Language switcher

English EN Italiano IT
Italiano

Information provided pursuant to Art. 13 of Regulation (EU) 2016/679
(General Data Protection Regulation – GDPR)

1. GENERAL INFORMATION

In compliance with the provisions of Articles 12 and 13 of Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR“), this page describes the processing of personal data carried out by the Data Controller, as defined in point 2 below, with regard to the data subjects involved in the processing listed below (“data subjects”).

The information on this website does not refer to other processing operations carried out following the navigation of websites reached through links that may be present within it.

2. DATA CONTROLLER

The Data Controller is Fondazione Collegio Europeo di Parma, with registered office in Strada dell’Università 12 – 43121 Parma (PR), telephone: +39 0521 207525, e-mail: info@collegioeuropeo.it ; amministrazione@pec.collegioeuropeo.it

3. TYPES OF DATA PROCESSED

3.1. CONTACT REQUEST DATA

The management of contact requests, proposed through the indication of email addresses on this website, involves the acquisition of personal data of the interested party/user.

Purpose of the processing
(Art. 13, par. 1, lett. c), GDPR)

The personal data collected are used for the sole purpose of responding to the requests sent, and communicating with the data subject in any subsequent phases. Some information (applicant’s area of employment and company headquarters) is collected in order to streamline the process of addressing it to the competent company structures territorially and by product area.

The communication of some data is mandatory and indicated through special asterisks.
Categories of personal data
  • personal data (name, surname),
  • contact details (e-mail address, telephone number),
  • data relating to the professional sphere (area of employment),
  • any other data/information entered in the request.

The processing is carried out in order to perform an activity requested by the data subject (art. 6, par. 1, lett. b), GDPR).
Scope of communication
(Art. 13, par. 1, letters e) and f) of the GDPR)

The data are processed exclusively by authorized personnel, instructed in the processing and adequately trained. They may also be processed by other subjects, involved by the Data Controller for purposes related to the processing itself (support for the management of the website; consulting firms): these subjects have the role of data processors and have signed specific agreements with the Data Controller pursuant to art. 28, par. 3, GDPR.

In any case, the personal data collected will not be disclosed to third parties, or disseminated or transferred outside the European Union/European Economic Area.
Processing methods
(Recital 39, GDPR)

Personal data are processed lawfully, correctly and transparently, in compliance with the principles provided for by current legislation. The processing of personal data takes place through IT and automated tools. Taking into account the nature and characteristics of the processing, the Data Controller has adopted technical and organisational security measures aimed at limiting or excluding the risks of data loss, any unlawful or incorrect use, or unauthorised access.
Data retention period
(Art. 13, par. 2, lett. a), GDPR)

Personal data is kept for the time necessary for the management of the relationship with the applicant.
Nature of the provision
(Art. 13, par. 2, lett. e), of the GDPR)

The data are provided voluntarily by the data subjects. However, failure to provide them may affect the management of the request and the sending of feedback.

3.2. DATA OF CONSUMERS/END USERS REPRESENTATIVES OF CLIENT COMPANIES, REPRESENTATIVES OF SUPPLIER COMPANIES

As part of the performance of activities related to contractual relationships with customers and suppliers, personal data of these subjects may be processed.

Purpose of the processing
(Art. 13, par. 1, lett. c), GDPR)

The data are processed in order to:

  • conclude contractual/professional relationships,
  • to fulfil pre-contractual, contractual and regulatory obligations related to existing or future relationships, as well as to manage the necessary communications related to them;
  • exchange communications in relation to the contractual relationship established between the parties;
  • to comply with the obligations provided for by laws, regulations, European standards or orders of the Authority;
  • exercising the legitimate interests or rights of the Data Controller (for example: right of defence in court; protection of credit positions; ordinary internal operational, managerial and accounting needs).
Categories of personal data
  • personal data (name, surname, tax code/VAT number);
  • contact details (telephone number; e-mail/certified email address; domicile/registered office addresses);
  • data relating to the professional sphere (data relating to the company
  • for which the data subject works); bank and payment details.
Lawfulness of processing
(Art. 13, par. 1, lett. c), GDPR)

The processing activities for these purposes are carried out on the basis of various conditions of lawfulness: for the fulfilment of contracts or pre- contractual measures (Article 6, paragraph 1, letter b) of the GDPR); for compliance with legal obligations (Art. 6(1)(c) GDPR); for the pursuit of the legitimate interests of the Data Controller (e.g.: exercise or defense of rights in or out of court) (Article 6, paragraph 1, letter f), of the GDPR).
Scope of communication
(art.13, par. 1, lett. e) and f), of the GDPR)

The data are processed exclusively by authorized personnel who are instructed in the processing and adequately trained. They may also be processed by other subjects, involved by the Data Controller for purposes related to the processing itself (e.g.: tax/tax consultants; law firms; public bodies and competent authorities; etc.). In some cases, these subjects have the role of data processors and have signed specific agreements with the Data Controller pursuant to art. 28, par. 3, GDPR. In specific cases (e.g. investigations and assessments), personal data may be made available to the competent authorities.

In any case, personal data will not be disclosed to third parties, or disseminated or transferred outside the European Union/European Economic Area.
Processing methods
(Recital 39, GDPR)

Personal data are processed lawfully, correctly and transparently, in compliance with the principles provided for by current legislation. The relevant processing is carried out through IT and paper tools.

Taking into account the nature and characteristics of the processing, the Data Controller has adopted technical and organisational security measures aimed at limiting or excluding the risks of data loss, any unlawful or incorrect use, or unauthorised access.
Data retention period
(art.13, par. 2, lett. a), of the GDPR)

The data are kept for the time strictly necessary for the fulfilment of contractual or regulatory obligations.
Nature of the provision
(art.13, par. 2, lett. e), of the GDPR)

The provision of data is mandatory for the fulfilment of the purposes described above

3.3. BROWSING DATA

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, successful, error, etc.) and other parameters related to the user’s operating system and computing environment.

Purpose of the processing
(Art. 13, par. 1, lett. c), GDPR)

These data are used for the sole purpose of obtaining statistical information on the use of the site and to check its correct functioning. The data could also be used to ascertain responsibility in the event of hypothetical computer crimes against the site (legitimate interests of the owner).
Lawfulness of processing
(Art. 13, par. 1, lett. c), GDPR)

The processing is necessary for the pursuit of the legitimate interests of the Data Controller in the security of its information system, and for the evaluation of the use of the website and its operation (Article 6, paragraph 1, letter f), of the GDPR).
Scope of communication
(art.13, par. 1, lett. e) and f), of the GDPR)

The data are processed exclusively by authorized personnel who are instructed in the processing and adequately trained. They may also be processed by other subjects, involved by the Data Controller for purposes related to the processing itself (e.g. support for the management of information systems; of this website). In some cases, these subjects have the role of data processors and have signed specific agreements with the Data Controller pursuant to art. 28, par. 3, GDPR. The data may be communicated to the competent authorities in specific cases.

In any case, personal data will not be disclosed to third parties, or disseminated or transferred outside the European Union/European Economic Area.
Processing methods
(Recital 39, GDPR)

Personal data are processed lawfully, correctly and transparently, in compliance with the principles provided for by current legislation. The processing is carried out using IT and automated tools.

Taking into account the nature and characteristics of the processing, the Data Controller has adopted technical and organisational security measures aimed at limiting or excluding the risks of data loss, any unlawful or incorrect use, or unauthorised access.
Data retention period
(Art. 13, par. 2, lett. a), GDPR)

The data are normally stored for the fulfilment of the purposes indicated above, for short periods of time, with the exception of any extensions related to investigation activities.
Nature of the provision
(art.13, par. 2, lett. e), of the GDPR)

The provision of data is implicit in accessing and browsing the website.

3.4. COOKIE

For more general information on cookies and how to enable and disable them, please consult the Cookie Policy document

4. RIGHTS OF THE DATA SUBJECT (GDPR art. 15-22)

At any time, the interested party may exercise the following rights:

  • request confirmation of the existence of processing activities of their personal data.
  • obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed and the storage period (or, if this is not possible, the indication of the criteria that allow it to be determined).
  • obtain the rectification and deletion of data.
  • obtain, under the conditions and in the cases provided for by current legislation, the limitation of processing.
  • obtain, in the cases provided for by current legislation, the portability of the data, i.e. receiving them from a data controller, in a structured, commonly used and machine-readable format, also in order to transmit them to another data controller without hindrance.
  • in the cases provided for by current legislation, object to the processing at any time and also in the case of processing for direct marketing purposes.
  • lodge a complaint with the Guarantor for the protection of personal data, in accordance with the procedures provided for by this authority.

Requests should be addressed to the Data Controller by writing to the alternative email addresses info@collegioeuropeo.it, amministrazione@pec.collegioeuropeo.it for the processing described.

This information document is last updated on 22/10/2024.

Contact us for more information