1. Data Controller and Data Protection Officer

The Data Controller is the Università Telematica degli Studi IUL with registered office in Florence, Via Michelangelo Buonarroti 10. In order to exercise your rights as a data subject listed in point 7 below, the Data Controller may be contacted at the email address privacy@iuline.it or at the secretary/URP telephone number 0552380568, or at the PEC address iul@pec.it.

The Data Protection Officer can be contacted at the following email address dpo@iuline.it.

2. Purpose and legal basis of personal data processing

The data provided (name, surname, email) will be processed for the following purposes:

- for the registration of the interested party to the https://mooc.edureform.eu/ platform in order to attend the online course (so-called "MOOC") within the "EDUREFORM" Project indicated above, carried out by IUL University (as beneficiary) in partnership with Chitkara University based in Chandigarh (INDIA) as coordinator within the Grant Agreement 2019-2114 funded by the European Commission (EACEA), on the University platform.

The legal basis of the data processing consists in the manifestation of the specific consent of the data subject pursuant to Article 6 letter a) of EU Regulation No. 2016/679.

3. Processing modalities

The processing of your personal data will be based on the principles of lawfulness, correctness and transparency, protecting your confidentiality in compliance with the principles set out in Article 5 of the GDPR. The processing may be carried out using paper documents and also with the aid of electronic or otherwise automated means.

The data may be collected and stored by means of electronic platforms managed by a leading IT service provider of data centres, web hosting and cloud computing (ARUBA) designated as Data Processor pursuant to Article 28 GDPR, and will be stored on servers located in Italy.

Your personal data are processed using appropriate technical and organisational security measures in accordance with Article 32 of the GDPR, so as to ensure a level of security appropriate to the risk by minimising the risks of destruction or loss, unauthorised access or processing not in accordance with the purposes of collection.

Your personal data is not subject to automated decision-making or profiling.

4. Period of data retention

Data will be kept for the time necessary to achieve the purposes of the Project for which they were collected.

The IUL University, as beneficiary of the European grant, shall keep a record of all expenses/activities incurred within the scope of the above mentioned project and related evidence and documents for a period of 5 years from the conclusion of Grant Agreement 2019-2114 and in any case the data retention period shall not be shorter than the duration of the above mentioned project. This period shall be determined in such a way as to ensure the proper preservation of the data in hard copy or electronic form for the number of years defined by the applicable EU and national regulations on the preservation of administrative and accounting records.

5. Provision of data and consequences of refusal

The provision of personal data is optional and voluntary; it should be noted, however, that failure to provide such data, in whole or in part, or the incorrect provision of such data will make it impossible for the person concerned to register on the platform and attend the online courses held as part of the above-mentioned Project.

6. Recipients of personal data

Data may be processed and/or communicated to IUL staff in charge of technical support to the digital platform, to researchers and to authorised collaborators, who in turn are required to respect confidentiality and privacy.

The data provided may be shared - in aggregate mode - with the other partners of the EDUREFORM Project.

Data may also be entrusted to third party companies operating in the ICT sector, which are in turn appointed as Data Processors.

The updated list of Data Processors is available upon request to the Data Controller.

No transfers of processed personal data to non-EU countries are envisaged.

7. Rights of the data subject

At any time, the data subject may exercise, where applicable, his/her rights vis-à-vis the Data Controller pursuant to Articles 15-22 of EU Regulation 2016/679, i.e. the rights to:

- access to personal data;

- request rectification of the same when they have been transcribed incorrectly;

- request the updating and/or integration of their data when they have changed;

- ask the data controller to transform the data into anonymous form or to block it;

- ask the data controller to erase or forget them as appropriate;

- ask the data controller to restrict processing because, for example, some data are in excess of the purposes to be fulfilled;

- ask the data controller for portability in the sense of transferring one's data to another data controller without any burden or expense for the data subject;

- object to the processing for legitimate reasons;

- withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;

Finally, as a data subject, you have the specific right to lodge a complaint with the Italian Data Protection Authority, based in Rome, Piazza Venezia n. 11.