Pursuant to article 13 of European Regulation no. 679/2016, we inform you that the Fondazione Bologna University Business School (hereinafter also referred to as “BBS”) shall process your data for the purposes specified below, in compliance with the provisions concerning personal data protection.
1. Data supplied for the performance of the contract or the use of a service
The processing of the data you supplied, such as personal and contact data, the data concerning the company or the body to which you belong, is necessary in order to ensure the use of the service and the performance of the contract.
For this reason, your consent to the purpose of the above-mentioned data processing shall not be required for the above-mentioned purpose, since the lawful basis legitimating the processing consists of the performance of a contract to which you are party or, in any case, of a required service.
If the law so provides, also for transparency purposes, your above-mentioned data, together with the prospective assignment and the received remuneration, could be published on the BBS website.
1.1 Data retention
The data specified under previous paragraph 1 that you provided for the performance of a contract or to use a service shall be processed by BBS for the purposes described above under paragraph 1, for the time necessary to perform the contract or to use the required service.
The data specified under previous paragraph 1 shall be processed for 10 years after the expiration of the contract performance, of the use of the service or the term of payment, exclusively to ensure the tax, accounting and administrative statutory fulfillments, except when longer terms are provided for, which cannot be determined beforehand, as a consequence of different conditions of lawfulness of the processing (for example, judicial actions requiring processing for a period exceeding 10 years).
Should the above-mentioned data have been provided at the precontractual stage (for example when requesting information), the processing of such data shall not exceed two years, in order to allow a correct and more effective management of the precontractual relationship existing with you.
2. Methods of processing
BBS shall carry out the processing of personal data by means of paper and IT methods.
We wish to inform you that BBS shall not submit your data to automated decision-making processing that produces legal effects or that similarly affects you, pursuant to article 22 of the European Regulation no. 679/2016.
3. Data Controller
The Data Controller is the “Fondazione Bologna University Business School” having its registered office in Villa Guastavillani, Via degli Scalini 18, Bologna (BO), number of enrollment in the Register of Juridical Persons at the Prefecture of Bologna 729, page 118, vol. 5, VAT registration number 02095311201. The person delegated to provide a feedback to the data subject in case of exercise of the rights under articles 15-21 of the (EU) Regulation no. 679/2016 is the Chief Operating Officer (also referred to as “C.O.O.”), whose contact data are available at the following link www.bbs.unibo.eu
4. Data processors and communication of your data to third parties
The subjects or the categories of subjects specified in the website www.bbs.unibo.eu are appointed as data processors pursuant to article 4 of the above-mentioned European Regulation no. 679/2016 and therefore they can process and gain knowledge of the data you have supplied.
For this purpose, please take note that BBS appoints as data processors the subjects with the following tasks:
a) management of the relationships with customers and, more generally, with third parties, also for accounting and administrative purposes;
b) management of communications, including marketing and promotional ones, and the supply of information, promotional and profiling services;
c) management of its archives, including IT-based management. Among the above-mentioned subjects, appointed as external data processors, the company Salesforce.com Italy S.r.L. having its registered office in Milan, Piazzale Biancamano no. 8 already features as one, as well as the subjects that each time will carry out the activities specified under letters a), b) and c).
5. Data Protection Officer
BBS appointed its Data Protection Officer, whom you can contact at the following address: dpo@bbs.unibo.it
You can contact the Data Protection Officer for any issue relating to the processing of your personal data and the exercise of your rights resulting from the European Regulation no. 679/2016.
6. Place of data processing
BBS carries out the processing of your data in Italy.
Some of the appointed Data Processors have their own registered office or they process your personal data also in countries other than Italy but in any case within the European Union.
7. Rights of the data subject
You can exercise the rights recognized under articles 15-21 of the European Regulation no. 679/2016, among which the right to ask the Data Controller the access to personal data, to have them rectified or deleted, as well as the limitation of processing of data related to you.
8. Right to object
You are also entitled to object to the processing of your data, in full or in part, under article 21 of the above-mentioned Regulation no. 679/2016, by revoking the consent to the processing at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation. The right to object cannot be exercised for those data with regard to which BBS proves the existence of prevailing lawful reasons to carry out the processing (such as accounting and administrative reasons, to exercise the defense right, etc.).
8.1 Right to data portability
You are also entitled to data portability in compliance with the provisions set out in article 20 of the Regulation no. 679/2016. According to the right to data portability, BBS is entitled to receive, in structured, commonly used and machine readable formats, your personal data, the processing of which has been carried out by BBS with automated means and based on a contract or on consent.
You are also entitled to lodge a complaint with a competent supervisory authority, pursuant to article 77, paragraph 1 of the (EU) Regulation no. 679/2016, that in Italy is the “Data Protection Commissioner”.
8.2 Methods to exercise the rights
The exercise of rights can be made by sending a communication to the premises of the Fondazione Bologna University Business School indicated in paragraph 4 above (Data Controller) or to the e-mail address gdpr@bbs.unibo.it.
DISCLAIMER: The English version is a translation of the original text written in Italian for information purposes only and cannot be the base of any legal claim. In case of a discrepancy, the Italian version will prevail.
