Privacy policy
Pursuant to article 13 of the Regulation (EU) 2016/679 (General Data Protection Regulation “GDPR”), the page in question outlines the University's practices regarding the collection, use, and storage of personal data from users interacting in general with the website of the University of Catania www.unict.it.
The purpose of this policy is to provide maximum transparency about the information acquired in the website and how it uses it.
The information does not cover other websites, pages or online services accessible via any hyperlinks published on this site. For those, please refer to their respective private policies.
Data Controller
The Data Controller is the University of Catania in the person of the Magnificent Rector, his pro-tempore Legal Representative.
The Data controller’s contact details are:
email: rettorato@unict.it
PEC: protocollo@pec.unict.it
Data Protection Officer (DPO)
Pursuing to Articles 37 and following of the (EU) Regulation 2016/679 (or “GDPR”) the University has designated a Responsible for the protection of personal data (DPO). The DPO’s contact details are:
email: rpd@unict.it
PEC: rpd@pec.unict.it
Methods of data processing
All personal data are aligned with full adherence to GDPR principles, with particular regard to lawfulness, fairness and transparency; the use of data collected for specified, explicit and legitimated purposes and not further processed in a manner that is incompatible with those purposes, respecting the principles of data minimization, accuracy, storage limitation, integrity and confidentiality, accountability (as outlined in GDPR Article 5).
Data collection and processing are also done using IT and technology to ensure security and confidentiality principle, in order to prevent unauthorized or unlawful processing and against accidental loss of the personal data.
Data subjects are kept for no longer than is necessary for the purposes for which they are processed.
Processing Purposes
Personal data are processed exclusively for institutional purposes, in particular for what concerns the management of web services on the website of the university, within the scope of the institution’s didactic, scientific research and administrative activities.
To fulfill the mentioned institutional purposes, data are processed within the University of Catania by an authorized Data Processor, adequately trained under the responsibility of the Data Controller.
In particular, the processing of data which are linked to the services offered by the website, are performed by employees who have technical and administrative expertise, selected and authorized in function of specific purposes of the requested services.
Legal bases for processing
Pursuant to article 6 of GDPR, the legal bases for processing can be identified as follows:
- Implementation of tasks of public interest or connected to the exercise of public powers (for example provision of services for institutional didactic and research purposes)
- Processing is necessary for the performance of a contract to which the data subject is party or for the purpose of pre-contractual measures taken at the request of the data subject (for example participation in selection calls for international mobility initiatives)
- Processing is necessary for compliance with a legal obligation to which the controller is subject (for example administrative transparency obligations)
- Consent to the processing of data subject (for example cookies and other tracking technologies).
Types of Data Tracked
Navigation Data
The computer systems and software procedures used to operate this website acquire certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes, for example, the IP addresses or domain names of the computers used by users connecting to the website, the URI (Uniform Resource Identifier), notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server and other parameters relating to the user's operating system and IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the website and to check its correct operation, and are deleted immediately after processing. Data on website contacts are not stored after their elaboration, except for possible checks on computer-related crimes against the website.
Data provided voluntarily by the user
Sending emails to the addresses indicated on the Website - which is optional, explicit and voluntary – with eventual forms to be filled in, entails the subsequent acquisition of your email address, which is necessary in order to reply to requests, as well as any further personal data that you may disclose in communication.
For particular services, specific information is provided on the processing of personal data, and where necessary can be consulted in the relevant sections.
Cookies and other tracking tools
This site does not use profiling cookies or third-party cookies. There are no forms, plugin or contents incorporated from external platform (e.g. social network, video player, interactive maps) and therefore there is no tracking from third parties.
The primary use of cookie, is a session cookie generated automatically by Drupal platform, strictly necessary for the website to function properly. These cookies are temporarily, do not track in any way the server activity and they are deleted when the browser is closed. The access to Restricted Area, accessible only to the content management staff, uses session cookies strictly necessary for maintaining authentication during use.
Collecting access statistic data from the web, or web analytics, is done directly through the analysis of web server logs, without side-client tracking tools.
The only exception: inside the section “Transparent Administration” there is a statistical monitoring system based on Web Analytics Italy, the public service provided by AgID, that uses anonymized analytic cookies, in accordance with current regulations. For further details, please refer to the relevant Privacy Policy of Web Analytics Italia.
Scope of Data communication and dissemination
Within the institutional purposes of the University, data may be transmitted to the individuals responsible for managing research and didactic activities and also shared with external data processors, such as outsourcing companies for specific tasks strictly linked to the activities of the athenaeum, after verifying their expertise or reliability, to handle the data responsibility (as outlined in GPDR article 28).
Data subjects may be published on the website, also through the use of approved techniques of pseudonymization, to ensure the protection of personal data privacy (finality, relevance, storage limitation) in cases provided by law and regulations, subject to restrictions of publication of sensitive and judicial data.
The data will not be used by the data controller nor transferred to third parties for marketing purposes.
Data subject rights
The relevant individuals can exercise their rights over their personal data towards the University of Catania, in accordance with Articles 15-21 of the GDPR, by filing out the “Data Subject Rights Form”, available at the following link “Exercise of Data Subjects Rights” and sending the instance to the DPO email address.
Reclaim
If a data subject believes their data is being processed in violation of GDPR regulations, they can address the issue to the relevant supervisory authority (www.garanteprivacy.it) or refer to the appropriate judicial officers.
Further Information
For detailed information on individual treatments, please refer to the specific page “Information and exercise of the rights”.
