PRIVACY NOTICE- LINK CAMPUS UNIVERSITY

PRIVACY POLICY

Link Campus University shall adopt the necessary measures to ensure the Application of the European Regulation 2016/679 GDPR (General Data Protection Regulation), and of the national legislation related to the protection of natural persons with regard to the processing of personal data. We hereby inform you that EU Regulation 2016/679, related to the protection of natural persons with regard to the processing of personal data has been in force since 25 May 2018.

Definition of persona data:

Personal data, revealing the identity of a natural person
Sensitive data, revealing racial or ethnic origin, religious or philosophical beliefs, political opinions, membership in political parties, trade unions, religious associations or organizations, as well as personal data revealing health status and sex life

Judicial data, revealing judicial measures, or administrative measures applied in the event of a crime, and any eventual pending charges; data revealing the quality of accused or suspected in accordance with articles 60 and 61 of the Code of Criminal Procedure;

Data controller

The data controller is Università degli Studi Link Campus University, in the person of its pro tempore legal representative, the President of the Foundation Link Campus University, domiciled for the office at the headquarters of the University.

Data Protection Officer (DPO)

The data protection officer is a figure provided for in art. 37 of EU Regulation 2016/679. The DPO is appointed by the Data Controller with the purpose of performing support and control functions, as well as consultative, educational and informative functions relating to the application of the present Regulation.

In particular the DPO shall:

a) inform and advise the data controller, as well as the employees who carry out the processing regarding the obligations deriving from EU Regulation No. 2016/679, as well as other provisions of the Union or of the Member States concerning data protection
b) monitor compliance with the GDPR, as well as other national or EU provisions related to data protection, including the allocation of responsibilities, the organization of awareness-raising campaigns and the training of personnel participating to the data processing cycle and to the related monitoring activities;
c) provide, if required, an opinion in relation to the data protection impact assessment and monitor its performance pursuant to article 35 of the GDPR;
d) cooperate with the Data Protection Authorities;
e) act as contact point for the Data Protection Authorities on issues relating to data processing.
Contact details of the data protection officer (DPO)
The Data Protection Officer can be contacted at the email address: rpd@unilink.it.

Processed data

Università degli Studi di Link Campus University, pursuant to art. 13 of the Italian legislative decree no. 196, issued on 30 June 2003, informs that the personal and identifying data regarding the students are managed by the Administration, for the purpose of complying with the legal requirements. The data processed are the following:

a) personal, identifying and informative data contained in the application form, including the data related to the qualification required for the access to the university courses;
b) data related to academic achievements (midterms and finals), or otherwise connected with the student’s academic career;
c) data related to students with disabilities;
d) data related to income, for the purpose of eventual exemptions from tuition fees.

Please note that the data processed include:

data defined as judicial, in accordance with art. 4, par. 1, lett. e) of the Italian legislative decree no. 196, issued on 30 June 2003, i.e. personal data revealing the elements referred to in art. 3, par. 1, lett. a) to o) and r) to u) of the Italian Presidential Decree n. 313 issued on 14 November 2002;

data defined as sensitive, in accordance with art. 4, par. 1, let. d) of the Italian Legislative Decree no. 196, issued on 30 June 2003

Purposes of the processing and legal basis

The processing of personal data required from the data subject is performed in accordance with art. 6 letter e) of EU regulation 2016/679, for the following purposes:

• enrolment and attendance to the courses of studies provided by the university, both in presence and in e-learning modality
• management of the academic career
• fruition of the orientation services
• attainment of the academic title
• calculation of the amounts of the tuition fees
• fruition of the telematic services and the email services
• fruition of the library services
• access to laboratories and other protected structures
• fruition of contributions, subsidies and services related to the right to university education
• application of workplace security measures according to the dispositions provided for in Legislative Decree 81/2008
• sending communication regarding the academic career
• collection of data for the purpose of didactic evaluation and customer satisfaction
• archiving and storage of data related the student’s academic career, with regard to  the studies carried out, the eventual positions held, and the academic qualifications obtained
• elections of the student representatives, as well as the eventual performance of the duties related to the elective position in the academic governing bodies held by the person concerned
• statistics and historical and scientific research, collected in anonymous form
• eventual fruition of benefits relating the chronic or temporary disability of the person concerned.
  
  Furthermore, the processing of personal data related to the student’s academic career is required for the following purposes:
  communication to public or private third parties for occupational or cultural purposes;
  commercial information and sending of advertising/informative material related to goods and services, also belonging to co-owner societies or to societies otherwise connected to the University, both with automated and conventional methods, email and related Web applications, by user’s express consent.
  
  The personal data may be disclosed to other public subjects when the communication is necessary or functional to the performance of the institutional functions of the University requested by the interested party, such as, for example, the public bodies in charge of the management of contribution for research projects and scholarships.

The data controller does not use automatic processes aimed at profiling the interested party.

Location and methods of processing

The data controller informs that the aforementioned data will be processed both in paper form and electronic form, through the insertion of said data into the student archives and into database. Furthermore, the personal data related to the student’s academic career will be stored indefinitely, taking into consideration the archiving obligations imposed by the current legislation. The other data collected for the fruition of the telematic and email services, will be stored for the time established by the current legislation and the University regulations.

Data recipients

Only if necessary, the personal data provided by the users will be transmitted to third parties, or to other public entities (for example, the Ministry of Education, University and Research, the Regional Authority for the Right to Higher Education) in charge of managing the provision of  research grants and/or scholarships, or promoting studies and research projects, as well as other academic development projects. Furthermore, the personal data will be communicated to the banking institution in charge of managing the collection procedure for the academic fees.

The personal data will be processed by members of the teaching staff of the University, as well as by the technical personnel belonging to the competent departments for the various types of processing.

Furthermore, personal data may be disclosed to public or private companies hosting activities related to the students’ educational, research or internship pathway.

Personal data may be disclosed to international universities within the framework of the academic mobility programmes, for the purposes indicated in the present privacy notice.

Personal data may be disclosed to other public administrations, only if required for the purpose of eventual procedures within their institutional jurisdiction.

 Furthermore, personal data will disclosed by the University, both during the initial acquisition of information, and throughout the entire academic career/postgraduate period, to external private subjects, institutions and associations, for the purpose of the implementation of orientation activities aimed at the introduction of the students into the labour market and for postgraduate activities; to co-owners and data processors in the capacity of  physical and juridical persons providing the University with didactic or processing services, or carrying out instrumental/support activities, pursuant to contracts or agreements with the University.

The eventual transfer of data abroad to non-EU countries takes place in accordance with the provisions of Chapter V, GDPR (Article 46)

Rights of the interested subject

The New European Regulation on the protection of personal data (2016/679) ensures that the interested subject has:

the right to obtain confirmation of the existence or otherwise of processing related to personal data, even if not yet registered;
the right to know:
the origins of personal data;
the purposes and modality of the processing;
the logic applied in case of processing carried out with the support of electronic tools;

the identifying details of the data controller, of responsible parties and third parties to whom the personal data are disclosed.

the right to obtain by the data controller or by the responsible parties without delay:
the update, the rectification or, if necessary and of interest, the integration of data;
the deletion, the anonymization or the block of the processed data in violation of the law, including those of which is required the storage, in relation to the purposes for which they were collected and processed;

the declaration that the procedures provided for in lett. a) and b) are brought to the attention, also with regard to their content, of  the third parties who received communication of said data, except in the case where this requirement proves impossible or involves a use of means manifestly disproportionate to the protected right.
the right to oppose in whole or in part:
for legitimate reasons, to the processing of personal data concerning them, even if they are relevant to the purpose of collection;
to the processing of personal data concerning them, for the purpose of the sending of commercial, promotional or advertising material.

Update of the Privacy Policy

At our complete discretion , we reserve the right to modify or update the present Privacy Policy.

Link Campus University