Privacy Policy

INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA PROVIDED PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 – GDPR (GENERAL DATA PROTECTION REGULATION)

Dear User,

University of Milan, with registered office in , VAT No. 03064870151, pursuant to EU Regulation No. 2016/679 (hereinafter “Regulation”), is required to provide you with certain information regarding the use of your personal data.

This information notice applies to the website https://merged.info (hereinafter the “Website”), and not to other websites that may be accessed by the user via links. It constitutes an integral part of the Website and the services we offer. The Notice is provided pursuant to Article 13 of the Regulation to users who interact with the web services of the Website.

Your personal data will be processed in accordance with the legislative provisions of the Regulation and with the confidentiality obligations therein. Therefore, the processing of your personal data will be based on the principles of fairness, lawfulness, transparency, purpose and storage limitation, data minimization and accuracy, integrity and confidentiality, as well as the principle of accountability set out in Article 5 of the Regulation.

DATA CONTROLLER AND DATA PROCESSORS

The Data Controller is University of Milan as identified above. The updated list of Data Processors may be requested at the following e-mail address: merged@ifro.ku.dk.

TYPES OF DATA PROCESSED

Browsing data
 The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
 This category of data includes: IP addresses or domain names of the computers used by users connecting to the site; URI (Uniform Resource Identifier) addresses of requested resources; the time of the request; the method used to submit the request to the server; the size of the file obtained in response; the numerical code indicating the status of the server's response (successful, error, etc.); and other parameters relating to the user's operating system and IT environment. Currently, web contact data are not stored for more than seven days.

Data voluntarily provided by the user
 The optional, explicit, and voluntary sending of personal data in specific sections of the website (for example, the “Contact” section) as well as any other personal data included in the message, will be processed solely for purposes strictly related to the user’s request (e.g., responding to information requests). Except for any processing required by law, any other purpose is excluded.

Cookies
 Details on the cookies used on the Website are available in the “cookie policy” accessible at the following link, where you may personalize your browsing experience.

PURPOSES AND LEGAL BASIS OF PROCESSING

Personal data will be processed for the following purposes:

  1. Operational management and purposes strictly connected to website access;
     Legal basis: consent and performance of a contract.
  2. Statistical analysis in anonymous and aggregated form regarding the use of the Website and verification of its proper functioning;
     Legal basis: consent and the legitimate interest of the Data Controller.
  3. Compliance with legal obligations under current laws, regulations, or EU legislation, and satisfaction of requests from authorities;
     Legal basis: compliance with a legal obligation.
  4. Responding to requests sent through the contact form on the Website;
     Legal basis: consent of the data subject.

NATURE OF THE DATA PROVISION AND CONSEQUENCES OF REFUSAL

Providing personal data, although not mandatory, may be essential for us to deliver our services.

In particular, for the purposes referred to under point d., the provision of data is always optional. You may therefore decide not to provide any data or later deny permission to process data previously provided, withdrawing consent at any time by sending a specific request to the Data Controller in the manner described in this information notice.
 However, refusal to provide consent may make it impossible for us to acquire your data and therefore to respond to your requests.

METHODS OF PROCESSING

Your personal data will be processed using paper and/or automated electronic tools by Data Processors appointed pursuant to Article 28 of Regulation (EU) 2016/679 or by persons authorized to process the data, for the time strictly necessary to achieve the purposes for which they are collected or for any other related legitimate purpose (without prejudice to your right to withdraw consent).
 After this period, the data will be stored to fulfill specific legal or contractual obligations, as well as for administrative purposes and/or to establish or defend a legal claim in case of disputes.

In any case, the Data Controller undertakes to adopt adequate technical and organizational security measures to prevent destruction or loss of data, unauthorized access, or unlawful processing, pursuant to Article 32 of Regulation (EU) 2016/679.

Your data will not be disseminated in any way but may be communicated to third parties whose activities are required and connected to the achievement of the purposes indicated above (e.g.: professionals, competent administrative and judicial authorities, legal consulting firms, national and/or international public authorities entitled to request such data).

No automated decision-making processes, including profiling as referred to in Article 22(1) and (4) of Regulation (EU) 2016/679, are carried out.

TRANSFER OF PERSONAL DATA

Personal data processed through this Website are not transferred outside the European Economic Area.
 However, it is understood that the Data Controller may, if necessary, transfer the server location to non-EU countries. In such cases, the Data Controller guarantees that any transfer will be made in compliance with applicable laws and, if necessary, through agreements ensuring an adequate level of protection.

RIGHTS OF THE DATA SUBJECT

As a data subject, you may contact the Data Controller to exercise your rights under Articles 15 to 22 of Regulation (EU) 2016/679, listed below:

  • Right of access to personal data (Art. 15);
  • Right to rectification (Art. 16);
  • Right to erasure (Art. 17);
  • Right to restriction of processing (Art. 18);
  • Right to data portability (Art. 20);
  • Right to object to processing (Art. 21);
  • Rights relating to automated decision-making (Art. 22).

Where processing is based on Article 6(1)(a), you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You also have the right to lodge a complaint with the Data Protection Authority.

To exercise your rights, you may send a registered letter with return receipt to University of Milan, Via Festa del Perdono 7 - 20122, Milan, or an email to merged@ifro.ku.dk.