Information on the processing of personal data (Fundraising)

The Data Controller is the University of Padua, with registered campus in Via VIII Febbraio n. 2, 35122 - Padua.
To contact the Data Controller, write an email to the following certified email address: amministrazione.centrale@pec.unipd.it.

At the University there is the Data Protection Officer, appointed pursuant to art. 37 of EU Regulation 2016/679, who can be contacted at the following e-mail address: privacy@unipd.it.

The University provides for the processing of personal data provided by the interested party as a result of fundraising activities in favor of the University of Padua.

The personal data that may be processed exclusively for the purposes indicated in point 4 are:

1. personal data (name, surname, date of birth, gender), contact data (e-mail, telephone), residence;
2. economic and financial data, such as bank details, credit card and transactions;
3. Images. Photos and/or video footage of donors collected on the occasion of the subscription of significant donations and/or through the platform called "Donor Wall".

The processing of data is aimed exclusively at carrying out all activities connected or even only occasioned by fundraising in favor of the University of Padua. In particular, the processing is carried out for the following purposes:

1. fundraising;
2. management of operations relating to and consequent to donations;
3. management of master data through CRM databases;
4. dissemination of knowledge and awareness of interested parties on the institutional activities and specific purposes of the organization;
5. information on initiatives, activities and fundraising projects carried out by the University;
6. sending communications and information material reserved for supporters and donors, including potential donors, in paper and digital format;
7. request to join fundraising campaigns;
8. raising awareness on issues related to the specific activities of the University of Padua;
9. possible inclusion of the donor's name on the "Support Unipd" web page of the University website (referred to in link https://www.unipd.it/sostenitori) as well as on the University's social networks, newsletters and paper material promoting the University's institutional activities, subject to the explicit consent of the interested party;
10. publication on the institutional website, on the University's social networks, newsletters and on paper material promoting the University's institutional activities, subject to the explicit consent of the interested party, of images (photos and/or video footage) collected on the occasion of the subscription of important donations and/or through the platform called "Donor Wall"

The personal data of the data subject are processed with the support of computer and paper means.

The University adopts appropriate organisational and technical measures to protect the personal data in its possession, through appropriate security measures to ensure the confidentiality and security of personal data, in particular against the loss, theft, as well as the unauthorised use, disclosure or modification of personal data.

The Data Controller does not resort to automated decision-making processes relating to the rights of the data subject on the basis of personal data, including profiling, in compliance with the guarantees provided for by art. 22 of the EU Regulation.

The data are provided directly by the data subjects, both in person, through postal services and through IT and telephone tools, exclusively for the pursuit of all the purposes indicated in point 4.

The processing of personal data within the scope of the purposes indicated in point 4 is carried out by the Data Controller on the basis of the following conditions of lawfulness.

The legal basis of the processing for promotional and information activities aimed at finding resources instrumental to the execution of institutional teaching, research and so-called third mission tasks is the execution of a task of public interest pursuant to art. 6, par. 1, letter e), of the EU Regulation.

The legal basis for the processing of personal data, for the purposes referred to in letter b) of art. 4, is the execution of the contract to which the data subject is a party or of pre-contractual measures adopted at the request of the same pursuant to art. 6, par. 1, letter b), of the EU Regulation.

Exclusively for the purpose of disclosing the name of the donor and for the publication of images (point 4, letters i and j), the data processing takes place subject to the explicit consent of the data subject, pursuant to art. 6, par. 1, letter a), of the EU Regulation.

The provision of personal data for the purposes indicated in point 4, letters a) and b), is essential for the establishment and management of the relationship between the data subject and the University, as well as for the fulfilment of specific contractual, regulatory and tax obligations of the University.

The data subject may request the limitation of the processing of his or her personal data with reference to the other purposes indicated in point 4.

The recipients of the data are natural persons appointed by the University for the processing of data, including employees and collaborators, including independent ones, of the University of Padua and affiliated bodies.

Personal data, in any case, may be communicated to third parties in relation to the fulfilment of legal and contractual obligations, specific requests from the data subject, management of any complaints or disputes and for the prevention and repression of fraud and any illegal activity.

Personal data will not be subject to dissemination, unless expressly consented to by the interested party.

Data Processors

The recipients of the data are also the Data Processors appointed by the University, including :

1. companies responsible for the execution of electronic payment services;
2. CINECA, as the main provider of IT services and in particular as the supplier of the pago Atenei portal (with campus in via Magnanelli 6/3, 40033 Casalecchio di Reno (BO) - Privacy policy CINECA);
3. METADONORS S.R.L., as the main supplier of the "Donor Wall" platform and the "Donodoo" CRM database (with campus in via Sante Pisani 71, 59100 Prato (PO) - IT06519890484 – Metadonors Privacy policy);
4. Treasurer Institute pro-tempore of the University of Padua.

Third parties

Personal data, in any case, may be communicated to third parties in relation to the fulfilment of legal and contractual obligations, specific requests by the data subject, management of any complaints or disputes and for the prevention and repression of fraud and any illegal activity.

Personal data are not subject to dissemination, unless expressly consented to by the interested party.

Personal data are stored for the entire period necessary to carry out the purposes set out in point 4, in accordance with the provisions of current legislation and the University Regulations on the Waste Ceiling with regard to the student's file.

The data subject may exercise the rights provided for in Articles 15 et seq. of the EU Regulation, such as the right of access, the right to rectification or integration of their data, the right to erasure (right to be forgotten) and to restriction of processing and the right to data portability, under the conditions and within the limits indicated by the EU Regulation.

The request for erasure of personal data cannot be accepted to the extent that the processing is necessary for the fulfillment of a legal obligation, for the performance of institutional tasks, for the ascertainment, exercise or defense of a right in campus and in any other case provided for by art. 17, paragraph 3 of the EU Regulation.

The data subject has the right to object at any time to the processing of his or her personal data, in accordance with the provisions of art. 21 EU Regulation.

The data subject may lodge a complaint with the Guarantor for the protection of personal data.

To exercise their rights, the interested party can contact the University, by writing to the certified e-mail address amministrazione.centrale@pec.unipd.it or to the e-mail address urp@unipd.it. Alternatively, the interested party can write to: University of Padua, via VIII Febbraio n. 2, Padua.

The University is required to provide a response within one month of the request, extendable up to three months in the event of particular complexity of the request.

Changes and additions to this policy are published in the privacy section of the institutional website at www.unipd.it/privacy.

In any case, the University undertakes to communicate directly to the data subjects, through its institutional channels, any changes in the purposes of the processing, the identity of the data controller and any other changes that may significantly affect the rights of the data subjects or their exercise.