The Sant’Anna School of Advanced Studies guarantees that the personal data of users of the web services accessible via the www.santannapisa.it Portal are processed in compliance with legal requirements, as provided by Legislative Decree no. 196/2003, containing the ” Personal Data Protection Code”, and by Recommendation no. 2/2001 for personal data protection adopted by the European Authorities on May 17, 2001.

This privacy policy is exclusively for the University’s Portal and not for other externals websites that may be reached via links on the portal of the University.

Data processing purposes and methods

The collected data are used exclusively for the following purposes:

1. perform the services required by users;

2. provide user support;

3. perform statistical analyses, for the sole purpose of improving the supply of services.

Data processing methods

The data will be processed either manually or with the aid of computers, and, within the limits and conditions laid down in Article 11 of Legislative Decree no. 196/03, will include all the collection, recording, organization, storage, consulting, development, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data operations (Art. 4, paragraph 1, point a), Legislative Decree no. 196/03).

Data controller and manager

The data controller is the Sant’Anna School of Advanced Studies, with registered office in Pisa, Piazza Martiri della Libertà n. 33.

Data processing location

Data processing for portal services takes place mainly at the seats of Sant’Anna School of Advanced Studies.

Performed by identified staff expressly put in charge for the specific purposes of the services requested and subscribed to.

For the data processing in question, the Sant’Anna School of Advanced Studies may enlist the help of outside companies, consultants, associations, providers of software and services operating through identified and appointed personnel, for the intended purposes and in such a way as to ensure maximum data security and confidentiality.

Communication and dissemination of data

The collected data shall not be released to third parties, except where required and in the manner permitted by law.

The data may come to be known by processing Managers and Appointed Personnel, within their respective functions and in accordance with instructions, and only in order to achieve the specific purposes stated in this Privacy Policy.

Rights of the interested party

With regard to these data, users can exercise their rights under art. 7 of Legislative Decree no. 196/2003, within the limits and conditions laid out by articles 8, 9 and 10 of said Legislative Decree, by sending email to: urp@santannapisa.it

The interested party has the right to:

• know whether personal data concerning him or her exist or otherwise and know their source;
• be informed by the Data Controller on the purposes and methods of processing his or her data;
• have the Data Controller updates, corrects or integrates the data being processed;
• know the identity of the Data Processing Controller and Manager;
• object, in whole or in part, for legitimate reasons, to the processing of data concerning him or her;
• request that data processed in violation of the law be blocked.

In order to protect his or her rights, the interested party can act directly against the Data Controller, the Manager, or through the Staff in Charge of processing the data, calling for the restoration of violated rights. In case said parties fail to satisfy the request of the interested party, he or she can enforce his or her rights by applying to the Judicial Authorities or through recourse to the Guarantor.

Internet navigation data

The computer systems used to operate the www.santannapisa.it website acquire automatically some personal data, which are transmitted implicitly through the use of web communication protocols. If processed with data held by third parties, these automatically acquired data may identify the website visitor, as in the case of IP addresses and domain names of computers used when connecting to www.santannapisa.it . These data are usually collected for statistical surveys, managed anonymously and used to facilitate www.santannapisa.it website navigation. They could also be used to ascertain responsibility in case of computer crimes against the portal.

The Judicial Authority may ask the Sant’Anna School to communicate these data in accordance with law.

Data provided voluntarily by the user

Sending email to the addresses listed on this portal involves the subsequent acquisition of the sender’s email address, which is necessary in order to respond to requests, and any other personal data included in the mail. The data will be processed based on principles of fairness, legality, transparency and confidentiality protection as stated in Legislative Decree no. 196/03.

Users are advised not to enter into the body of the email sensitive and/or judicial data that are not strictly essential to the provision of services; any sensitive data, if necessary, will be processed in accordance with the principles and measures stated in the “Regulations for the protection of personal data of the Sant’Anna School of Advanced Studies”.

Personal data are not disclosed to third parties; if requested, they must however be made available to the Postal and Communications Police, the Judicial Authorities and the Judiciary Police.

Specific privacy policy conditions that may be provided on individual services of the www.santannapisa.it website should be considered as an integral part of this document; if such conditions do not exist, the content described in this Privacy Policy should be considered as exhaustive.