entra in LIUCMyLiucEnglish
European General Data Protection Regulation (GDPR)

1 Information collected

The Università can collect the following types of personal data:

  • name and contact information, such as address, e-mail address and telephone number, as well as place and date of birth, tax code and passport or identity card number, country of residence and nationality, as well as bank details. A unique matriculation number will also be assigned to each student;
  • information relating to previous scholastic, academic or professional experience, the duration of studies and the results of exams, the title of the thesis or the final project. The documentation on exams taken, exam marks and other information contained in the student’s curriculum, on evaluation of study experiences abroad, on work experience (internship or other), and evaluation questionnaires will be kept;
  • information on the family or personal situation and on both academic and extra-curricular interests, for example where this is relevant for assessment of the suitability to receive a scholarship or to provide appropriate assistance in relation to the needs of each student;
  • personal data may also be processed in relation to participation in sporting events and academic competitions based on merit;
  • sensitive personal data: information on the health of the student and their family members, political opinions, belonging to political student groups, possible convictions or crimes that are detected in internal disciplinary proceedings, etc. will be treated only for the purposes permitted by law and only for the tasks of the Università. Sensitive data also refers to all information related to a special category of students with disabilities (such as DSA/BES).

If an data subject does not express their consent to the processing of sensitive data, the Università will not be able to register them in the IT systems of the Università.


2 Purpose and processing of data

Information concerning the Università career and the images of students, produced by the Università in the exercise of their institutional functions, will be processed, also with the aid of electronic or automated means. The data will be processed for the following purposes:

  1. The Università can use data for Università orientation, to access the use of available academic resources and services. This purpose includes all the processing activities relevant and necessary to provide a comprehensive, continuous and global educational and work guidance service. Relevant data processing activities will be the selection and admission procedure, enrolment and career, the use of e-learning platforms and communication between students, communication between teachers and students or between Università staff and students, the degree, the publication of theses, job placement, accommodation, catering, sport and culture, and social commitment initiatives.
  2. for the activities and institutional tasks of the Università. This also includes participation in institutional events (such as a graduation ceremony, etc.) or other initiatives related to compulsory academic activities; There is also provision for: communication of contact data within the group to which students belong in relation to lectures/lessons and assessment of exams, the sending of multi-media aids, the dissemination of periodical publications reserved exclusively for students of the Università and referred to important institutional events for career and Università life, job market orientation initiatives (internships and placements), post-graduate training and scholarships;
  3. for the dissemination of periodical publications both in paper and electronic format; other publishing/digital/paper activities for communication/promotion purposes of the Università that require the use of images made within the Università;
  4. for reasons of security and internal organisation, including the assignment of the card for access to Università services.
  5. for sending periodic newsletters as well as notices and invitations to participate in cultural and social events and initiatives offered by the Università , including initiatives to support the Università;
  6. for registration and participation in competitions or academic competitions;
  7. for library services purposes, to allow access, among other things, to the services and materials contained therein, to borrow books and other editorial products, for consultation and, more generally, to benefit from all the services offered by the library;
  8. for research and statistical purposes, in an anonymous and aggregate form;
  9. For compliance with legal obligations. It should also be noted that the Università may transmit some data to other organisations if this is necessary to fulfill legal obligations (such as identification or prevention of crimes or if required by law).


3 Circulation and communication of data

Personal data can be accessed by students enrolled on courses, and similar activities, through the e-learning platform, the staff of the Università, the teachers of courses attended, and other persons required by law or charged with administrative aspects and academic services who need the data for the performance of their duties or for the position held, as well as the other persons who provide services to the Università, who, in relation to the tasks performed, have access to the data.

All this, is always in relation to the purposes indicated above.

Furthermore, the data of the data subject may also be communicated to:

  1. national and international public bodies such as Ministries and Public Administration Offices, in relation to the performance of the Università’s institutional duties, including those relating to the procedures for issuing a residence permit;
  2. banking institutions;
  3. natural or legal persons, external bodies and associations, including public and professional studies and companies (also outside Italy), for the execution of contract with the data subject and for the legitimate interests of the Università. These data may also be disclosed to other legal persons.
  4. other student networks, in this context the data could be accessible to former students, even those who live outside Italy;
  5. close family environment, in any case where it is necessary to inform and provide them with urgent communications;
  6. international bodies, in relation to participation in international programmes when the country of destination complies with the principle of adequacy (even if the Università has a mobility agreement with that country).


4 Consent to data processing

The processing of the following data is not subject to student consent: data processed for purposes of security and internal organisation; data for the use of requested and subscribed academic goods and services; institutional tasks of data processing of the Università as well as for the performance of activities and communications relating to products and services for which an data subject has shown particular interest; processing of data for access to the Library and related services and processing of data for the fulfillment of legal obligations.

Data that are processed with the consent of the data subjects may not be necessary, but they are nevertheless significant in order to provide some services in the interest of a student.


5 Basis for processing information

Data can be processed when:

  • it is necessary for the execution of the relationship with a student or to take action at the request of the same, even before the acquisition of the student’s qualification;
  • it is necessary for the performance of tasks of public interest as an academic institution, internal organisation and institutional communication;
  • it is necessary for the protection of vital interests of the Università or those of third parties, including security measures, for the Università or for the legitimate interests of third parties;
  • the consent of the data subject was given;
  • a legal obligation must be respected.


6 International data transfers

Some personal data may be transferred and stored in a destination outside the European Economic Area (“EEA”).

In such circumstances, personal data will only be transferred:

  • if the transfer is subject to one or more “adequate safeguards” for international transfers provided for by an applicable law (for example, standard data protection clauses adopted by the European Commission);
  • if a decision of the European Commission establishes that the country or territory to which the transfer is made guarantees an adequate level of protection; or
  • if there is another situation where transfer is permitted by an applicable law