Privacy Policy
DIGITAL TOOL PRIVACY NOTICE
Privacy notice regarding the processing of personal data to access the Digital Tool online services
The General Regulation on Personal Data Protection (EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016) henceforth GDPR, provides for the protection of natural persons with regard to the processing of personal data as a fundamental right. In accordance with Article 13 of the GDPR, therefore, as a data subject, we inform you that:
DATA CONTROLLER: The data controller of your personal data is the University of Florence, based in Florence, Piazza San Marco, 4, telephone +39 055 27571, e-mail: urp@unifi.it, certified e-mail (PEC): ateneo@pec.unifi.it
DATA PROTECTION OFFICER: The Data Protection Officer (DPO) can be contacted at the following e-mail address: privacy@adm.unifi.it
PURPOSES AND LEGAL BASIS OF PROCESSING: In compliance with the principles of lawfulness, fairness, transparency, adequacy, relevance, and necessity pursuant to Article 5, paragraph 1 of the GDPR, the University of Florence, as Data Controller, will process the personal data provided by the data subject using electronic means, for the following purposes: to access the services of the online catalog of training materials and contents developed and shared in the framework of the Intercultural Craft project, in which the Department of Architecture (DIDA) of the University of Florence was partner.
Specifically, identification and contact data will be processed for the purposes of registering on the website hosting the training materials and necessary to access the service, as well as data related to navigation on the site. Data will be collected and processed by computerized, manual, and/or paper means through their insertion into IT archives on servers and/or paper archives of the University of Florence.
The data will be processed pursuant to Article 6, paragraph 1, letter e of the GDPR.
The users interested in processing are those who wish to access the catalogue and use the consultation services provided by it.
The data may be used for sending, on request of information material (newsletters, promotional information, etc.)
The data may also be used for further purposes such as statistical and research purposes in an aggregated and anonymous manner.
CATEGORIES OF DATA RECIPIENTS AND POSSIBLE DATA TRANSFER:
The data processed for the purposes described above will be communicated or made accessible to employees and collaborators of the Department of Architecture of the University of Florence responsible for managing the website, who, in their capacity as delegates, data protection contacts, system administrators, and/or data processors, will be appropriately instructed by the Data Controller.
Access to the data collected for the purposes described above may be granted by the Data Controller, for the performance of hardware or software maintenance work necessary for the functioning of the site or for managing certain additional functions, also to external parties who, solely for the purposes of the requested service, may come into contact with the data subjects’ personal data and who will be duly appointed as Data Processors pursuant toArticle 28 of the GDPR.
Outside the above-mentioned communications, data will not be disclosed to third parties except to comply with legal obligations or respond to legal and judicial requests and will not be disseminated.
The collected data will not be transferred to countries outside the EU.
DATA RETENTION PERIOD:
Data will be retained for the period during which the data subject intends to use the service. Data may be retained for additional periods for statistical and research purposes in an aggregated and anonymous manner.
DATA SUBJECT RIGHTS:
The data subject has the right to request from the University of Florence, as Data Controller, pursuant to Articles 15, 16, 17, 18, 19, and 21 of the GDPR:
Access to their personal data and all information referred to in Article 15 of the GDPR; Rectification of inaccurate personal data and completion of incomplete data;
Deletion of their data, except for data contained in records that the University is obliged to retain and unless there is a prevailing legitimate reason to continue processing;
Restriction of processing in cases provided for by Article 18 of the GDPR. The data subject also has the right:
To object to the processing of their personal data, except where necessary and mandatory for the establishment of the relationship;
To withdraw consent given for non-mandatory data processing, without affecting the lawfulness of processing based on consent before withdrawal.
Data subjects may request deletion from the service at any time by writing to the email address: intercraft.pm@gmail.com
HOW TO EXERCISE RIGHTS:
Data subjects may exercise all the rights mentioned above (also by using the specific form published at https://www.unifi.it/vp-11360-protezione-dati.html) by sending an email, accompanied by a copy of an identity document, to the Data Protection Officer at privacy@adm.unifi.it.
COMPLAINT:
Data subjects have the right to lodge a complaint with the Data Protection Authority pursuant to Article 77 of the GDPR (http://www.garanteprivacy.it).
MANDATORY OR NOT NATURE OF PROVIDING DATA:
The processing of personal data is necessary to register on the site and use the related services.
