Information on the Use of Personal Information and Rights of the Applicant (EU Regulations 2016/679)

UNIVERSITA’ COMMERCIALE “LUIGI BOCCONI” (hereinafter referred to as “Bocconi University” or “University”), with its registered office in Via Sarfatti 25, Milano, Italy as Data Controller, hereby informs you, in compliance with European Regulation 2016/679 known as GDPR – General Data Protection Regulation, (hereinafter referred to as the “Law”), regarding use of the personal data (hereinafter referred to as the “Data”), collected with the application for the benefit assignment.

1. Information collected   

The personal data collected are communicated by the student at the time of registration or enrolment, such as name, surname, date and place of birth, gender, tax code, nationality, residence address, telephone and electronic contact information, as well as data collected with the application for benefit assignment, such as data relating to the personal, economic and financial situation of the student and the student’s family household. Some of the personal data fall within those defined by the Law as belonging to “special categories” (hereinafter also sensitive data), meaning information relating to the health of of the person concerned or his/her family members, information relating to racial or ethnic origin, etc.

2. Method and purpose of processing 

The aforementioned personal data are collected by Bocconi University through ISU Bocconi – the Student Assistance and Financial Aid Center/Fees, Funding and Housing Office and used, including with electronic instruments, for the sole purpose of providing the benefit requested and verifying the conditions for disbursement, in any case for the purposes of the law. In relation to the aforementioned purposes, the processing of data will also take place with the aid of electronic or automated means in  a manner pertinent and limited to what is necessary in relation to the purposes for which they are processed and, in any case, in such a way as to guarantee maximum security and confidentiality and always in full compliance with the regulations in force. With reference to sensitive data, processing will be carried out in a manner proportionate to the purpose pursued. 

3. Legal basis of processing 

The aforementioned personal data are processed following a request by the data subject and for legal purposes. They must necessarily be provided in order to ascertain the economic situation of the declarant's household, the requirements for access to the benefit and the determination of the same, according to the criteria set out in this notice. Failure to consent to the processing of data prevents participation in the call for applications. In relation to the purposes indicated in point 2, the processing of data may be carried out without the consent of all data subjects because it is necessary for the fulfilment of a legal obligation pursuant to art. 10 of Legislative Decree 68/2012, art. 71 of Presidential Decree 445/2000 and art. 11 of Prime Ministerial Decree 159/2013 and because it is necessary for the performance of a relevant task of carried out in the public interest by Università Bocconi pursuant to art. 34 paragraphs 3 and 4 of the Constitution, Prime Ministerial Decree 9 April 2001 and Legislative Decree 68/2012.  Pursuant to the legislation mentioned in this paragraph, the processing carried out on the sensitive data indicated when submitting the application for the allocation of benefits for university study rights must also be considered legitimate (Articles 6 and 9 of GDPR 679/2016).

4. Dissemination and communication of Data

The above personal data may be accessed by Staff of Bocconi University who require them for the performance of their duties or for the position held, as well as by other subjects who provide services to Bocconi University, to whom the University has specifically assigned the role of Data processor, in relation to the duties performed, have access to the Data. All this, always in relation to the purposes indicated above. Furthermore, the aforementioned data may be communicated to natural or legal persons who collaborate with the University for the purposes of providing benefits for the right to study, and may be communicated to public authorities including, by way of example: the Lombardy Region, the Ministry of Finance, the Inland Revenue Agency and the Guardia di Finanza for the purposes of the checks provided for. Data will be kept only for the time and purposes for which it was collected. 

5. Rights of the data subject

The data subject may request from the Data Controller the correction of data, and if applicable, the deletion, the restriction (and if, the processing is based on the relative consent, it is possible to revoke such consent, without compromising the legitimacy of the processing based on the consent given before its withdrawal), the objection to the processing of the data, furthermore, the data subject may request to receive the personal data in our possession and which have been provided to us, in a reasonable specified format, including the purpose of transmission to another data controller.

The aforementioned rights may be exercised by making a request to the ISU Bocconi – the Student Assistance and Financial Aid Center/Fees, Funding and Housing Office at the email address funding@unibocconi.it to the attention of the internal Data Processor. 

Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply. 

In order to guarantee the certainty of the results contained in the final ranking, any updates, corrections, additions you may request will affect the ranking only if carried out by the deadline for submitting applications for review against the provisional ranking for benefit assignment. 

The Data Controller for personal data is Università Commerciale Luigi Bocconi.

The internal Data Processor of the data provided is Mr. Paolo Cancelli, Director of the Students Outreach and Support Organizational Unit. 

The Data Controller has appointed as Data Protection Officer ("DPO") who may be contacted at the email address dpo@unibocconi.it for any questions regarding use of personal data and to exercise the rights set out in the Law.