privacy policy

Premise

Pursuant to art. 13 of Regulation (EU) 2016/679 (General Data Protection Regulation or GDPR), the University of Milan (hereinafter also referred to as the “University”) informs users of the humanhall.unimi.it website (hereinafter also referred to as “the website”) about the use of personal data concerning them.

Data Controller

The Data Controller is the University of Milan, in the person of the Rector pro tempore, with registered office in Via Festa del Perdono, n. 7 -20122 Milan (MI), who can be contacted at the e-mail address supportodpo@unimi.it

Data Protection Officer

Pursuant to Articles 37 et seq. of EU Regulation 2016/679, the University has appointed the Data Protection Officer (DPO) identified as Prof. Pierluigi Perri, e-mail: dpo@unimi.it

Purposes and legal bases of the processing

The data will be used pursuant to art. 6 par. 1, letters b) and c) of EU Regulation 2016/679, for the following purposes:

1. acquisition of preliminary information necessary to understand the user’s request;
2. execution and management of the request expressed in the form;
3. fulfilment of specific obligations deriving from laws, regulations and/or orders of the Authority related to the request and processing.
4. exercise the rights of the Data Controller in the context of legal disputes.

For the purposes set out above, consent is not required, which will instead be separately required, as per Article 6 paragraph 1, letter a) of the Regulation to implement newslettering activities, consisting in sending communications via e-mail regarding the matter of interest and the related regulatory updates.

For your protection, it should be noted that the data requested from you are only those strictly necessary for the fulfilment of these purposes, in compliance with the principle of minimisation referred to in Article 5, paragraph 1, letter c) and that, therefore, failure to provide them can only cause the impossibility of completing what has been requested.

Data subject to processing

The data that we have requested from you and that will be processed for the purposes indicated above can be defined as:

• Identification data: (name and surname);
• Contact details: (PEO address and phone number);
• Type of area of interest;
• Subject of the request.

Processing methods

The processing will be carried out both manually and electronically, in compliance with the provisions of art. 32 of EU Regulation 2016/679, by the Data Controller or by subjects specifically appointed and appointed by him.

Pursuant to art. 4 par. 2, it is specified that processing may consist of any operation or set of operations such as collection, recording, storage, adaptation and alteration, retrieval, consultation, communication, restriction, erasure or destruction.

Communication of data

In order to fulfil the above purposes and in the manner referred to in the previous paragraph, we may communicate the data to third parties to whom communication is required by law for the fulfilment of the aforementioned purposes.

These subjects will process the data as independent data controllers.

Retention period

The Data Controller will retain the data for the entire period necessary to fulfill the request and for the following 10 years.

For the purposes referred to in point 7., on the other hand, the Data Controller – while retaining them – will process the contact data for no longer than 2 years from the collection of consent to the specific processing, without prejudice to the early revocation of the same.

Your rights

Pursuant to art. 15 to 22 of the GDPR, data subjects may exercise, if the conditions are met, the right to request from the Data Controller access to personal data concerning them, rectification, erasure of the same, limitation of processing by contacting the Data Controller or the Data Protection Officer.

In particular, pursuant to Article 21(1) of the GDPR, the data subject may, on grounds relating to his or her particular situation, exercise the right to object to the processing of personal data concerning him or her if such processing is carried out for the performance of a task carried out in the public interest, pursuant to Article 6(1)(e) of the GDPR, by contacting the Data Protection Officer by e-mail:  dpo@unimi.it

Finally, data subjects who believe that the processing of personal data relating to them, carried out through this site, is in violation of the provisions of the GDPR, have the right to lodge a complaint with the Guarantor, as provided for by art. 77 of the GDPR itself, or to bring the appropriate case before the courts (Art. 79 of the GDPR).