Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”)

According to Regulation (EU) 2016/679 (General Data Protection Regulation) we provide you with the due information concerning the processing of the collected personal data. This  information notice is provided pursuant to art. 13 of the Regulation (EU) 2016/679 (General Data Protection Regulation) for the processing of personal data provided during the events organized during the Master you are enrolled in.

1. SUBJECTS OF THE PROCESSING
DATA CONTROLLER, pursuant to art. 4 and 24 of the Regulation (EU) 2016/679, is Libera Università di Lingue e Comunicazione IULM, Via Carlo Bo, 1 - 20143 Milan, as represented by the pro tempore legal representative.
The University has appointed the Data Protection Officer (DPO,) pursuant to art.37-39 of the Reg. UE 2016/679, whose contact is: dpo.iulm@dpoprofessionalservice.it

2. CATEGORIES OF PROCESSED DATA
Personal data: any information concerning an identified natural person, with particular regard to an identifier such as the name, the identification number, location data, the online identifier or to one or more elements regarding its physical, physiological, genetic, mental, economic, cultural or social identity - art. 4, c. 1, n. 1 GDPR.
Processing means “any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction”.
Data Subject means “an identified or identifiable natural person”.
The processing will have as object your image taken, individually or in group, through photos and video recordings made during the event.

3.  PURPOSES AND LAWFULNESS OF THE PROCESSING
Your personal data shall be processed in accordance to the requirements for the lawfulness of processing set forth by Art.  6 lett. a)  of the Regulation (EU) 2016/679. With prior consent, your personal data will be disseminated for promotional activities of the Data Controller, through the dissemination of images on the institutional websites of IULM, social networks (es. Facebook) and other channels (e.g. brochures, flyers, etc..).

4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Personal data provided by you may be communicated to recipients, which shall process your data as data processor pursuant to article 28 of GDPR, data controller or persons acting under the authority of the Controller. Precisely, your data may be communicated to recipients part of the following categories:
- entities providing services for the management of the information system and communication networks (including e-mail and web);
- the staff of the data controller;
- entities providing services for film processing, photo printing (e.g. photographers, news agencies);
- competent Authorities for the fulfillment of obligations of law, if required;
The list of designated data Processors is constantly updated and available at the offices of Libera Università di Lingue e Comunicazione IULM, head office in Via Carlo Bo, 1 - 20143 Milano.

5. DATA RETENTION PERIOD OR RELEVANT CRITERIA
The processing shall be carried out in automated and / or manual manner, with methods and tools aimed at ensuring the best security and confidentiality, by persons specifically appointed to do so.
According to the provisions set forth in art. 5 par. 1 lett. e) of the Regulation EU 2016/679, collected personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed and anyway for e period not exceeding 5 years.

6. DATA TRANSFER TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANISATION
IULM will not transfer your data outside the European Union. Whenever the data controller transfer the data outside the EU, he will carry out the transfer within the limits and under the conditions set out in Articles 44 et seq. of EU Regulation 2016/679 and IULM will inform you in advance of such processing. Please note that by giving consent to the dissemination of the data, they will be published on social networking platforms (eg Facebook). 

7. NATURE OF DATA PROVISION AND REFUSAL
The provision of personal data for purpose set out in point 3, is free. The refusal to provide the personal data shall entail the impossibility to disseminate you data for promotional activities of the data controller. 

8. DATA SUBJECT’S RIGHT
You may exercise your rights pursuant to articles 15, 16, 17, 18, 19, 20, 21, 22 of the Regulation EU 2016/679, by contacting the data Controller by writing to privacy@iulm.it or the Data Protection Officer by writing to dpo.iulm@dpoprofessionalservice.it
You have the right, at any time, to request the data Controller to access, rectify, cancel your personal data or limit their processing. Furthermore, you have the right to object, at any time, to the processing of your data. Without prejudice to any other administrative and judicial appeal, if you believe that the processing of your data violates the provisions of Regulation EU 2016/679, pursuant to art. 15 letter f) of the aforementioned Regulation EU 2016/679, you have the right to lodge a complaint with the Data Protection Authority and, with reference to art. 6 paragraph 1, letter a) you have the right to withdraw the consent given at any time.

Updating date: 28th October 2019


I undersigned,