Regulation EU 2016/679, the "General Data Protection Regulation" (GDPR), provides that everyone has the right to the protection of personal data concerning him or her. Pursuant to article 13 of the GDPR, the University of Trento provides users (hereinafter, the "data subjects") who visit its website through https://www.unitn.it (the home page) and make use of the services it offers, with the information below.

Data controller

The data controller is the University of Trento, via Calepina 14, 38122 Trento (TN) email: ateneo@unitn.it - ateneo@pec.unitn.it

Contact details of the data protection officer

The Data Protection Officer can be contacted at the following email address: rpd@unitn.it

Purpose of the processing and legal basis

The data are processed by the University of Trento in the performance of its institutional tasks for teaching, research and administrative activities pursuant to article 6, paragraph 1, point e) of the GDPR and, in particular, to provide and improve the web services offered.

Categories of processed data

The personal data collected through the website are:

Browsing data

As you navigate, the website acquires some personal data, whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses or domain names of the computers used by users who connect to the website, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. These data are used to obtain anonymous statistical information on the use of the website and to check its correct functioning; they can also be used to investigate any computer crimes committed against the website or other University computer systems. The data are not collected to identify the data subjects but, given their nature, they may, through processing and association with data held by third parties, allow for users to be identified.

Data voluntarily provided by users

The data controller acquires the personal data voluntarily provided by data subjects as part of the request for information they submitted to web services connected to the site, including the e-mail address, which will be processed for the sole purpose of responding to the request itself.

Acquisition of data

Users are required to provide their data to have access to all the web services offered by the website. Failure to provide personal data may mean that you will not be able to use all the functions of the website and/or that we may not be able to process your request.

Data processing methods

The processing of personal data shall be carried out by automated means by authorised staff. Personal data shall be processed lawfully, fairly and transparently, in a manner that is adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (GDPR, article 5, paragraph 1). No profiling is carried out, and decisions are not taken by automated means.

Categories of recipients of the personal data

The personal data will be processed by authorized staff and may be disclosed to third parties to comply with a legal requirement and/or a court decision.

Data storage period

The data will be stored as long as necessary to fulfil the purposes for which they were collected, and in any case for a period not exceeding six months.

Rights of the data subjects

The data subject shall exercise the rights referred to in article 15 et seq. of the GDPR at any time: access to personal data and other information (GDPR, article 15); rectification or completion of personal data; erasure of personal data, except where the University is required to store the data for compliance with article 17, paragraph 3, point b) of the GDPR; restriction of processing of personal data (see article 18 of the GDPR); object to the processing of personal data concerning them, in cases where this is permitted pursuant to article 21 of the GDPR. Data subjects can exercise their rights through the form available at the "Privacy and data protection" page on the University's website. Fill in the form and email it to the Data protection officer (see contact details above). In case there is an infringement of the GDPR on the processing of personal data, data subjects have the right to lodge a complaint with a data protection authority or to engage in legal proceedings by virtue of article 77 of the GDPR.