Policy for personal data protection

This information is given in accordance with art 13 of Legislative Decree no. 96/2003 – Code on personal data protection – to users who interact with the website of the Università degli Studi di Parma.

This statement is valid only for the websites of the Università degli Studi di Parma and not for any other website users may access through the links found on the university websites.

Data controller

The data controller is Università degli Studi di Parma – Via Università, 12 – I 43121 Parma.

Site of data treatment

Personal data supplied by users requesting information material shall only be used to carry out the service requested and shall only be communicated to third parties if necessary for that purpose. For purposes connected to the University’s institutional activities personal data may be communicated outside the university (other public institutions or external bodies and associations).

Navigation data

When operating, the computer systems and software procedures necessary for the Portal System to operate correctly collect some personal data that is implicitly transmitted by the use of the Internet communication protocols or is used to improve the quality of the service offered.

This information is not collected in order to be associated with identified interested parties, however in virtue of its nature it may lead to the identification of the user through data processing and association.

This category of data includes IP addresses or domain names of the computers used by the users to connect to the website and other parameters relating to the user’s operating system and data processing environment.

Information on Cookies

The institutional website (www.unipr.it) and the connected websites (departments, libraries, museums) only use technical session cookies and external monitoring cookies. In accordance with clause 122 of the Code on Personal Data Protection and the provision of the Authority for Data Protection of 8th May 2014, these cookies do not require the user’s express consent to the use of personal data.    The cookies utilised on the University websites optimise the service provided, while easing the website usability and/or enabling users to access to specific functionalities.    Session cookies Session cookies are indispensable for authentication on online services and reserved areas. The use of these cookies (which are not permanently stored on the user’s computer and are removed once the browser is closed) is strictly limited to the transmission of the necessary session ID to explore the website safely and efficiently.   Disabling such cookies may affect the correct functioning of some of the online services.   External monitoring cookies The University of Parma uses Google Analytics, a service of data analysis provided by Google Inc. The service gathers group information (in an anonymous form) on visitors’ number and sessions in order to generate statistics on how the web portal is used to improve communication services and to tailor content to users’ needs.

Data supplied voluntarily by the user

Student personal data acquired during enrolment or registration or through any other specific collection methods shall only be used to carry out university institutional activities, within the limits established by law and by the regulations, in respect of the general principles of transparency, correctness and privacy.

Brief privacy statements will be progressively written or displayed on website pages offering special services on request.

How the data is treated

Data is treated exclusively for institutional purposes using computerised instruments and for the length of time strictly necessary to achieve the objective for which it is collected.

Rights of interested parties

In accordance with article 7 of legislative decree no. 196/2003, the person to whom the personal data refers has the right to:

obtain confirmation of the existence or non-existence of data concerning him/her, and receive an intelligible communication of said data, even if it has not yet been registered.

obtain information on:

  1. the source of the personal data;
  2. purpose and method of treatment;
  3. logic applied in the event of treatment using electronic equipment;
  4. details of the data handler, mangers and representative appointed in accordance with article 5 paragraph 2;
  5. subjects or categories of subjects to which personal data may be sent or that may become acquainted with the data in virtue of their capacity as representative appointed for that territory by the State, or managers or persons responsible for said task.

to obtain:

  1. an update, modification or when interested, completion of the data;
  2. the deletion, transformation into anonymous form, or to have the data blocked if handled unlawfully, including data that does not need to be stored for the purposes for which the data was collected or subsequently treated;
  3. a declaration stating that the persons to which the data is communicated or divulged are aware of the operations referred to in (a) ad (b), including the content, except in the case in which it is not possible to fulfil said obligation or if this entails an involvement of means that is clearly disproportionate to the right protected.

to be opposed, totally or partially:

  1. for legitimate reasons, to the handling of his/her personal data, despite the fact it is relevant to the purpose of the collection;
  2. to the treatment of his/her personal data for the purpose of sending advertising material or direct sales or to its use for market research or commercial purposes.