Privacy Policy


Pursuant to European Regulation No. 679/2016, we wish to inform you that the Bologna University Business School Foundation (“Fondazione Bologna University Business School”, hereinafter also referred to, for brevity, as “BBS”) proceeds to process your data for the purposes indicated below, in compliance with the legislation on the protection of personal data.

  1. Data provided for the execution of a contract or the use of a service

The processing of your personal contact data is necessary to allow us to guarantee the use of the service, the execution of the contract or pre-contractual obligations (including requests for information received from you), or your participation in a given event promoted or organized by BBS. For this reason, any refusal to provide your personal data determines the impossibility for Bologna University Business School to guarantee the use of the service, the execution of the contract or pre-contractual fulfilments requested, or to guarantee your participation in a specific event promoted or organized by BBS.

For this reason, your consent will not be required for the purpose of processing the aforementioned data for the aforementioned purpose, as the legal basis legitimizing its processing is the execution of a contract to which you are a party or participating in an event you attended.

BBS may perform further processing, based on the legitimate interest of the Data Controller ex art. 6, paragraph 1, letter f) of Reg. (EU) 2016/679, for the management of possible litigation and defense in court.

1.1 Processing times

1.1.1. The data indicated in point 1 above given by you for the execution of a contract or for the use of a service or participation in the event will be processed by BBS for the purposes previously described in point 1, for the time necessary for the execution of the contract or the use of the requested service or participation in the event.

1.1.2 In the case of participation in events, the data will be kept for a period of 30 days for security and public health reasons and may be provided to the judicial authority or public security authority upon request.

1.1.3. In other cases, the data indicated in point 1 above will be processed up to 10 years from the term of the execution of the contract, of the usage of the service, or the term of payment, exclusively to ensure the fiscal, accounting and administrative fulfilments required by law, except for longer terms, related to the management of any litigation and defense in court, for which the longer term is considered valid. In the event that the aforementioned data have been provided in the pre-contractual phase (for example, when requesting information), the processing of the aforementioned data will take place for a period not exceeding two years, in order to allow for a correct and more efficient management of the pre-contractual relationship with you.

  1. Audio-visual data and Images in streaming events

In relation to events held in remote mode (streaming, including live streaming on social channels traceable to BBS, videoconferencing, etc.) BBS may retain recordings for administrative and archival purposes.

In these cases, streaming or videoconferencing tools are set by default to ensure that your device’s webcam and microphone are turned off.

In the event that you activate the webcam and/or microphone, such activation is equivalent to giving authorization. The legal basis for such processing is the authorization given by you to use the audio-video material that concerns you.

Your data will be processed for as long as the event lasts, after which it will be retained solely for the purpose of being able to prove in any forum that you have obtained all the rights referred to in the release form.

2.1 Audio-visual data and Images in live events

In the case of participation in BBS in-person events, which are held in public places or open to the public, such as the Graduation event, BBS informs you that the event will be documented through audio and video footage for administrative and archival purposes.

The legal basis for the aforementioned processing is the legitimate interest of BBS, there being an appropriate and relevant relationship between it and the participants in the events it organizes.

  1. Method of processing

The processing of personal data is carried out by BBS using paper and computerized methods.

We would like to inform you that BBS does not subject your data to decisions based on automated processing that produce legal effects or similarly significantly affect your person within the meaning of Article 22 of European Regulation 679/2016.

  1. Data Controller

The Data Controller is the “Fondazione Bologna University Business School”, based in Villa Guastavillani, Via degli Scalini 18, Bologna (BO), registration number 729 in the Reg. Persone Giuridiche at the Prefecture of Bologna, page 118 vol. 5, partita IVA 02095311201. The person in charge of giving feedback to the data subject in case of exercise of the rights under Articles 15-21 of Reg. (EU) 2016/679, is the Chief Operating Officer (also referred to as “C.O.O.”), whose contact details can be found at the following link:

  1. Data processors and communication of your data to third parties

The parties or categories of parties indicated in are designated as data processors pursuant to Article 4 of the aforementioned European Regulation No. 679/2016 and may therefore process and become aware of the data you have provided.

To this end, it should be noted that the entities designated as data processors are used by BBS:

  • for the management of relations with customers and more generally, with third parties, including for accounting and administrative purposes, including legal defense;
  • for the management of communications, including those of a commercial and promotional nature and for the provision of information and promotional services;
  • for the management, including computerized management, of its archives.
  1. Data Protection Officer

BBS has designated its Data Protection Officer, who can be contacted at the following address:

You may contact the Data Protection Officer for all matters relating to the processing of your personal data and the exercise of your rights under European Regulation No. 679/2016.

  1. Place of processing

BBS carries out the processing of your data in Italy.

Some of the Designated Processors are based, or process your personal data, in countries other than Italy, but always within the European Union.

  1. Rights of the data subject

You may exercise the rights recognized by Articles 15-21 of European Regulation No. 679/2016, including the right to request access to, rectification, or erasure of your personal data from the data controller, as well as restriction of the processing of data concerning you.

8.1 Right to object

You also have the right to object to the processing of your data, in whole or in part, pursuant to Article 21 of the aforementioned Regulation No. 679/2016, by revoking your consent to the processing at any time without affecting the lawfulness of the processing based on the consent given before revocation. In the case of processing based on legitimate interests, the data subject has the right to object, at any time, to the processing of personal data concerning his or her particular situation. The right to object may not be exercised for those data with respect to which BBS demonstrates the existence of overriding legitimate grounds for processing (such as for accounting and administrative reasons, for the exercise of the right of defense, etc.).

8.2 Right to data portability

You also have the right to data portability under the conditions of Article 20 of Regulation 679/2016. The right to data portability consists of the right to receive from BBS in a structured, commonly used, and machine-readable format your personal data whose processing was carried out by BBS by automated means and was based on a contract or on consent.

You also have the right to lodge a complaint with a competent supervisory authority, pursuant to Article 77, paragraph 1 of Reg. (EU) 2016/679, which in Italy is the “Garante per la protezione dei dati personali”.

8.3 Modalities for the exercise of rights

You can exercise your rights by sending a communication to the offices of the “Fondazione Bologna University Business School” indicated in point 4 above (Data Controller) or to the following email address: