PRIVACY NOTICE- LINK CAMPUS UNIVERSITY
Link Campus University shall adopt the necessary measures to ensure the Application of the European Regulation 2016/679 GDPR (General Data Protection Regulation), and of the national legislation related to the protection of natural persons with regard to the processing of personal data. We hereby inform you that EU Regulation 2016/679, related to the protection of natural persons with regard to the processing of personal data has been in force since 25 May 2018.
Definition of persona data:
Personal data, revealing the identity of a natural person
Sensitive data, revealing racial or ethnic origin, religious or philosophical beliefs, political opinions, membership in political parties, trade unions, religious associations or organizations, as well as personal data revealing health status and sex life
Judicial data, revealing judicial measures, or administrative measures applied in the event of a crime, and any eventual pending charges; data revealing the quality of accused or suspected in accordance with articles 60 and 61 of the Code of Criminal Procedure;
The data controller is Università degli Studi Link Campus University, in the person of its pro tempore legal representative, the President of the Foundation Link Campus University, domiciled for the office at the headquarters of the University.
Data Protection Officer (DPO)
The data protection officer is a figure provided for in art. 37 of EU Regulation 2016/679. The DPO is appointed by the Data Controller with the purpose of performing support and control functions, as well as consultative, educational and informative functions relating to the application of the present Regulation.
In particular the DPO shall:
a) inform and advise the data controller, as well as the employees who carry out the processing regarding the obligations deriving from EU Regulation No. 2016/679, as well as other provisions of the Union or of the Member States concerning data protection
b) monitor compliance with the GDPR, as well as other national or EU provisions related to data protection, including the allocation of responsibilities, the organization of awareness-raising campaigns and the training of personnel participating to the data processing cycle and to the related monitoring activities;
c) provide, if required, an opinion in relation to the data protection impact assessment and monitor its performance pursuant to article 35 of the GDPR;
d) cooperate with the Data Protection Authorities;
e) act as contact point for the Data Protection Authorities on issues relating to data processing.
Contact details of the data protection officer (DPO)
The Data Protection Officer can be contacted at the email address: email@example.com.
Università degli Studi di Link Campus University, pursuant to art. 13 of the Italian legislative decree no. 196, issued on 30 June 2003, informs that the personal and identifying data regarding the students are managed by the Administration, for the purpose of complying with the legal requirements. The data processed are the following:
a) personal, identifying and informative data contained in the application form, including the data related to the qualification required for the access to the university courses;
b) data related to academic achievements (midterms and finals), or otherwise connected with the student’s academic career;
c) data related to students with disabilities;
d) data related to income, for the purpose of eventual exemptions from tuition fees.
Please note that the data processed include:
data defined as judicial, in accordance with art. 4, par. 1, lett. e) of the Italian legislative decree no. 196, issued on 30 June 2003, i.e. personal data revealing the elements referred to in art. 3, par. 1, lett. a) to o) and r) to u) of the Italian Presidential Decree n. 313 issued on 14 November 2002;
data defined as sensitive, in accordance with art. 4, par. 1, let. d) of the Italian Legislative Decree no. 196, issued on 30 June 2003
Purposes of the processing and legal basis
The processing of personal data required from the data subject is performed in accordance with art. 6 letter e) of EU regulation 2016/679, for the following purposes:
The data controller does not use automatic processes aimed at profiling the interested party.
Location and methods of processing
The data controller informs that the aforementioned data will be processed both in paper form and electronic form, through the insertion of said data into the student archives and into database. Furthermore, the personal data related to the student’s academic career will be stored indefinitely, taking into consideration the archiving obligations imposed by the current legislation. The other data collected for the fruition of the telematic and email services, will be stored for the time established by the current legislation and the University regulations.
Only if necessary, the personal data provided by the users will be transmitted to third parties, or to other public entities (for example, the Ministry of Education, University and Research, the Regional Authority for the Right to Higher Education) in charge of managing the provision of research grants and/or scholarships, or promoting studies and research projects, as well as other academic development projects. Furthermore, the personal data will be communicated to the banking institution in charge of managing the collection procedure for the academic fees.
The personal data will be processed by members of the teaching staff of the University, as well as by the technical personnel belonging to the competent departments for the various types of processing.
Furthermore, personal data may be disclosed to public or private companies hosting activities related to the students’ educational, research or internship pathway.
Personal data may be disclosed to international universities within the framework of the academic mobility programmes, for the purposes indicated in the present privacy notice.
Personal data may be disclosed to other public administrations, only if required for the purpose of eventual procedures within their institutional jurisdiction.
Furthermore, personal data will disclosed by the University, both during the initial acquisition of information, and throughout the entire academic career/postgraduate period, to external private subjects, institutions and associations, for the purpose of the implementation of orientation activities aimed at the introduction of the students into the labour market and for postgraduate activities; to co-owners and data processors in the capacity of physical and juridical persons providing the University with didactic or processing services, or carrying out instrumental/support activities, pursuant to contracts or agreements with the University.
The eventual transfer of data abroad to non-EU countries takes place in accordance with the provisions of Chapter V, GDPR (Article 46)
Rights of the interested subject
The New European Regulation on the protection of personal data (2016/679) ensures that the interested subject has:
the right to obtain confirmation of the existence or otherwise of processing related to personal data, even if not yet registered;
the right to know:
the origins of personal data;
the purposes and modality of the processing;
the logic applied in case of processing carried out with the support of electronic tools;
the identifying details of the data controller, of responsible parties and third parties to whom the personal data are disclosed.
the right to obtain by the data controller or by the responsible parties without delay:
the update, the rectification or, if necessary and of interest, the integration of data;
the deletion, the anonymization or the block of the processed data in violation of the law, including those of which is required the storage, in relation to the purposes for which they were collected and processed;
the declaration that the procedures provided for in lett. a) and b) are brought to the attention, also with regard to their content, of the third parties who received communication of said data, except in the case where this requirement proves impossible or involves a use of means manifestly disproportionate to the protected right.
the right to oppose in whole or in part:
for legitimate reasons, to the processing of personal data concerning them, even if they are relevant to the purpose of collection;
to the processing of personal data concerning them, for the purpose of the sending of commercial, promotional or advertising material.
Link Campus University