Corso Vittorio Emanuele II, 39 - Roma 0669207671

Privacy statement - Students

PRIVACY STATEMENT
IN COMPLIANCE WITH THE EU REGULATION 2016/679

* * *

This document is aimed at informing all people interested in enrolling in the online degrees, master’s courses or single modules of the International Telematic University UNINETTUNO (hereafter referred to as UTIU) on how the personal data provided upon request of information for a possible enrolment or upon application for the recognition of university training credits (ECTS) for a possible enrolment or upon effective enrolment for an online degree, master’s course or for a single module and on how their personal data will be processed while carrying on distance learning activities.

The European Union 216/679 Regulation protects all physical people as regards the treatment of their personal data that is carried out by the holder of the treatment, based in the territory of the European Union, and entitles them to a set of rights, listed below, that, if necessary, may be exercised against it.
UTIU has his head office in Rome, Corso Vittorio Emanuele II n. 39 and for this reason it applies the EU Regulation 2016/679 to all personal data treatments, including those required to carry out distance learning activities and is, formally, the Holder of these treatments.
UTIU can be contacted by the concerned people at the postal address and telephone numbers available in its website on: https://www.uninettunouniversity.net .

The person responsible for data protection is Lawyer Gaetano Giordano who can be contacted via e-mail at the following address: dpo@uninettunouniversity.net or by tel./fax at the following number: +390637511524. The concerned people can contact him as regards any matters related to the treatment of their personal data and to the exercise of their rights ensuing from the above-mentioned Regulation. He has the duty of confidentiality as regards the performance of his functions.
Given the above, UTIU wishes to provide the concerned people the following information:

A) In case of personal data provided by any concerned person upon filling in the information request form, available in the website of UTIU or given verbally or by telephone to the staff of the students secretariat:

  • The provided personal data are required to meet the expressed needs in a more effective and useful way;
  • It is not necessary to get your consent since the procedures of collection, recording, processing and consultation of these personal data by the Owner are aimed, upon request of the concerned person, at the potential conclusion of a contract in which he himself may be one of the contracting parties;
  • The provided personal data will used exclusively for this purpose for a maximum period of 180 days and if, within this period, the contract may not be concluded they will not be communicated to any other subject and will be eliminated;
  • Additionally, at any time, the concerned person may ask UTIU not to be contacted anymore and to eliminate all his personal data.

B) In case of personal data provided by any concerned person upon filling in the credits acknowledgement application form, that can be downloaded from the website of UTIU:

  • The personal data provided are required in order to assess your educational and professional experience for the purposes of a possible matriculation in a specific degree course of your choice and to answer you request to let you know about this matter;
  • It is not necessary to get your consent since the procedures of collection, recording, processing and consultation of these personal data by the Owner are required for the performance of the a task of public interested related to the exercise of public powers of which it itself is responsible given the fact that it is a non state telematic university, authorized as per the Ministerial Decree 17/04/2003 to deliver academic titles as per art. 3 of the Ministerial Decree of the 22/10/2004, n° 270 and are also aimed, upon request of the concerned party, at the potential conclusion of a contract in which he himself may be one of the contracting parties;
  • On this account, after communicating to the concerned person the number of educational credits being acknowledged, the personal data provided may be used by UTIU in order to contact the concerned person and propose him to enroll in the selected degree course or in other ones delivered by the Owner; this further purpose of the treatment is fair since it is strictly connected to the other one and can be useful to the concerned person to guide him in his final choice for distance learning;
  • All personal data of the concerned person will be kept for a maximum period of 180 days and if, within this period, the contract may not be concluded they will not be communicated to any other subject and will be eliminated;
  • Additionally, in any way and at any time before the communication of acknowledged credits or at the conclusion of the contract, the concerned person may ask UTIU not to be contacted anymore and to eliminate all his personal data.

C) In case of personal data provided by the concerned person upon enrolment in the online degree, master’s courses or individual modules, by following the matriculation procedure described in UTIU’s website, or upon enrolment to the subsequent years or anyhow learnt during the execution of the distance teaching activities and up to the awarding to the title:

  • The personal data provided are required for concluding a contract upon request of the concerned person and in which he himself is one of the contracting party and for checking the established admission requirements as envisaged by the Ministerial Decree of the 22/10/2004 n° 270 and further to the execution of the contract itself;
  • It is not necessary to get your consent since the procedures of collection, recording, processing, filing, consultation and communication of these personal data by the Owner are required for the performance of the a task of public interested related to the exercise of public powers of which it itself is responsible given the fact that it is a non state telematic university, authorized as per the Ministerial Decree 17/04/2003 to deliver academic titles as per art. 3 of the Ministerial Decree of the 22/10/2004, n° 270 and are also aimed, upon request of the concerned party, at the potential conclusion of a contract in which he himself may be one of the contracting parties;
  • Personal data related to health conditions and personal data suited to ascertain the status of refugee are required to obtain the university fees exemption;
  • In these two cases it is not necessary to get your consent since the procedures of collection, recording, processing, consultation and updating of these personal data related to your health conditions or to the status of refugee by the Owner are required in order to exercise the rights of the concerned person as regards social protection by awarding economic benefits, as envisaged by the Legislative Decree nr. 68 of the 29/03/2012;
  • Personal data that may disclose political opinions, religious or philosophical beliefs or membership in any trade unions are required to reduce university fees, upon request of the concerned person as per the agreements undersigned by UTIU and associations or boards to which the concerned person belongs;
  • In this case it is necessary to get your explicit consent to the treatment of personal data that my disclose political opinions, religious or philosophical beliefs or membership in any trade unions in order to obtain a reduction of the university fees, as per the agreements undersigned by UTIU and one of the associations or boards to which the concerned person belongs, this involves that the consent to the treatment is extended also to the procedures of collection, recording, processing, consultation and updating of these particular personal data;
  • The concerned person is free to not give his consent or to withdraw it at any time by sending a written communication to the postal addresses or telephone numbers available in its website on: https://www.uninettunouniversity.net, but in both cases the reduction of the university fees may not be recognized or kept for the subsequent years;
  • The identification data of the concerned person and those related to his career as a student, collected upon matriculation or learnt while carrying out distance learning activities are recorded, processed and filed by the Owner in order to allow for the awarding of the academic title and to comply with the obligations related to the student’s personal file;
  • The activity in didactic cyberspace in which the student took part (number of hits to the video library and to the media library, number of exercises completed and related average assessment/self-assessment) is traced in order to profile this behavior and allow the tutor to give his assessment for admission to the exam, based on these quantitative elements as well as on qualitative elements acquired during the synchronic and diachronic tutoring of the student’s activities;
  • It is not required to get your consent since the profiling is necessary for the execution of the contract of which the concerned person is a party;
  • The identification data of the concerned person and, if applicable, those on his health and status of refugee will be communicated to the Owner to the relevant public authority (MIUR, INPS, INAIL, Ministry of Inner Affairs and to its decentralized boards) in order to carry on controls on the truthfulness of his statements and on the information provided;
  • The concerned person’s identification data and those related to his career as a student will be communicated to the MIUR for statistical purposes related to the maintenance of the Students and Graduates’ National Registry Office, established with the Ministerial Decree of the 30/04/2004;
  • All personal data of the concerned person will be kept by the Owner for the whole duration of the contract and upon its conclusion, those related to financial aspects will be kept in the records up to the expiry of the normal prescription terms as per art. 2946 of the Civil Code and later on eliminated, whereas those related to the student’s career, since they are connected to an administrative procedure, will be kept exclusively for record-keeping purposes in the public interest for a limitless period of time;
  • Additionally, the concerned person’s identification data and those related to his career as a student collected upon matriculation or acquired while carrying out distance learning activities and those related to the earned academic title can by treated by the Owner to contact the concerned person in order to promote post-degree study courses included in art. 3 of the Ministerial Decree n° 509/99, or stage, internship and job placement activities;
  • The concerned person’s identification data and those related to his academic career may be communicated by the Owner to private or public companies for stage, internship and job placement purposes;
  • In this case it is not required to get your consent since this additional purpose of treatment is comprised among the institutional purposes of the University (the so-called “third mission”) and, anyhow, is coherent with that for which these personal data were collected, since it is strictly connected to the other one and can be useful to the concerned person both as regards his training and his professional activity; anyhow the concerned person may request UTIU not to be contacted any longer by any way or at any time.

D) In case of personal data supplied by each concerned person upon application to participate in individual mobility programs for studying abroad, with forms that can be downloaded from UTIU’s website:

  • The provided personal data are required in order to participate in the Erasmus+ Program and to check admission requirements, the awarding and delivery of a financial aid. as envisaged by the periodic call published by UTIU;
  • It is not necessary to get your consent since the procedures of collection, recording, processing, consultation and communication of these personal data by the Owner are required for the performance of a task of public interested related to the exercise of public powers of which it itself is responsible given the fact that UTIU participates in the Erasmus+ Program, established by the EU Regulation n° 1288/2013 and are also aimed at the conclusion of the contract upon request of the concerned person and further to its execution;
  • The identification data of the concerned person and those of his academic career may be communicated by the Owner to other Universities while carrying on these programs;
  • All personal data of the concerned person, related to the period of participation in the Erasmus+ Program are treated also by the National Agency, established as per EU Regulation n° 1288/2013 with the task of board responsible for managing all the phases of the life cycle of the project, including control activity;  the European Regulation n°45/2001, related to the treatment of personal data by institutions, bodies, offices and agencies of the Union, applies to all these treatment procedures;
  • All the personal data of the concerned person related to the period of participation in the Erasmus+ Program will be filed by the Owner in order to comply with the obligations related to keeping a student’s personal electronic file, as established by art. 10 of the Legislative Decree n° 179/2012 and to allow for the acknowledgement of the exams and the awarding of academic titles; at the end of the contract, these data will be will be kept exclusively for record-keeping purposes in the public interest for a limitless period of time, since they are connected to an administrative procedure having a Community value.

E) In the case of personal data provided by each concerned person upon enrolment in the vocational training or retraining courses or in other training courses (with or without legal value), through the enrolment procedure described in UTIU’s website, or anyhow learnt during the execution of the distance training activities and up to the awarding of the title or of the attendance certificate:

  • The personal data provided are required for concluding a contract upon request of the concerned person and in which he himself is one of the contracting party and further on for the execution of the contract itself;
  • It is not necessary to get your consent since the procedures of collection, recording, processing, filing and consultation of these personal data by the Owner are all procedures aimed at the conclusion of the contract upon request of the concerned person and further to its execution;
  • The concerned person’s identification data and other personal data learnt while  carrying out distance learning activities are also recorded, processed and filed by the Owner in order to allow for the awarding of the qualifying university training credit, established by the Ministerial Decree n° 616/2017 or of the professional training credit, established by the Decree of the President of the Republic n° 137/2012 or to certify the completion of the course;
  • The concerned person’s identification data treated for the awarding of the qualifying university training credit, established by the Ministerial Decree n° 616/2017 or of the professional training credit, established by the Decree of the President of the Republic n° 137/2012 will be communicated by the Owner to the competent public authority in case of checking procedure;
  • All personal data of the concerned person will be kept by the Owner for the whole duration of the contract and upon its conclusion; those related to financial aspects and those related to the learning activity will be kept in the records up to the expiry of the normal prescription terms as per art. 2946 of the Civil Code and later on eliminated, whereas those related to retraining courses, since they are connected to an administrative procedure, will be kept exclusively for record-keeping purposes in the public interest for a limitless period of time.

In all the above-mentioned cases each concerned person has a right to ask the Owner for the:

  • Correction of incorrect personal data related to him;
  • Integration of the incomplete ones;
  • Elimination of these data if they were illicitly treated or if their elimination is necessary to comply with legal obligations;
  • Limitation of the treatment of only the personal data related to him of which the concerned person does not deny the correctness, waiting for the conclusion of checks on the denied ones and being accordingly informed before the above-mentioned limitation is removed;
  • Return of the provided personal data, in a structured format, of common use and readable by an automatic device, or the transmission of them to another owner of the treatment, also in a direct way, if technically feasible. The personal data that were not provided by the concerned person and those treated for the performance of task of public interest or connected to public powers of which the Owner of the treatment is responsible are excluded.

Any requests can be submitted to the Owner by calling the following numbers: tel. +39 06 692076.70 / +39 06 692076.71 or sending an e-mail to: info@uninettunouniversity.net .
UTIU will assure a follow-up to any request of the concerned person with no unjustified delay and, anyway, within a month from its reception. This term may be extended to maximum two months and it will be up to the Owner to communicate to the concerned person the extension and the reasons for the delay, within a month from the reception of the request.
In the case where the requests of the concerned person may be groundless or excessive, particularly for their reiterative character, the Owner has a right to charge a fee for the relative expenses or even reject the request.
In case the concerned person deems that the treatment involving him infringes the EU Regulation 2016/679 or that the Owner did not comply with its obligations related to the exercise of the above-mentioned rights, he has a right, as per art. 77 of the same Regulation, to submit a claim to the Supervisory Authority, based in the Member State, where he usually resides or works or to that one that is based in the place where the possible infringement occurred. Any other administrative or jurisdictional claim is excluded.