Information notice under Art. 13 of EU Regulation no. 2016/679 (General Data Protection Regulation - GDPR) and legislative decree no. 196/2003 (including subsequent amendments and additions)
DATA CONTROLLER - The processing of personal data by the IMT School for Advanced Studies Lucca (hereinafter referred to as “School” is based on the principles provided by art. 5 of EU Regulation 2016/679. The Data Controller is the IMT School for Advanced Studies Lucca, represented by the pro-tempore Rector, registered office in Piazza San Ponziano, 6, 55100 Lucca, certified email: imtlucca@postecert.it.
DATA PROTECTION OFFICER - The Data Protection Officer (DPO) is Dr. Giulio Bolzonetti, who may be contacted at the following email address: dpo@imtlucca.it; or certified email: imtlucca@postecert.it.
CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS OF THE PROCESSING - Personal data, the provision of which does not derive from a regulatory obligation but exclusively from the consent provided, will be processed under Art. 6(1)(a) of the Regulation, only for purposes strictly related to the institutional activities of the IMT School for Advanced Studies Lucca. Permission of personal data processing is voluntary, but could be necessary to register for some services. The following list of processed data, gathered during the School website navigation or permitted voluntarily, includes but is not limited to:
- navigation data, that is information about IP addresses, computers domain names used by the user; addresses in URI notation (Uniform Resource Identifier) of requested resources, the timing of the requests, the used method to submit the request to the server, the file dimension obtained in response from the server, the numerical code indicating the state of the response given by the server; other parameters related to the operating system and to the computing environment of the user, gathered in order to obtain anonymous statistics about the website utilisation and to check its proper functioning;
- permitted voluntarily data, that is personal and contact data gathered to consent the user access to certain services, also including any particular personal and judicial data entered voluntarily by the user during the utilization of online services or by sending requests to the published email addresses.
CATEGORIES OF RECIPIENTS AND POTENTIAL TRANSFERRING OF DATA - Processed data can only be accessed by employees and collaborators of the competent School Offices. These subjects will be authorized and duly qualified to this end, also with regard to compliance with security measures and confidentiality obligations, Therefore, data will not be disclosed to third parties or disseminated in any way. The Data Controller may also use entities qualified for the aforementioned processing, who will process the data as Data Processors under Art. 28 of the Regulation.
PROCESSING METHOD AND PERSONAL DATA RETENTION TIME - Personal data will be stored in the School’s computer and/or paper archive for the time necessary to carry out the purposes for which they were collected, in accordance with the retention time provided for by current regulations, or in any case, until consent is withdrawn.
RIGHTS OF THE DATA SUBJECT AND EXERCISE OF THE SAME - The interested party has the right to withdraw consent for processing of their personal data at any time by sending an email to affarigenerali@imtlucca.it. The withdrawal of consent does not affect the lawfulness of the processing based on the consent provided before the withdrawal. The interested party is entitled to exercise the rights indicated in sections 2, 3, and 4 of Chapter III of the GDPR, where applicable to the specific treatment. The interested party has the right to file a complaint with the Data Protection Authority if they believe that the processing of their personal data violates EU Regulation 2016/679, under the terms and conditions of art. 77 of said Regulation.
For further information please contact General Affairs Office at: affarigenerali@imtlucca.it