Privacy Policy | Università degli Studi di Trieste

Notice pursuant to Article 13 of Regulation (EU) 2016/679 laying down provisions on data protection and information about personal data processing for users who consult the University of Trieste’s website.

Personal Data Processing

The data controller is the University of Trieste, hereinafter referred to as the ‘University’, with its registered office at Piazzale Europa 1, I-34127 Trieste. The University is only responsible for the content published on its official communication channels.

The contact details of the Data Controller are: ateneo@pec.units.it

Data Protection Officer

Pursuant to Article 37 of Regulation (EU) 2016/679, the Data Controller has appointed Compliance Office and Data Protection as its Data Protection Officer. The contact details are: dpo@units.it

Legal basis

The legal basis for the processing of personal data is Article 6(1)(e) of Regulation (EU) 2016/679.

The personal data referred to in this notice is processed for the performance of tasks carried out in the public interest or in the exercise of official authority vested in the University.

Type of data processed

Navigation data

The computer systems and software procedures required for the functioning of the University website and online services acquire certain personal data whose transmission is implicit in the use of internet communication protocols or which is used to improve the quality of the service provided. This information is not collected to be associated with identified interests, however its processing and associations might naturally allow the identification of users. This data includes: IP address or computer domain name of the computers used by website users, Uniform Resource Identifiers (URIs) of requested resources, time of request, method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the user’s operating system and computer environment. This data is periodically erased and used for the following purposes:

to obtain anonymous (aggregated) statistical information on the use of the website and the services provided and to monitor its proper functioning;
to address operational issues also by identifying the access data of users who request it;

to ascertain responsibility in the event of possible cybercrimes against the University website.

Data voluntarily provided by the user

The optional, explicit and voluntary provision of personal data (name, email, address, etc.) and its possible collection through the University website is aimed at allowing the data controller to operate this service.

Specific notices will be shown or displayed on particular website sections or on pages providing special services.

Failing to provide mandatory data will prevent the provision of the requested service.

In addition to texts, images and other multimedia information, a webpage may also contain ‘instructions’ that are automatically executed by the user’s browser.

A webpage may also contain instructions for storing information on the user’s device (cookies).

Purpose and storage of data

The data collected is processed exclusively for statistical analysis in order to improve the services on offer. Data is only stored for the minimum time necessary to perform the service.

Communication and transmission of data

The data collected will not be disclosed to third parties.

Processing methods

The personal data will be processed electronically, in compliance with the principles on the protection of personal data provided for in Article 5 of Regulation (EU) 2016/679, such as data minimisation, accuracy and storage limitation, and implementing the appropriate technical and organisational measures provided for in Article 32 of the Regulation.

The personal data will be processed exclusively by individuals specifically authorised (data processors or persons authorised to process the data) to process it in compliance with the provisions of Articles 28 and 29 of the Regulation and only for the specific purposes indicated in this notice.

Purpose and place of stored data

The personal data collected by the University is managed and stored on servers located within the University and/or on external servers belonging to the providers of certain services necessary for technical administrative management. Such providers may process personal data solely for the purposes of the service requested and are duly appointed as Data Processors in accordance with Article 28 of Regulation (EU) 2016/679.

Rights of the data subject

Data subjects have the right to obtain confirmation as to whether or not the data controller has their personal data and to know their content and source. They may do so at any time.

Data subjects also enjoy the rights set out in Articles 15 to 22 of the GDPR, namely: the right of access to their personal data, the right to its rectification if inaccurate, the right to have incomplete personal data completed, in cases established by law or by the Regulation, the right to restriction of processing, the right to erasure or the right to object to processing by sending an appropriate request to the data controller at ateneo@pec.units.it or to the Data Protection Officer at dpo@units.it.

If a data subject believes that their data processing infringes the law, they may lodge a complaint with the Italian Authority for the Protection of Personal Data pursuant to Article 77 of the GDPR, or with a competent court.