Privacy Statement for the University of Bologna AlmaDL websites

1. Why this statement

This statement is written to give information to users who interact with AlmaDL websites

This information is given in accordance with art. 13 of Legislative Decree no. 196/2003 – Code on personal data protection.

The statement is also in line with the Recommendation no. 2/2001, which the European authorities for personal data protection, part of the Group established under art. 29 of directive no. 95/46/EC, adopted on 17 May 2001 to identify some of the minimum requirements for the collection of personal data online and in particular as regards the methods, terms and nature of the information that the data controllers must supply to users when they connect to the web pages, whatever the reason for the connection.

2. Types of data processed

The Alma Mater Studiorum - University of Bologna, in its capacity as Data Controller, informs that, by entering personal information on the website or by authentication to the University's web services, the data relating to identified or identifiable persons will be processed.

2.1 Cookies

2.1.1 Cookies used

This website uses three types of cookies: session cookies, technical cookies

  • Session or navigation cookies: these cookies permit the user to navigate the site and without them the site may not operate properly. Session cookies are not persistently saved on the user's computer and are deleted when the browser is closed. The usage of session cookies is strictly limited to the transmission of session ID - numeric codes randomly generated by the hosting server - required to explore the website safely and efficiently. Session cookies used by the site are respectful of the user’s privacy and do not allow the acquisition of the user’s personal data.
  • Technical cookies: they are used to improve web navigation according to the user’s preferences. They are used in particular to track language preference. Cookies related to language preference last 10 years.
  • Third party function integration cookies: these cookies are used to integrate third party functions in the website (such as social network icons that allow users to share website content, for example Facebook , Twitter, LinkedIn, Google+). Any time a user employs these integrations modules or access the site via Facebook, Google or Twitter, personal data may be acquired by these third party websites which have their own privacy policy. The University is not liable for the processing of data on these websites. For further information on the cookies policies of third party websites, please visit the following pages:
    • Facebook (informativa): https://www.facebook.com/help/cookies/ e https://www.facebook.com/policy.php
    • Twitter (informativa): https://support.twitter.com/articles/20170514 e https://twitter.com/privacy?lang=it
    • LinkedIn (informativa): https://www.linkedin.com/legal/cookie-policy
    • Google+ (informativa): http://www.google.it/intl/it/policies/technologies/cookies/ e https://www.google.it/intl/it/policies/privacy/
    • Facebook (configurazione): accedere al proprio account. Sezione privacy.
    • Twitter (configurazione): https://twitter.com/settings/security3
    • LinkedIn (configurazione): https://www.linkedin.com/settings/
    • Google+ (configurazione): http://www.google.it/intl/it/policies/technologies/managing/

2.1.2 How to disable cookies

You can deny consent to using cookies by selecting the appropriate setting in your browser: all the functions of the AlmaDL websites will in any case be available during non-authenticated navigation.

The links below explain how to disable the cookies for the most common browsers (for any other browsers used, we advise you to look for this option in the software help services).

  • Internet Explorer: http://windows.microsoft.com/it-IT/internet-explorer/delete-manage-cookies#ie=ie-10
  • Google Chrome: https://support.google.com/chrome/answer/95647?hl=it
  • Mozilla Firefox: http://support.mozilla.org/it/kb/Gestione%20dei%20cookie?redirectlocale=en-US&redirectslug=Cookies
  • Opera: http://help.opera.com/Windows/10.00/it/cookies.html
  • Apple Safari: http://www.apple.com/it/privacy/use-of-cookies/

To delete memorised cookies on your device/PC, your browser allows you to delete them using the privacy settings. In the browser options you will find a "Delete navigation data" option, which can be used to delete cookies, website data and plug-ins.

2.2 Remote traffic data

The computer systems and software procedures necessary for the websites to operate correctly record some personal data that is implicitly transmitted by the use of the Internet communication protocols and that is necessary to improve the quality of the service offered.
This information is not collected in order to be associated with identified interested parties, however in virtue of its nature it may lead to the identification of the user also through data processing and association.
This category of data includes accounts, IP addresses or domain names of the computers used by the users to connect to the website, the URI (Uniform Resource Identifier) addresses of the resources required, the method used to send a request to the server, the size of the file obtained in reply, the numeric code that indicates the state of the reply given by the server (sent, error, etc.) and other parameters relating to the user’s operating system and data processing environment. The provision of the requested information is obligatory. This data is kept for six months, unless otherwise provided for by the laws in force.

This data is used to gather anonymous statistical information on the use of the website and/or to check that the computer systems are working correctly. The data could also be used to ascertain responsibility in the event of hypothetical computer crimes or in the case of damage caused to the University or other parties. This data is processed in compliance with the provisions of Rectoral Decree (D.R.) 271/2009 Annex B art. 14 and may be notified to the Judicial Authorities in the event of investigations, inspections, etc.

2.3 Data provided voluntarily by the user

he optional, explicit and voluntary sending of e-mails, messages and any other type of communications, addresses or contact details indicated on this portal implies the subsequent acquisition of the sender's e-mail address and any other personal data used to respond to requests. All data will be processed in compliance with the principles of correctness, lawfulness and transparency, protecting confidentiality as required by Italian Legislative Decree no. 196/03. Specific summary information will be progressively provided or displayed in the relative website pages for specific services available on request.

3. Data Controller

The Data Controller concerning this information note is the University of Bologna, via Zamboni, 33 – 40126 Bologna.

The “Data managers” are the directors of the administrative, technical, teaching and scientific offices which process your data (the list of structure managers is available on the website www.unibo.it).

Concerning the web services provided by AlmaDL, the personal data is processed by the Central System Administration Ce.S.I.A. viale Filopanti, 3 – 40126 Bologna and by the Departmental and Documentary Support Division, ASDD viale Filopanti, 7 - 40126 Bologna.

Consult the names of the responsible persons at these administrative divisions.

Users intending to object to the processing of data for legitimate reasons must notify Alma Mater Studiorum - University of Bologna in writing, to ASDD — AlmaDL, viale Filopanti, 7 - 40126 Bologna or to privacy@unibo.it.

4. Non-mandatory nature of the provision of data

Apart from what specified for cookies and navigation data, users are free to provide their personal data in the forms on the Portal websites, or in any case given in contacts with the university to request information materials, for other correspondence or to access specific services.
If they do not provide such information, however, it may be impossible to satisfy their requests.

5. How the data is treated

Data is treated exclusively for institutional purposes using computerised instruments and for the length of time strictly necessary to achieve the objective for which it is collected.
Specific security measures are followed to avoid the loss of data, unlawful or incorrect use of data and unauthorized access.

6. Rights of interested parties

In accordance with article 7 of legislative decree no. 196/2003, the person to whom the personal data refers has the right to:

  • obtain confirmation of the existence or  non-existence of data concerning him/her, and receive an intelligible communication of said data, even if it has not yet been registered.
  • obtain information on:
    a)the source of the personal data;
    b) purpose and method of treatment;
    c) logic applied in the event of treatment using electronic equipment;
    d) details of the data handler, mangers and representative appointed in accordance with article 5 paragraph 2;
    e) subjects or categories of subjects to which personal data may be sent or that may become acquainted with the data in virtue of their capacity as representative appointed for that territory by the State, or managers or persons responsible for said task
  • to obtain:
    a) an update, modification or when interested, completion of the data;
    b) the deletion, transformation into anonymous form, or to have the data blocked if handled unlawfully, including data that does not need to be stored for the purposes for which the data was collected or subsequently treated;
    c) a declaration stating that the persons to which the data is communicated or divulged are aware of the operations referred to in (a) ad (b), including the content, except in the case in which it is not possible to fulfil said obligation or if this entails an involvement of means that is clearly disproportionate to the right protected.
  • to be opposed, totally or partially:
    a) for legitimate reasons, to the handling of his/her personal data, despite the fact it is relevant to the purpose of the collection;
    b) to the treatment of his/her personal data for the purpose of sending advertising material or direct sales or to its use for market research or commercial purposes.

This Privacy Policy shall be subject to updates.

^