Information on the processing of personal data (Wellness and sport)

The Data Controller is the University of Padova, with registered campus in Via VIII Febbraio n. 2, 35122 - Padova. To contact the Data Controller, write an email to the certified e-mail address amministrazione.centrale@pec.unipd.it or to the e-mail address benessere.sport@unipd.it.

At the University there is a Data Protection Officer, appointed pursuant to art. 37 of EU Regulation 2016/679, which can be contacted at the following e-mail address: privacy@unipd.it.

The University provides for the processing of personal data provided by the interested party for the performance of the activities of providing the wellness and sports service.

The personal data that may be processed, exclusively for the purposes indicated in point 4, are:

1. personal data and contact details;
2. images and video recordings at the campus of the activity and events.

The processing of data is aimed exclusively at carrying out wellness and sports activities for the benefit of all members of the university community and citizenship. In particular, the processing is carried out for the following purposes:

1. enrolment in the specific wellness and sport event;
2. management of activities and communications related to the event;
3. promotion of the University's wellness and sports events;
4. surveys and statistical analyses carried out in order to improve the proposed wellness and sport services and for information and dissemination purposes of the activities themselves and third mission.

The personal data of the interested party are processed with the support of computer and paper means.

The University shall take appropriate organisational and technical measures to protect and guarantee the confidentiality of the personal data in its possession, in particular against the loss, theft, as well as the unauthorised use, disclosure or modification of personal data.

Any statistical surveys are carried out anonymously and the results are disseminated exclusively in aggregate form, without the possibility of tracing the personal identity of the participants.

The University does not resort to automated decision-making processes relating to the rights of the data subject on the basis of personal data, including profiling, in compliance with the guarantees provided for by art. 22 of the EU Regulation.

Any processing of special data is carried out in compliance with the "Regulations for the processing of sensitive and judicial data of the University", which can be consulted in Regulations of general interest.

Personal and common personal data and images and video recordings are processed for the execution of tasks of public interest as defined by law, by the University Statute and by internal regulations, pursuant to art. 6, par. 1, letter e) of the EU Regulation.

As far as personnel are concerned, the processing of personal data is based on the performance of the contract and the rules governing the employment relationship.

The images contained in photos, videos or other audiovisual material that may be acquired during the event may be published on the University's official communication channels, in the presence of one of the following conditions:

1. signing of a specific release form by the interested party or, in the case of minors, by the parent/legal representative;
2. images related to facts, events, ceremonies of interest to the community or held in public, in respect of the honor, reputation and decorum of the subjects concerned. In any case, compliance with the principles of continence and relevance (exclusion of close-ups, blurring, "pixelation", etc.) is guaranteed.

If a specific release for the use of the images has not been collected, the University will advise, with a special iconic notice displayed near the event, that it is planned to collect photos or video footage of the participants during the event.

The recipients of the data are the natural persons appointed by the University for the processing of data, including employees and collaborators, including self-employed ones, of the University or of entities affiliated with the University.

Data Processors

The data are also recipients of the Data Processors appointed by the University, including:

• CINECA, as the main provider of IT services, with campuses in via Magnanelli 6/3, 40033 Casalecchio di Reno (BO) - Privacy policy CINECA;
• Google Ireland Limited, as provider of the email service, with campuses at Gordon House, Barrow Street, Dublin 4, Ireland  - Privacy policy GSUITE;
• exclusively for the purpose of providing remote activities, Zoom Video Communications, Inc. - San Jose, CA 95113, 55 Almaden Blvd, Suite 600 - Privacy policy Zoom, is appointed as Data Processor;

Personal data, in any case, may be disclosed to third parties in relation to the fulfilment of legal and contractual obligations, specific requests by the data subject, the management of any complaints or disputes and for the prevention and repression of fraud and any illegal activity.

The determination of the period for which personal data will be stored is based on the principle of necessity for processing. Personal data will therefore be stored for the entire period necessary to carry out the purposes set out in point 4.

The interested party may exercise the rights provided for in Articles 15 et seq. of the EU Regulation, such as the right of access, the right to rectification or integration of their data, the right to erasure (right to be forgotten) and restriction of processing and the right to data portability, under the conditions and within the limits indicated by the EU Regulation.

The request for erasure of personal data cannot be accepted to the extent that the processing is necessary for the fulfilment of a legal obligation, for the performance of institutional tasks, for the establishment, exercise or defence of a right in judicial campus and in any other case provided for by art. 17, paragraph 3 of the EU Regulation.

The interested party has the right to object at any time to the processing of his/her personal data, in accordance with the provisions of art. 21 EU Regulation.

The interested party may lodge  a complaint with the Guarantor for the protection of personal data.

To exercise their rights, the interested party may contact the University, by writing to the certified e-mail address amministrazione.centrale@pec.unipd.it or to the e-mail address benessere.sport@unipd.it. Alternatively, the interested party can write to: University of Padova, via VIII Febbraio n. 2, Padova.

The University is required to provide a response within one month of the request, extendable up to three months in case of particular complexity of the request.

Changes and additions to this policy are published in the privacy section of the institutional website at www.unipd.it/privacy.

In any case, the University undertakes to communicate directly to the data subjects, through its institutional channels, any changes in the purposes of the processing, the identity of the data controller and any other changes that may significantly affect the rights of the data subjects or their exercise.