Information on the processing of personal data (Events and events)

The Data Controller is the University of Padova, with legal campus in via VIII Febbraio n. 2, 35122 - Padova (certified e-mail: amministrazione.centrale@pec.unipd.it).

The Data Controller is staffed by the Data Protection Officer, appointed pursuant to art. 37 of the EU Regulation. The Data Protection Officer can be contacted at the following e-mail address: privacy@unipd.it.

The personal data that may be processed by the joint controllers exclusively for the purposes indicated in point 4 is specified.

1. Personal data provided directly by the data subject. Common data, such as personal and identification data (driver's license/C.I./Passport), and contact data (e-mail, telephone contacts);
2. Images. Photos and video recordings of the participants, subject to notification with a special iconic information displayed in the vicinity of the event (also available on the www.unipd.it/privacy website).

The data acquired are processed for the purposes of enrolment in the event and exclusively for purposes related to the performance and dissemination of the University's institutional activities.

In particular, the data are processed for the following purposes:

1. enrolment in the event of interest;
2. participation in the activities planned by the event;
3. information and dissemination purposes of cultural, teaching, research and third mission activities.

The processing of data is carried out in such a way as to guarantee maximum security and confidentiality and may be carried out using manual, computer and telematic tools suitable for storing, managing and transmitting them.

The University does not resort to automated decision-making processes relating to the rights of the data subject on the basis of personal data, including profiling, in compliance with the guarantees provided for by art. 22 of the EU Regulation.

The images contained in photos, videos or other audiovisual material may be published on the University's official communication channels, only under the conditions indicated in point 7 (with release or for public interests and events).

In any case, the events in which the acquisition of images of the interested parties is planned through photos, videos or other audiovisual material are identified through the display of specific iconic information (also available on the www.unipd.it/privacy website).

The legal basis for the processing is Art. 6, par. 1, letter e), of the EU Regulation, as necessary for the execution of institutional teaching, research or so-called "third mission" tasks.

In relation only to the personal data of minors, the legal basis for the processing is art. 6, par. 1, letter a), i.e. the consent expressed by the parent or legal representative of the data subject.

The provision of personal data, including images, is essential for the purposes of enrolment and participation in the event.

The images contained in photos, videos or other audiovisual material acquired during the event may be published on the University's official communication channels, in the presence of one of the following conditions:

1. signing of a specific release form by the interested party or, in the case of minors, by the parent/legal representative;
2. images related to facts, events, ceremonies of interest to the community or held in public, in respect of the honor, reputation and decorum of the subjects concerned. In any case, compliance with the principles of continence and relevance (exclusion of close-ups, blurring, "pixelation", etc.) is guaranteed.

The data may be communicated, exclusively for the purposes indicated in point 4, to University staff and to independent collaborators, professionals and consultants, who provide support activities for the realization and management of the event.

The University may also communicate the personal data acquired to other public administrations, if necessary for any proceedings falling within its institutional competence, as well as to all those public bodies to which, in the presence of the relevant conditions, the communication is required by EU provisions, laws or regulations.

As a rule, the data collected is not transferred to countries outside the European Union. In any case, the University verifies compliance with the security regulations for the protection of the privacy of the data subjects.

The determination of the period for which personal data will be stored is based on the principle of necessity for processing. Personal data are therefore stored for the entire period necessary to carry out the purposes set out in point 4.

The data subject has the following rights:

1. right of access to your personal data (art. 15 EU Regulation);
2. the right to rectification or integration of their data (Article 16 of the EU Regulation);
3. Right to erasure (right to be forgotten), pursuant to Art. 17 EU Regulation;
4. the right to restriction of processing under the conditions set out in Art. 18 EU Regulation;
5. right to data portability, as governed by art. 20 EU Regulation;
6. the right to object to the processing at any time (Article 21 of the EU Regulation);
7. the right to lodge a complaint with the Data Protection Authority.

To exercise his/her rights, the interested party may contact the Data Controller, by writing to the certified e-mail address amministrazione.centrale@pec.unipd.it or to the e-mail address urp@unipd.it. Alternatively, the interested party can write to: University of Padova, via VIII Febbraio n. 2, Padova.

The Data Controller is required to provide a response within one month of the request, extendable up to three months in the event of a particularly complex request.

Any changes and additions to this policy are published in the Privacy section of the corporate website www.unipd.it/privacy.