The European Data Protection Regulation No. 2016/679 (hereinafter referred to as GDPR) confirms the right of all persons to the protection of their personal data.
As a student (hereinafter "data subject"), the Free University of Bozen-Bolzano will inform you, in accordance with Articles 13 and 14 of the GDPR, of the purposes and methods of processing your personal data.
Special data protection instructions will also be provided you for specific administrative processes, administrative procedures and/or the use of services.
The controller of the data processing is the Free University of Bozen-Bolzano, registered office “Piazza Università 1, Bolzano” in the person of the President and legal representative pro tempore.
The Data Protection officer (DPO) can be contacted under the following e-mail address: firstname.lastname@example.org
Personal data are processed by the Data Controller for the following purposes:
The institutional e-mail address assigned to the student at the time of enrolment is the communication tool between the student and the University to which all official communications and information relating to career management, including news and events organized by the University itself, will be sent. For communication with prospective graduates and graduates, the e-mail address provided by the student at the university before the degree will be used as an alternative.
The following data types are processed for the purposes indicated above:
The processing of personal data for the purposes indicated above is carried out by the processor at the basis of at least one of the following conditions of lawfulness.
For personal data pursuant to Art. 6 (1) of the GDPR:
For data belonging to "special types of data" (former sensitive data):
The provision of personal data for the above purposes, except in the cases specified below, is essential for the establishment and management of the relationship between the student and the University and for the fulfillment of related legal obligations.
The provision of data, including data belonging to the "special types of data" for the purposes indicated in letters n) and s) is optional, but failure to provide such data will make it impossible for the University to guarantee the provision of the service, participation in the activity and/or use of the facilities requested.
For the processing of anonymous and/or aggregated data, the regulations on the protection of personal data do not apply.
Personal data are usually collected directly from the data subject. In some cases they can be obtained from other sources such as public databases (SPID, ISEE), public administrations, criminal records, tax assistance centres.
The data are processed by our employees, also with the aid of electronic means and solely for the proper performance of the institutional tasks of the University, in accordance with all the obligations established by GDPR - including those of security and confidentiality - of the internal regulations on data protection and following the instructions given by their respective manager.
The data may also be processed by persons to whom the right of access is recognized by provisions of law, or secondary legislation.
The personal data may be communicated, during students’ study careers, and even after graduation, to other parties, public and private, when this is necessary for the implementation of the institutional goals of the University, including the provision of specific services to students, conducting internships, inter-university exchange programs (such as Erasmus+ and bilateral agreements), the transmission of the data to partner universities in relation to study programmes, which are offered in cooperation with different universities, entering the world of work and in any case for all activities related and instrumental to those purposes. In compliance with regulations and to give an example, the data may be periodically transmitted to the ‘Anagrafe nazionale degli studenti’ in adherence to Art. 1-bis of Lgs. D. no. 105/2003, converted into Law no. 170/2003, and sent to the Ministry of Education periodically for statistical and mandatory purposes. The Free University of Bozen-Bolzano makes the curricula of its students public and freely accessible on www.unibz.it, pursuant to art. 6 of Legislative Decree no. 276/2003, from the date of registration until at least twelve months from the date of obtaining the degree and will forward them also to the Cliclavoro portal (www.cliclavoro.gov.it) of the Ministry of Labour and Social Policy. The data are also made available to the interuniversity Consortium AlmaLaurea, to which the Free University of Bozen-Bolzano belongs, for processing questionnaires relating to the analysis and evaluation of efficiency, in adherence to D.M. no. 544/2007. Your data can be transmitted to the Labour Office of the Autonomous Province of Bolzano (Ripartizione lavoro) for statistical purposes regarding the employment situation of graduates. The data can also be made available for historical, statistic and scientific use as by law and in full compliance with legal ethics. Your personal data will be communicated to the Cloud Service of Exlibris Europe, with whom the Free University of Bozen-Bolzano has signed a service contract in order to guarantee the best library service for its patrons. Exlibris’ servers are located in Europe (The Netherlands) and comply to the rules of the 95/46/CE Directive and the Privacy Shield principles. Your personal data may be also processed by subjects entitled by law or secondary legislation. Your data may also be transmitted to another public institution in order to verify the declarations in lieu of certificate (see art. 71 of D.P.R: 445/2000). The data could be furthermore transmitted to all the subjects who must/can receive communication about them and to all the subjects who are entitled to access your data.
Personal data can be communicated to external subjects, institutions and student advisory associations, for internship and job initiatives, for postgraduate education and for the assignation of accommodation places. The data can also be transmitted to other public subjects, for example, to public institutions managing funds for research or grants, limited to institutional reasons and their relevance, and only for the duration of the processing they are required for. In order to optimize services for students and to fulfil institutional duties, the University may forward personal data also to outsourcing companies limited to specific activities. After verification of specific requirements, expertise, knowledge and reliability in the matter, these companies are designated as external data processors. In exceptional cases evaluated by the Faculty Secretariat, upon presentation of a reasoned request and for didactic reasons only, your phone number can be provided to professors with regular contract at the University of Bozen-Bolzano.
In order to facilitate student advising, education and job entrance (also in foreign countries), the University, is allowed to communicate or disseminate data regarding students’ exams results (intermediate and final results) and other personal data, not including judicial data, also to private persons, by digital means.
Within the scope of the above purposes, your personal data may be transferred to countries outside the EU within the limits and under the conditions set out in Articles 44 et seq. of the GDPR and in particular:
The determination of the period of conservation of personal data will be defined according to the criteria of necessity of the treatment and in compliance with legal obligations and/or regulations on the subject. Your personal data will therefore be kept for the entire period necessary to achieve the purposes indicated in point 2 above. Your data may be kept for a longer period limited to cases of filing in the public interest, scientific research, historical reasons or for statistical purposes, subject to the adoption of appropriate technical and organizational measures.
You have the right to request from the Data Controller access to and rectification or erasure of personal data, to have incomplete personal data completed, the restriction of processing concerning the data subject and to object to processing as well as the right to data portability and the right to lodge a complaint with a supervisory authority (Garante della Privacy http://www.garanteprivacy.it/), as well as to exercise the other rights recognized by Applicable Law (Art. 15 ff. GDPR).
If you have consented to processing of your personal data, you have the right to withdraw such consent at any time. You can exercise your rights by using the following e-mail address: email@example.com
Before we can provide you with or change any information, it may be necessary to verify your identity.
This information may be viewed on the intranet of the Free University of Bozen-Bolzano.
Last review: 16.04.2019