Personal data protection and privacy policies

The University of Insubria is aware of the importance of protecting your personal data. This is why he is committed to treating them properly and being transparent to you.

On this page you can find the various information that explain in detail how we deal with your personal data in accordance with the General Data Protection Regulation (GDPR, General Data Protection Regulation- EU Regulation 2016/679, hereinafter "Regulation").

The policy contains: 

• the nature of the personal information processed;
• the purposes and legal bases of the processing of personal information (art. 13.1.c and 13.1.d of the Regulation);
• the identity and contact details of the data controller (art. 13.1.a and 13.1.b of the Regulation);
• any third parties involved in the processing activities (art. 13.1.e and 13.1.f of the Regulation);
• the retention period of personal information (art. 13.2.a of the Regulation);
• the nature of the provision of data and the consequences of any refusal (art. 13.2.e of the Regulation);
• the rights of users (art. 13.2.b, 13.2.c and 13.2.d of the Regulation).

The Data Controller is the University of Insubria, in the person of the Rector, with registered office in Varese (VA) in Via Ravasi, 2.

Pursuant to art. 37 et seq. of the GDPR, the University has appointed the Data Protection Officer (DPO), who can be contacted using the e-mail address privacy@uninsubria.it.

If you are a minor, before communicating your data to the University, please read the information carefully together with your parents or those who are acting on their behalf.  Parents or any legal representative of minors may exercise their rights by writing to privacy@uninsubria.it.

The University of Insubria is a public institution of high culture that operates in the interest of society through the development and transmission of critical knowledge (art. 1 of the Statute of the University of Insubria). As primary seat of higher education and research, pursuant to art. 33 of the Constitution and art. 6 of Law n. 168/1989 and s.m.i., pursuant to art. 6 of the General Data Protection Regulation "EU Regulation 679/2016", paragraph 1 letter c) (processing for legal obligations), e) (processing for reasons of public interest), letter b) (processing necessary for the performance of a contract to which the person concerned is a party or for the performance of pre-contractual measures taken at the request of the person concerned) and point f) (legitimate interest of the data controller if the interests, rights and fundamental freedoms of the data subject do not prevail, especially if they are minor), shall process the personal data requested from the data subject for the following purposes:

In the provision of services offered to users through the University’s computer systems, non-primary personal information is collected and processed to the treatments in support of the administrative processes, how is explained in the specific informative.

The data processing's information on the websites of the University portal system is described in the specific information notice.

• The Regulation grants many rights to the person to whom the data refer.
• Right of access to personal data
• Right to rectification.
• In the cases provided for by law, the right to erasure of data (cd. right to be forgotten).
• In the cases provided for by law, the right to restriction of data processing.
• In the cases provided for by law, the right to data portability.
• In the cases provided for by law, the right to oppose the processing activities.
• In the case of processing based on consent, the possibility to revoke it at any time without prejudice to the lawfulness of the processing based on the consent subsequently revoked.

To exercise these rights, you can make a request using the contact details of the data controller and the data protection officer. In relation to a processing that you do not believe complies with the legislation, you can lodge a complaint with the competent supervisory authority that, for Italy, is the Guarantor for the protection of personal data. Alternatively, you can lodge a complaint with the Authority of the EU State in which you reside or habitually work or at the place where the alleged infringement occurred.