Controller and Data Protection Officer
Data Controller is the Università Telematica degli Studi IUL with
registered office in Florence, Via Michelangelo Buonarroti 10. In
order to exercise your rights as a data subject listed in point 7
below, the Data Controller may be contacted at the email address
email@example.com or at the secretary/URP telephone number
0552380568, or at the PEC address firstname.lastname@example.org.
Data Protection Officer can be contacted at the following email
Purpose and legal basis of personal data processing
data provided (name, surname, email) will be processed for the
for the registration of the interested party to the
in order to attend the online course (so-called "MOOC")
within the "EDUREFORM" Project indicated above, carried out
by IUL University (as beneficiary) in partnership with Chitkara
University based in Chandigarh (INDIA) as coordinator within the
Grant Agreement 2019-2114 funded by the European Commission (EACEA),
on the University platform.
legal basis of the data processing consists in the manifestation of
the specific consent of the data subject pursuant to Article 6 letter
a) of EU Regulation No. 2016/679.
processing of your personal data will be based on the principles of
lawfulness, correctness and transparency, protecting your
confidentiality in compliance with the principles set out in Article
5 of the GDPR. The processing may be carried out using paper
documents and also with the aid of electronic or otherwise automated
data may be collected and stored by means of electronic platforms
managed by a leading IT service provider of data centres, web hosting
and cloud computing (ARUBA) designated as Data Processor pursuant to
Article 28 GDPR, and will be stored on servers located in Italy.
personal data are processed using appropriate technical and
organisational security measures in accordance with Article 32 of the
GDPR, so as to ensure a level of security appropriate to the risk by
minimising the risks of destruction or loss, unauthorised access or
processing not in accordance with the purposes of collection.
personal data is not subject to automated decision-making or
of data retention
will be kept for the time necessary to achieve the purposes of the
Project for which they were collected.
IUL University, as beneficiary of the European grant, shall keep a
record of all expenses/activities incurred within the scope of the
above mentioned project and related evidence and documents for a
period of 5 years from the conclusion of Grant Agreement 2019-2114
and in any case the data retention period shall not be shorter than
the duration of the above mentioned project. This period shall be
determined in such a way as to ensure the proper preservation of the
data in hard copy or electronic form for the number of years defined
by the applicable EU and national regulations on the preservation of
administrative and accounting records.
of data and consequences of refusal
provision of personal data is optional and voluntary; it should be
noted, however, that failure to provide such data, in whole or in
part, or the incorrect provision of such data will make it impossible
for the person concerned to register on the platform and attend the
online courses held as part of the above-mentioned Project.
of personal data
may be processed and/or communicated to IUL staff in charge of
technical support to the digital platform, to researchers and to
authorised collaborators, who in turn are required to respect
confidentiality and privacy.
data provided may be shared - in aggregate mode - with the other
partners of the EDUREFORM Project.
may also be entrusted to third party companies operating in the ICT
sector, which are in turn appointed as Data Processors.
updated list of Data Processors is available upon request to the Data
transfers of processed personal data to non-EU countries are
of the data subject
any time, the data subject may exercise, where applicable, his/her
rights vis-à-vis the Data Controller pursuant to Articles 15-22 of
EU Regulation 2016/679, i.e. the rights to:
access to personal data;
request rectification of the same when they have been transcribed
request the updating and/or integration of their data when they have
ask the data controller to transform the data into anonymous form or
to block it;
ask the data controller to erase or forget them as appropriate;
ask the data controller to restrict processing because, for example,
some data are in excess of the purposes to be fulfilled;
ask the data controller for portability in the sense of transferring
one's data to another data controller without any burden or expense
for the data subject;
object to the processing for legitimate reasons;
withdraw consent at any time without prejudice to the lawfulness of
the processing based on the consent given before the revocation;
as a data subject, you have the specific right to lodge a complaint
with the Italian Data Protection Authority, based in Rome, Piazza
Venezia n. 11.