training, role within the company and other information related to the professional sphere. Documentation will be kept on the assessment of previous interactions with the Università and on feedback in relation to the role of the company (clients for teaching or research activities of the Università, suppliers of the Università, partners in activities or specific programmes such as Career Service for the organisation of internships and work placements, dissemination of job opportunities, graduate reports) or for fundraising activities or contributions for the right to study;
  • information related to interaction with the Università such as participation in events and/or training courses, organisation of internships and work placements and job opportunities for students and Università graduates.


2 Purpose and processing of data

As an individual, employee or representative of certain companies, images, produced by the Università in carrying out the activities or in the relationships, will be processed, also with the aid of electronic or automated means. The data will be processed for the following purposes:

  1. for the supply of goods and services;
  2. for the management of academic and training initiatives, including work placement activities, internships and any other related training activity;
  3. for the provision of research services, including research activities and training products;
  4. to support the activities of the Università and fundraising;
  5. under explicit consent, for the dissemination of periodical publications, including the collection of funds and initiatives to support the activities of the Università, both in paper and electronic format; other publishing/digital/paper activities for communication/promotion purposes of the Università that require the use of images made within the Università, which could also consist of publication on social networks.
  6. for reasons of security and internal organisation. Furthermore, for the same reasons, the data collected may be used for statistical and research purposes in an anonymous and aggregate form;
  7. for the organisation and participation in other entrepreneurial events and initiatives, including entry competitions;
  8. for compliance with contractual and legal obligations. It should also be noted that the Università may transmit some data to other organisations if this is necessary for the identification or prevention of crimes or if this is required by law.


3 Circulation and communication of data

Access to data is permitted for the personnel of the Università, who need the data for the fulfillment of their duties, as well as the other persons who provide services to the Università in relation to the tasks performed. Access to data is always connected to the purposes indicated previously.

Furthermore, the data of the data subject may also be communicated to:

  1. national and international public bodies, such as Ministries and Public Administration Offices, in relation to the performance of the Università’s institutional tasks,
  2. banking institutions, in particular UBI Banca, as part of the contract with the data subject;
  3. public and private bodies to demonstrate the previous experience, skills and field of excellence of the Università and its professors and researchers;
  4. natural or legal persons, external bodies and associations, including public and professional studies and companies (also outside the Italian Republic), for the execution of the contract with the data subject and for the legitimate interests of the Università;
  5. close relatives, in any case where it is necessary to inform them and provide them with urgent communications;
  6. international bodies, in relation to participation in international programmes or financing activities when the country of destination complies with the principle of adequacy of the GDPR.


4 Data Concession

The following Data are not subject to the consent of an data subject: data processed for security and internal organisation purposes; data for the use of goods and services requested and signed and processing of data for the fulfillment of legal obligations. Data that are processed with the consent of the data subjects may not be necessary, but they are nevertheless significant in order to provide some services. The data provided will go to servers located in the European Economic Area.


5 Basis for processing information

Data can be processed when:

  • it is necessary for the execution of a contract or a contract of collaboration with the company of affiliation;
  • it is necessary to provide or receive the goods and services contained in the contract, as well as other ancillary activities;
  • it is necessary for the performance of tasks of public interest as an academic institution;
  • it is necessary under an agreed convention for internships or work placements;
  • it is necessary for the Università or for the legitimate interests of third parties, including security measures and internal organisation and institutional communications;
  • the consent of the data subject was given;
  • a legal obligation must be respected.


6 International data transfers

Some personal data may be transferred and stored in a destination outside the European Economic Area (“EEA”), for example where they are processed by one of the suppliers or partners of  the Università.

In such circumstances, personal data will only be transferred if:

  • the transfer is subject to one or more “adequate safeguards” for international transfers provided for by the applicable law (for example, standard data protection clauses adopted by the European Commission);
  • a decision of the European Commission establishes that the country or territory to which the transfer is made guarantees an adequate level of protection; or
  • there exists another situation where transfer is permitted by applicable law (for example, in the case of explicit consent).