Information in accordance with article 13 GDPR
General data use terms and conditions
In order to deliver a wide range of services related to our SoRU21 users, we process certain categories of your personal data which we receive from you. For the purpose of transparency and in accordance with Article 13 of the General Data Protection Regulation (GDPR), we therefore want to inform you about the data processing as follows:
- General information
The controller of the data processing is Università degli studi di Perugia – FiSSUF departement, Piazza G. Ermini 1, Perugia, ITALY.
- Legal basis for data use
For all SoRU activities we adhere to Italian and European data protection legislation, in particular the EU GDPR.
For any request and further information regarding the processing of your personal data please contact us at firstname.lastname@example.org
- What personal data we process
The following data will be used:
- Names (First and Last Names)
- Contact information (email, telephone number)
- Associated institution (name, postal address)
- Copies of any documents you send us to process your registration (e.g. proof of status)
- What we use your data for:
- Communication with you
- Sending information about our activities
- Internal statistical use for collating delegate numbers and trends and optimisation of our activities
- Usage patterns on the SoRU21 website
- How your data is stored and handled
Our database developer is contractually obliged to adhere to all standards of data protection according to EU GDPR. Furthermore, your data will be handled exclusively by Università degli Studi di Perugia and SoRU21 staff and will not be disclosed to any third parties.
- Your rights
Information and Access
You are entitled to obtain information by Università degli Studi di Perugia as to which personal data are being processed and to get access to that personal data upon your request. We will provide you with one copy of the personal data undergoing processing free of charge, unless the disclosure may adversely affect the rights and freedoms of others.
Should you have consented to a specific use of your data by Università degli Studi di Perugia, you can withdraw that consent at any time, by contacting us at email@example.com.
Rectification and Erasure
You are entitled to request rectification of inaccurate personal data or completion of incomplete personal data concerning you without undue delay.
You are entitled to request erasure of personal data without undue delay, if
(i) Personal data are no longer necessary in relation to the purposes for which they were collected,
(ii) You object to the processing
(iii) Personal data have been unlawfully processed
(iv) Personal data have to be erased for compliance with a legal obligation applicable to Università degli Studi di Perugia
However, Università degli Studi di Perugia is not obliged to execute such erasure if processing is necessary
(i) for exercising the right of freedom of expression and information,
(ii) for compliance with a legal obligation to which Università degli Studi di Perugia is subject,
(iii) for the establishment, exercise or defence of legal claims.
Restriction of Processing
You are entitled to request the restriction of processing of personal data in the following circumstances and for the following periods of time:
(i) you contest the accuracy of the personal data concerning you; restriction of processing may be affected for a period enabling the us verify the accuracy of the relevant personal data,
(ii) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead,
(iii) we do no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims,
(iv) you have objected to processing, for the period until the verification whether our legitimate grounds override those of you.
You are entitled to data portability, namely to receive your personal data which you have provided to Università degli Studi di Perugia and which is processed
(i) based on the concluded contract
(ii) and by automated means
in a structured, commonly used and machine-readable format.
You are entitled to request that the personal data is transmitted directly to another controller by us, where technically feasible. This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on our legitimate interests according to Art 6 para 1 point of GDPR. If you object to processing of your personal data, we shall cease to process this data unless our legitimate interests to processing your personal data prevail. If you have agreed to your personal data being processed for marketing purposes, you shall have the right to object at any time to processing of personal data concerning you. In this case, we will cease the processing or your personal data for marketing purposes immediately.
Right to file complaint
You have the right to file a complaint with the “Italian data protection Authority”, if you believe that your rights to data protection are being infringed.