Information on the Use of Personal Information and Rights of the Applicant (EU Regulations 2016/679
With this document, UNIVERSITA’ COMMERCIALE “LUIGI BOCCONI” (hereinafter Bocconi University or the University), with its registered office at Via Sarfatti 25, Milano, as Data Controller, hereby informs you, in compliance with European Regulation 2016/679 known as GDPR – General Data Protection Regulation, (hereinafter the Law), regarding use of the personal data (hereinafter the Data), collected when applying for benefit assignment.
The types of information we collect
The personal data acquired are communicated by the student when registering or enrolling, such as full name, date and place of birth, gender, tax code, nationality, residence address, phone and electronic contact information, as well as data acquired with the application for benefit assignment, such as data related to vital data and the financial and asset situation of the student and the student’s family household. Some personal data are included in what is defined by the Law as belonging to “special categories” (hereinafter sensitive data), meaning information relating to health of the interested party and family members, information relating to ethnicity or race, etc.
Purpose and modality of the Treatment
The personal data described above are collected by Bocconi University through ISU Bocconi – the Student Assistance and Financial Aid Center/Fees, Funding and Housing Office and used, including with electronic instruments, for the sole purpose of allocating the benefit requested and verifying the conditions for allocation, in any case for legal purposes. Regarding the aforementioned purposes, the use of data will also take place with the use of electronic or automated means in a way that is relevant and limited to what is required for the purposes for which they are used and, in any case, in order to guarantee the strictest security and confidentiality and always in full compliance with current legislation. With regards to sensitive data, use will be carried out in proportion to the purpose pursued.
The legal basis for processing your information
The personal data described above shall be used following a request by the interested party and for legal purposes. They must, of necessity, be provided to determine the financial status of the applicant’s immediate and nuclear family and to determine whether they meet the requirements for accessing the benefit and determining the same, according to the criteria set out in these regulations. Failure to consent to use of data shall prevent participation in the application.
For the purposes indicated at paragraph 2., the data can be treated without the consent of all interested parties, as necessary in compliance with a legal obligation pursuant to article 10 of Italian D.lgs. 68/2012, article 71 of Italian D.P.R. 445/2000 and article 11 of Italian DPCM 159/2013, as well as for the performance of the University tasks carried out in the public interest as an academic institution, in compliance with article 34, paragraphs 3 and 4 of the Constitution, DPCM 9 April 2001 and Italian D.Lgs. 68/2012.
Sensitive data communicated through the application for benefit assignment for the Right to University Education are treated in compliance with the aforementioned law (articles 6 and 9 of the General Data Protection Regulation n. 679/2016).
Circulation and communication of Data
Data may be accessed by Staff of Bocconi University that have the need in order to perform duties or given their position held, as well as other entities providing services to Bocconi University, whom the University has specifically nominated as responsible or qualified for the processing of the Data of such subjects, in relation to their duties, shall have access to the pertinent Data. All this, always in connection with the purposes pointed out previously. The data described above may be communicated to natural persons or legal entities that collaborate with the University for the purposes of allocating benefits for the Right to University Education; to public authorities such as the Lombardy Region, the Italian Ministry of Finance, the Italian Revenue Office and the Guardia di Finanza for legitimate checks. Data will be kept strictly for the time and scope for which they were collected.
Data Subject’s Rights
Data subjects have the following rights: to require the Data Controller to correct the personal data held about them if it is incorrect; to require the Data Controller to erase their personal data; to require the Data Controller to restrict its Data processing activities (and, where its processing is based on the subject’s consent, the Data subject may withdraw that consent, without affecting the lawfulness of the Data Controller’s processing based on consent before its withdrawal); to object to the data treatment; to receive from the Data Controller the personal data held about the subject which the subject has provided, in a reasonable format specified by the subject, including the purpose of the transmittal to another data controller. The aforementioned rights may be exercised with a request sent to ISU Bocconi – the Student Assistance and Financial Aid Center/Fees, Funding and Housing Office at the email address firstname.lastname@example.org to the attention of the manager of data use.
Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply.
The Data Controller for personal data is Università Commerciale Luigi Bocconi.
The internal Data Processor of the data provided is Mr. Paolo Cancelli, Director of the Students Organizational Unit.The Data Controller has appointed as Data Protection Officer ("DPO") may be contacted at the email address email@example.com for any questions regarding use of personal data and to exercise the rights set out in the Law