Privacy notice on the processing of personal data (Student Inclusion)

The Data Controller is the University of Padua, with its registered office at via VIII Febbraio n. 2, 35122 - Padua (PEC address: amministrazione.centrale@pec.unipd.it).

At the University there is a Data Protection Officer, who can be contacted at the email address privacy@unipd.it.

Personal data are provided to the University directly by the data subject during the pre-enrolment, enrolment and attendance phases of the courses.

The personal data processed, exclusively for the purposes indicated in point 4, are:

1. ordinary data: personal and contact details, data relating to academic career and participation in teaching activities, income-related data;
2. data belonging to special categories: data concerning disability conditions, DSA, BES, serious health conditions and the related certifications.

The processing of ordinary personal data (point 3(a)) is intended exclusively for carrying out the activities necessary for the management of the university career, the provision of services to students, and the other institutional purposes illustrated in the Student Privacy Notice.

The processing of data belonging to special categories (point 3(b)) is carried out exclusively for the management of the inclusion service within the student community for students with disabilities, specific learning disorders, special educational needs, and serious health conditions, in particular for the following specific purposes:

1. preparation of personalised admission tests (for further information, please consult the page Reception and entry tests);
2. advice to ESU for the allocation of accommodation suited to the person's needs;
3. design and delivery of workshops, services, and support for students with learning difficulties;
4. preparation of accessible teaching materials, inclusive teaching strategies, and the necessary adaptations and personalisations;
5. adaptations and personalisation of laboratory and traineeship activities;
6. support from inclusion tutors;
7. requests for aids, extra time, or other adaptations for sitting examinations;
8. application of any financial benefits, where due (for further information, please consult the page Scholarships and fees);
9. other purposes related to institutional activities, with particular reference to teaching, student wellbeing, and health.

For further information, please consult the page Support for attending classes, individual study, and examinations.

The processing of personal data within the scope of the purposes indicated in point 4 is carried out by the University on the basis of the following legal bases:

• ordinary personal data (point 3, letter a) are processed for the performance of tasks carried out in the public interest as defined by law, the University Statute and internal regulations (pursuant to Article 6(1)(e) of the EU Regulation);
• data belonging to special categories (point 3, letter b) are processed for reasons of substantial public interest, on the basis of European Union or national law concerning the granting of financial benefits, assistance, social integration and the rights of persons with disabilities, university education and training (pursuant to Article 9(2)(g) of the EU Regulation and Article 2-sexies, paragraph 2, letter m), aa) and bb), of Legislative Decree No. 196/2003).

The provision of personal data is optional, but essential for the delivery of support services and for compliance with the related legal obligations.

Students who intend to report a disability solely for the purpose of obtaining the financial benefits provided for by law shall provide their civil invalidity certificate and/or the report pursuant to Law 104/1992, redacting all health-related data contained therein.

The University adopts appropriate organisational and technical measures to protect personal data and ensure their confidentiality, in particular against loss, theft, and the unauthorised use, disclosure or alteration of personal data.

The University does not use automated decision-making processes concerning the rights of the data subject based on personal data, including profiling, in compliance with the safeguards provided for in Article 22 of the EU Regulation.

The processing of special categories of data (point 3, letter b) is carried out in accordance with the Regulations on the processing of the University's sensitive and judicial data.

Personal data belonging to special categories are processed with the support of paper-based and IT tools, as well as by telephone or email communication, exclusively by personnel authorised to process the data (teaching staff, technical and administrative staff, collaborators and language experts, inclusion tutors).

The processing of data belonging to special categories is also carried out through the IT platforms used by the University to manage the student's academic career (e.g. Uniweb), for online teaching (e.g. Moodle), for traineeship and job placement activities (e.g. UniPD Careers), and for international mobility (e.g. Apply Unipd).

The data are disclosed exclusively to natural persons authorised by the University to process the data, including employees and collaborators, including self-employed collaborators, of the University of Padua and affiliated bodies, as well as the Data Processors appointed by the University.
Disclosure of the data to public bodies and third parties remains permitted in connection with compliance with legal and contractual obligations, specific requests from the data subject, the handling of any complaints or disputes, and the prevention and prosecution of fraud and any unlawful activity, as specified in detail in point 7 of the Student Information Notice.

Outside the cases described above, personal data are not disclosed to third parties in any way.

Personal data are retained for the entire period necessary to fulfil the purposes set out in point 4 and to comply with the applicable legislation on the matter.

The data subject is granted the following rights:

1. right of access to their personal data (Art. 15 EU Regulation);
2. right to rectification or completion of their data (Art. 16 EU Regulation);
3. right to erasure (the so-called right to be forgotten) (Art. 17 EU Regulation);
4. right to restriction of processing (Art. 18 EU Regulation);
5. right to data portability (Art. 20 EU Regulation);
6. right to object to processing at any time (Art. 21 EU Regulation);
7. right to lodge a complaint with the Italian Data Protection Authority.

The request for erasure of personal data cannot be accepted insofar as the processing is necessary for compliance with a legal obligation, for the performance of institutional tasks, for the establishment, exercise or defence of a right in judicial proceedings, and in any other case provided for by Art. 17(3) of the EU Regulation.

To exercise their rights, the data subject may contact the Student Services Office - Inclusion Sector by writing to the email address inclusione.studenti@unipd.it, or to the certified email address amministrazione.centrale@pec.unipd.it. Alternatively, the data subject may write to: University of Padua, via VIII Febbraio n. 2, 35122 - Padua.

The University is required to provide a response within one month of the request, extendable up to three months in the event of particular complexity of the request.

Any changes to this privacy notice are published on the page www.unipd.it/privacy.

In any case, the University undertakes to communicate directly to the data subjects, through its institutional channels, any changes to the purposes of the processing, the identity of the Data Controller, and any other changes capable of significantly affecting the rights of the data subjects or their exercise.