Disclosure pursuant to Art. 13 of EU regulation no. 679/2016 (GDPR) on the processing of personal data provided by students when registering
The University of Modena and Reggio Emilia (hereinafter referred to as "Unimore"), in the person of its legal representative, the Rector pro tempore, in his capacity of Data Controller of its personal data, pursuant to EU regulation no. 679/2016, hereinafter referred to as "GDPR", hereby informs you that the above-mentioned regulation provides for the protection of the people and other subjects on personal data processing, and said processing will be based on principles of fairness, lawfulness, transparency, and protection of your privacy and rights. Your personal data, relating to and connected with your relationship with Unimore, will be processed under the legal provisions of the afore-mentioned regulation and the privacy obligations provided therein.
Processing purposes
The personal data you provided will be processed solely to comply with the Unimore institutional purposes. More specifically
- - in the event of simple registration to the Esse3 portal, your data will be processed to provide you with the access credentials so that you can access its functions and services;
- - if you enrol, your data will be processed for the activities we need to carry out for you university career, your guidance and right to study, placement, and for informing you on Unimore and related institutions initiatives;
- - to comply with the legal obligations of the Data Controller.
Unimore processes your data based on the consent you gave us.
Communication of personal data
For the purposes listed above, your data may be disclosed to:
- - consultants in charge of helping the Data Controller comply with the legal obligations of the latter (e.g. lawyers, tax advisors);
- - public administrations (e.g. MIUR, affiliated universities, Regional Board for the Right to Higher Studies - ER.GO;
- - research centres, institutions related to the Data Controller (e.g. AlmaLaurea, CISIA);
- - private companies affiliated with the University for the development of internship projects.
Compulsory or voluntary nature of the data provision
You are not obliged to give us your data, but in that case we would not be able to provide you with the services requested.
Types of processed data
For the purposes mentioned above, the data collected may be of various types: general data, identification (e.g. first name and last name; physical and/or phone and/or digital contacts), income and/or equity data, school data. The processing may include data belonging to the “special” categories as per Art. 9 of the GDPR (e.g. health data) and/or data provided for in Art. 10 of the GDPR (judicial data).
Processing modes
Data is collected, processed and filed mainly on digital and computerised means. Some processing activities that are not available on digital means will be performed on hard copy.
Data transfer abroad
Your data may be transferred to third countries in the following cases:
- - use of cloud services by the Data Controller (e.g. Google). With regard to the cloud service, data is processed based on a formal appointment of the provider, together with suitable information and instructions given on safety measures and procedures to be adopted to ensure a proper level of safety;
- - Universities, research institutions, affiliated private companies for the management of study or research programmes abroad (e.g. Erasmus project).
Data retention period
Your personal data will be retained for the institutional purposes of the University and pursuant to specific law obligations, with no time limit.
Rights of the data subject
Pursuant to the GDPR, you have the following rights:
Art. 15 Right of access of the data subject;
Art. 16 Right of rectification;
Art. 17 Right of cancellation;
Art. 18 Right of restriction to processing;
Art. 20 Right of data portability;
Art. 21 and Art. 22: Right to object and automated decision-making process relating to natural persons.
To verify the conditions and modes for the exercise of the rights listed above, please refer to the integral text of the above-mentioned provisions, available on the website: www.garanteprivacy.it.
Please note that should you consider that your rights mentioned above are infringed, under the current regulations you may complain to the national Supervision Authority.
Data Controller and Data Protection Officer’s identification data
Data Controller: under the law, the Data Controller is the University of Modena and Reggio Emilia, represented by the Rector and with headquarters at the address via Università n. 4 - 41121 Modena, Phone number: 059 2056095.
Data Protection Officer: Vittorio Colomba, email address: dpo@unimore.it.