Information on the Use of Personal Information and Rights of the Applicant (EU Regulations 2016/679

With
this document, UNIVERSITA’ COMMERCIALE “LUIGI BOCCONI” (hereinafter Bocconi
University or the University), with its registered office at Via Sarfatti 25,
Milano, as Data Controller, hereby informs you, in compliance with European
Regulation 2016/679 known as GDPR – General Data Protection Regulation,
(hereinafter the Law), regarding use of the personal data (hereinafter the
Data), collected when applying for benefit assignment.

1. The types of
information we collect   

The
personal data acquired are communicated by the student when registering or
enrolling, such as full name, date and place of birth, gender, tax code,
nationality, residence address, phone and electronic contact information, as
well as data acquired with the application for benefit assignment, such as data
related to vital data and the financial and asset situation of the student and
the student’s family household. Some personal data are included in what is
defined by the Law as belonging to “special categories” (hereinafter sensitive
data), meaning information relating to health of the interested party and
family members, information relating to ethnicity or race, etc.

2. Purpose and modality of
the Treatment 

The
personal data described above are collected by Bocconi University through ISU
Bocconi – the Student Assistance and Financial Aid Center/Fees, Funding and
Housing Office and used, including with electronic instruments, for the sole
purpose of allocating the benefit requested and verifying the conditions for
allocation, in any case for legal purposes. Regarding the aforementioned
purposes, the use of data will also take place with the use of electronic or
automated means in a way that is relevant and limited to what is required for
the purposes for which they are used and, in any case, in order to guarantee
the strictest security and confidentiality and always in full compliance with
current legislation. With regards to sensitive data, use will be carried out in
proportion to the purpose pursued.

3. The
legal basis for processing your information

The
personal data described above shall be used following a request by the
interested party and for legal purposes. They must, of necessity, be provided
to determine the financial status of the applicant’s immediate and nuclear
family and to determine whether they meet the requirements for accessing the
benefit and determining the same, according to the criteria set out in this
regulation. Failure to consent to use of data shall prevent participation in
the application.

For
the purposes indicated at paragraph 2., the data can be treated without the
consent of all interested parties, as necessary in compliance with a legal
obligation pursuant to article 10 of Italian D.lgs. 68/2012, article 71 of
Italian D.P.R. 445/2000 and article 11 of Italian DPCM 159/2013, as well as for
the performance of the University tasks carried out in the public interest as
an academic institution, in compliance with article 34, paragraphs 3 and 4 of
the Constitution, DPCM 9 April 2001 and Italian D.Lgs.
68/2012.

Sensitive data communicated through the application for benefit
assignment for the Right to University Education are treated in compliance with
the aforementioned law (articles 6 and 9 of the General Data Protection
Regulation n. 679/2016).

4. Circulation and
communication of Data

Data may be accessed by Staff of Bocconi University that have
the need in order to perform duties or given their position held, as well
as other entities providing services to Bocconi University, whom the
University has specifically nominated as responsible or qualified for the
processing of the Data of such subjects, in relation to their duties, shall have access to the pertinent
Data. All this, always in connection with the purposes pointed out previously. The data described
above may be communicated to natural persons or legal entities that collaborate
with the University for the purposes of allocating benefits for the Right to
University Education; to public authorities such as the Lombardy Region, the
Italian Ministry of Finance, the Italian Revenue Office and the Guardia di
Finanza for legitimate checks. Data will be kept strictly for the time and
scope for which they were collected.

5. Data Subject’s Rights

Data subjects have the following rights: to require the Data
Controller to correct the personal data 
held about them if it is incorrect; to require the Data Controller to
erase their personal data; to require the Data Controller to restrict its Data
processing activities (and, where its processing is based on the subject’s
consent, the Data subject may withdraw that consent, without affecting the
lawfulness of the Data Controller’s processing based on consent before its
withdrawal); to object to the data treatment; to receive from the Data
Controller the personal data  held about
the subject which the subject has provided, in a reasonable format specified by
the subject, including the purpose of the transmittal to another data
controller. The aforementioned rights may be exercised with a request sent to
ISU Bocconi – the Student Assistance and Financial Aid Center/Fees, Funding and
Housing Office at the email address funding@unibocconi.it to the
attention of the manager of data use.

Please note that the above rights are not absolute, and we may
be entitled to refuse requests where exceptions apply.

The Data Controller for personal data is Università
Commerciale Luigi Bocconi. 

The internal Data Processor of the data provided is Mr. Paolo
Cancelli, Director of the Students Organizational Unit.

The
Data Controller has appointed as Data Protection Officer ("DPO") may
be contacted at the email address dpo@unibocconi.it for any questions
regarding use of personal data and to exercise the rights set out in the Law