Privacy Policy
Data Controller
The Data Controller is the University of Gastronomic Sciences, located in Piazza Vittorio Emanuele, 9, Pollenzo – 12042 Bra – Italy
Applicable Standard
The processing of personal data related to the site applies to the European legislation, Reg. (EU) 2016/679, Italian, Legislative Decree 30 June 2003, n. 196 and subsequent amendments and additions, as well as the provisions of the Authority for the protection of personal data.
Rights of the concerned parties
At any time the interested party may: exercise his / her rights (access, rectification, cancellation, limitation, portability, opposition, absence of automatic decision-making processes) when foreseen towards the data controller, pursuant to the articles from 15 to 22 of the GDPR; to propose a claim to the Guarantor (www.garanteprivacy.it); and if the treatment is based on consent, to revoke the given consent, taking into account that the withdrawal of such consent does not affect the lawfulness of the treatment based on the given consent before the revocation.
Data Protection Officer
The requests must be addressed to the Data Protection Officer who is responsible for data protection, to the address privacy@unisg.it to the attention of the Engineer Mr. Massimiliano Bonsignori.
The disclosure of the information is a general obligation that must be fulfilled before or at the latest when initiating the direct collection of personal data. In case of personal data not being collected directly from the concerned party, the information must be provided within a reasonable time or at the time of communication (not of registration) of the data (to third parties or to the concerned party). Following are the information for the various categories of the concerned parties.
INFORMATION ON WEBSITE, NEWSLETTER AND TELEPHONE/WHATSAPP COMMUNICATIONS
This page describes how the site is managed in relation to the processing of personal data of users who consult and use it. The information concerns the methods, times and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the connection.
Place of data processing and assigned personnel
The processing connected to the web services of this site takes place at the suppliers of the internet services used to create and make the site available and at the offices of the Data Controller.
The data is processed only by appointed personnel, also for any maintenance and administration operations of the processing systems.
Types of data processed
Navigation and technically indispensable data.
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.
Data provided voluntarily by the user.
Data relating to identified or identifiable persons may also be processed on the basis of further information communicated by the interested party: for example, with the optional, explicit and voluntary sending of e-mail or telephone communications to the addresses indicated on this site, which implies the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the communication.
Particular types of data provided voluntarily by the user.
The Website supports the adjustment of some parameters to facilitate user navigation, for example (not exhaustive) by enabling or disabling some elements of the page to reduce colors or reflections, facilitate concentration in reading by preventing possible sources of distraction, or allow reading for blind users. The activation of these settings involves the processing of particular categories of personal data, on the basis of Article 9, paragraph 2, letter a), as information that may refer to the user’s state of health. For this reason, UNISG requires the granting of specific consent to the processing, granted or revoked with the activation of the setting and acceptance of the cookies that characterize them.
The user can freely choose to activate or deactivate the settings.
Cookies
Cookies are small text strings that the sites visited by the user send to his terminal (usually to the browser) where they are stored before being re-transmitted to the same sites at the next visit by the same user. Two macro-categories are identified: “technical” cookies and “profiling” cookies.
This site uses the so-called “technical” cookies for the sole purpose of “carrying out the transmission of a communication over an electronic network, or to the extent strictly necessary for the provider of a service explicitly requested by the user, in order to provide this service” (art. 122, paragraph 1 , of the Code): they can be divided into navigation or session cookies, which guarantee normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas) and/or analytics cookies, assimilated to technical cookies when used directly by the site manager to collect information, in aggregate form, on the number of users and how they visit the site itself and/or functionality cookies, which allow the user to navigate according to a series of selected criteria (for example, the language, the products selected for purchase) in order to improve the service provided.
The use of “technical” cookies (session variables whose values stored on the device’s hard disk can still be deleted: it is also possible to disable cookies by following the instructions provided by the main browsers) is strictly limited to the transmission of session identifiers ( consisting of random numbers generated by the server) and software usage data necessary to allow safe and efficient exploration of the site: session variables (so-called cookies) can avoid the use of IT techniques that are potentially detrimental to the confidentiality of users’ browsing users and do not allow the acquisition of personal identification data of the user.
This site does not in any way use so-called cookies. “profiling” (aimed at creating profiles relating to the user and used for the purpose of sending advertising messages in line with the preferences expressed by the user when browsing the internet).
Following the provision by the interested party, the website can keep track of the user’s interactions within the areas and sections that compose it. The Data Controller, through use of tools provided by third parties who have provided suitable technical and organizational measures to guarantee the freedom of the interested parties, such as for example the implementation of Do-No-Track mechanisms, can obtain feedback on the areas consulted by the users, and be able to have feedback on the structural effectiveness of the site and be able to undertake improvement actions.
This site uses so-called cookies. “third parties” aimed at receiving on your device, during navigation on a site, cookies sent from different sites or web servers (the information is stored by third parties): an example is represented by the presence of ” social plugins” for Facebook, Twitter, Google+ and Linkedin (these are parts of the visited page generated directly by the aforementioned sites and integrated into the page of the host site) whose use is aimed at sharing content on social networks (the presence of these ” plugin” involves the transmission of cookies to and from all sites managed by third parties: the management of information collected by “third parties” is governed by the relevant information to which please refer).
Complete list of third-party cookies used: Privacy Policy:
- com: www.addthis.com/privacy
- facebook: com: https://www.facebook.com/about/privacy
- com: www.google.it/intl/it/policies/privacy/
- com: https://www.linkedin.com/legal/cookie_policy
- com: https://twitter.com/privacy?lang=it
- com: www.google.it/intl/it/policies/privacy/
- com: https://tavoleaccademiche.unisg.it/
- com: https://unisg.esse3.pp.cineca.it/
Cookies that process particular categories of personal data
As anticipated in the privacy policy dedicated to the UNISG website, our web pages allow the user to enable particular settings to improve their browsing experience. Some of the settings have been specifically configured to assist users who may have seizures, low vision or blindness, or attention deficit.
Enabling cookies that allow the page to obtain a configuration suitable for what the user requests is equivalent to processing particular categories of personal data, as the choice of these settings is indicative of the state of health. The cookies that allow you to adjust these particular settings are the following, and are based on specific installation consent given by the user.
Provider / Domain Name Expiry Description
How can I disable cookies?
Most browsers (Internet Explorer, Firefox, etc.) are configured to accept cookies. However, most browsers allow you to control and even disable cookies through your browser settings. However, we remind you that disabling navigation or functional cookies may cause the site to malfunction and/or limit the service offered.
Personalized management table of cookies installed via the Site
Strictly necessary
Performance
Targeting
Functionality
Consent for cookie ID: d0cf04eb-d00d-4db7-83fb-55f9aec94b9b
Strictly necessary
| Name | Provider /Domain | Expiration | Description |
| x-pp-s | PayPal Holdings Inc.
.paypal.com |
Session | This cookie is provided by PayPal and supports payment services on the website. |
| tsrce | PayPal Holdings Inc.
.paypal.com |
3 days | PayPal Cookies: When you make a payment via PayPal these cookies are issued – PayPal session / security |
| S | .docs.google.com | 1 h | Ensures reCAPTCHA works |
| CookieScriptConsent | CookieScript
www.unisg.it |
6 months | This cookie is used by the Cookie-Script.com service to remember visitors’ cookie consent preferences. |
| wordpress_test_cookie | Automattic Inc.
www.unisg.it |
Session | Used on sites created with WordPress. Check whether or not your browser has cookies enabled |
| ASPSESSIONIDAUSDDQTQ | www.eventia2a.it | Session | This cookie name is generally associated with use as a generic platform session cookie, used by sites written with Microsoft ASP-based technologies. The cookie name structure is a common root – ASPSESSIONID, followed by a series of unique letters. It is usually used to maintain an anonymized user session from the server. |
| ASPSESSIONIDCWRDCQSQ | www.eventia2a.it | Session | This cookie name is generally associated with use as a generic platform session cookie, used by sites written with Microsoft ASP-based technologies. The cookie name structure is a common root – ASPSESSIONID, followed by a series of unique letters. It is usually used to maintain an anonymized user session from the server. |
| PHPSESSID | PHP.net
www.unisg.it |
Session | Cookie generated by applications based on the PHP language. This is a generic identifier used to maintain user session variables. It is normally a randomly generated number, how it is used can be specific to the site, but a good example is maintaining a logged in status for a user between pages. |
| l7_az | PayPal Holdings Inc.
.paypal.com |
30 minutes | This cookie is necessary for the PayPal login function on the website. |
| __cf_bm | Cloudflare Inc.
.vimeo.com |
30 minutes | This cookie is used to distinguish between humans and bots. This is beneficial for the website to make valid reports on the usage of its website. |
| COMPASS | .docs.google.com | 1 h | Ensures reCAPTCHA works |
Performance
| Name | Provider / Domain | Expiration | Description |
| _ga_HJ743TJPKH | .unisg.it | 1 year 1 month | This cookie is used by Google Analytics to maintain session state. |
| last_pysTrafficSource | www.unisg.it | 7 days | |
| last_pys_landing_page | www.unisg.it | 7 days | |
| pys_start_session | www.unisg.it | Session | |
| _ga | Google LLC
.unisg.it |
1 year 1 month | This cookie name is associated with Google Universal Analytics, which is a significant update to Google’s most commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a customer identifier. It is included in every page request on a site and used to calculate visitor, session and campaign data for site analytics reports. |
| pys_first_visit | www.unisg.it | 7 days | |
| pysTrafficSource | www.unisg.it | 7 days | |
| pys_landing_page | www.unisg.it | 7 days | |
| _hjSessionUser_3864544 | .unisg.it | 1 year | |
| _hjSession_3864544 | .unisg.it | 30 minutes | |
| pys_session_limit | www.unisg.it | 1 h | |
| _ga | Google LLC
.eventia2a.it |
1 year 1 month | This cookie name is associated with Google Universal Analytics, which is a significant update to Google’s most commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a customer identifier. It is included in every page request on a site and used to calculate visitor, session and campaign data for site analytics reports. |
| _ga_YN03F8P99D | .eventia2a.it | 1 year 1 month | This cookie is used by Google Analytics to maintain session state. |
Targeting
| Name | Provider / Domain | Expriation | Description |
| _gcl_au | Google LLC
.unisg.it |
3 months | This cookie is set by Doubleclick and provides information about how the end user uses the website and any advertising the end user may have seen before visiting the website. |
| test_cookie | Google LLC
.doubleclick.net |
15 minutes | This cookie is set by DoubleClick (which is owned by Google) to determine whether a website visitor’s browser supports cookies. |
| ts | PayPal Holdings Inc.
.paypal.com |
1 year 1 month | This cookie is generally provided by PayPal and supports payment services on the website. |
| pbid | www.unisg.it | 6 months | |
| NID | Google LLC
.google.com |
6 months 3 days | This cookie is set by DoubleClick (which is owned by Google) to help build a profile of your interests and show you relevant adverts on other sites. |
| IDE | Google LLC
.doubleclick.net |
1 year | This cookie is set by Doubleclick and provides information about how the end user uses the website and any advertising the end user may have seen before visiting the website. |
| _gcl_aw | .unisg.it | 3 months | |
| _fbp | Meta Platform Inc.
.unisg.it |
3 months | Used by Facebook to provide a variety of advertising products such as real-time bidding from third-party advertisers |
| GCL_AW_P | .googleadservices.com | 3 months |
Functionality
| Name | Provider / Domain | Expiration | Description |
| vuid | Vimeo.com Inc.
.vimeo.com |
1 year 1 month | These cookies are used by the Vimeo video player on websites. |
| _cfuvid | .vimeo.com | Session | |
| nsid | www.paypal.com | Session | |
| LANG | .paypal.com | 8 h 46 minutes | There are many different types of cookies associated with this name and it is generally recommended to take a more detailed look at how it is used on a particular website. However, in most cases it will likely be used to store language preferences, potentially to deliver content in the stored language. |
| ts_c | PayPal Holdings Inc.
.paypal.com |
1 year 1 month | To provide fraud prevention. |
Purpose of data processing, communication and dissemination
The personal data collected are used for the sole purpose of carrying out the services or services requested and are communicated to third parties only if this is necessary for this purpose. The services include: consultation and mere use of the site and its contents; access to the reserved area; reports; contact request; etc.
In any case, no data deriving from web services is disseminated or published without the prior consent of the interested party.
Finally, please note that in some cases (not subject to ordinary management) the Public Authorities may request news and information, including of a personal nature, which the Data Controller is required to follow up on.
Optional provision of data
Apart from what is specified for navigation and technically indispensable data, the user is free to provide personal data for specific requests on products and/or services. Failure to provide certain data, deemed essential, may make it impossible to obtain what is requested.
Legal basis. Possible management of consent to processing
When necessary, outside of cases in which the legitimate interest of both the owner and third parties is applied, and in any case after reading the information, the interested party is asked to express his/her consent to the processing and communication of his/her data for the purposes and within the limits described, under penalty of the impossibility for the Data Controller to process the data to carry out and implement the services requested by the interested party or proposed to him.
Treatment methods
The processing of personal data, understood as collection, recording, organisation, conservation, processing, modification, cancellation and destruction or the combination of two or more of these operations, takes place using manual, IT and telematic tools, also in an automated manner, with logic strictly related to the declared purposes and, in any case, in such a way as to guarantee security and confidentiality and for the time strictly necessary to achieve the purposes for which they were collected.
The data are processed lawfully and correctly, collected and recorded for specific, explicit and legitimate purposes, accurate, and if necessary updated, relevant, complete and not excessive with respect to the purposes of the processing, in compliance with the minimum security standards and fundamental rights and freedoms, as well as the dignity of the interested party with particular reference to confidentiality and personal identity.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
The data will be kept until the end of the legal period to defend oneself or assert a right in court, after the purpose (purpose of the processing) for which the data was collected has been exhausted.
Your personal data will not be transferred to a recipient in a third country or to an international organization outside the European Union (EU) or the European Economic Area (EEA).
Data Controller
The data controller is the University of Gastronomic Sciences, which is based in Piazza Vittorio Emanuele, 9, Pollenzo – 12042 Bra – Italy.
Applicable standard
European legislation, Reg. (EU) 2016/679, and Italian legislation, Legislative Decree 30 June 2003, n., apply to the processing of personal data relating to the site. 196 and subsequent amendments and additions, as well as the provisions of the Guarantor Authority for the protection of personal data.
Rights of interested parties
At any time the interested party may: exercise his rights (access, rectification, cancellation, limitation, portability, opposition, absence of automated decision-making processes) when provided for in relation to the data controller, pursuant to articles. from 15 to 22 of the GDPR; lodge a complaint with the Guarantor (www.garanteprivacy.it); and if the processing is based on consent, revoke this consent given, taking into account that the revocation of consent does not affect the lawfulness of the processing based on consent before the revocation.
Data Protection Officer
Requests should be addressed to the Data Protection Officer, responsible for data protection, via the address privacy@unisg.it to the attention of Eng. Massimiliano Bonsignori.
Contact forms, newsletters and communications via smartphone
The e-mail and telephone contacts used to send communications from the site and from Customer Relationship Management) come from voluntary registrations by the recipient who is always subjected to a confirmation request, as well as from information acquired in a context of sales of products or services of the Owner or otherwise similar. This includes the sending of information, promotional communications and further material. The user has the right to choose whether to receive communications also via the Whatsapp messaging app, for which the user is invited to consult the specific information available at the following address https://www.whatsapp.com/legal/:
It is underlined that contacts are not acquired from public subscriber lists. In the event that the communications are not of interest to the recipient, it is possible to avoid any further contact by clicking on the appropriate link contained in each message, or by writing to the contact details at the bottom exercising your right to cancellation from the lists dedicated to sending these communications.
Student registration information
Pursuant to and in compliance with Regulation (EU) 2016/679 (GDPR) and Legislative Decree No. 196/03 and subsequent amendments (Code regarding the protection of personal data), the “University of Gastronomic Sciences” (UNISG), with registered office at Piazza Vittorio Emanuele 9, Pollenzo — 12042 Bra (CN), as Data Controller, is required to provide certain information regarding the use of such data.
TYPES AND SOURCES OF PERSONAL DATA
Upon your enrollment at UNISG, the following personal data will be processed:
- Personal and contact details, including emergency contact information
- Data concerning your citizenship and geographical origin
- Academic qualifications obtained, grades, and types of courses you wish to enroll in
- Languages spoken
- Information regarding any disabilities and need for assistive devices
- Information regarding any food allergies and/or intolerances and/or dietary habits linked to religious or philosophical precepts, as well as allergies resulting from insect stings
- Financial data concerning your bank details and any income certifications or scholarship requests
- Data concerning your image (photographs and videos) captured during lectures, courses, seminars, and/or subsequent activities, including data related to test/exam results and event participation
- Data concerning your academic progress and career, such as grades, examinations, participation in events promoted by the University and academic partners, as well as lectures, courses, seminars, information on test/exam results, and further personal data related to scholarship requests held by the University
- Data concerning your participation in study trips, and any reimbursement requests for meal expenses and mandatory vaccinations
Additionally, the University may process your personal data and information related to your academic path during and after the conclusion of your career at UNISG. Information regarding your professional experiences may also be processed within the job placement service.
Personal data and special categories of personal data are collected directly from the data subject and freely provided by them.
UNISG may also receive personal data and attributable information from third parties, such as the Friends of the University of Gastronomic Sciences Association and Slow Food, which process data of individuals involved in carrying out certain University activities.
For enrollment purposes at UNISG, the provision of personal data is partially mandatory as required by legislation on education and workplace safety. Where not strictly required, the provision of data is optional; however, failure to provide such data may result in the impossibility of establishing and fulfilling the relationship with the University. Consequently, your application as a student may not be considered.
PURPOSES OF DATA PROCESSING
Personal data is processed within the scope of the University’s ordinary educational, organizational, operational, administrative, and selection activities, based on the legal grounds outlined in Articles 6 and 9 of the GDPR, for the following purposes:
- Purposes strictly related to the provision of educational and auxiliary services, including selection procedures, enrollment, informing relevant course coordinators, operations pertaining to educational activities, enabling students to use University services (including job placement via the Career Office), post-graduate training, and courses issuing legally recognized qualifications or amateur/professional/corporate courses without such qualifications.
- Purposes strictly connected to managing student relationships (e.g., pre-acceptance assessments, operations under contracts with entities providing student services, employment surveys, interviews about University experiences).
- Purposes related to study trips, including reimbursement requests for meal expenses and, where mandatory under destination countries’ laws, proof of mandatory vaccinations/vaccination reimbursement (see Travel Regulations).
- Purposes connected to legal obligations or requirements from authorized authorities.
- Purposes related to institutional activities, including data communication to public bodies (e.g., Ministry of Education, Regional Body for University Study Rights) managing research grants/scholarships or promoting studies/research.
- Functional purposes for University activities (e.g., educational/dissemination materials, brochures, website, posters, publications, audio/photo/video from academic activities), where consent may be required (e.g., promotion/sale of products/services, satisfaction surveys).
- Functional purposes for the Friends Association and Slow Food based on legitimate interest (e.g., sharing food culture initiatives), subject to consent.
- Promotional purposes for the University/students/alumni via books, CVs, images, CDs, websites, etc., subject to consent.
- Purposes related to photo/video services on University premises/external venues for promotional/informational purposes.
- Purposes related to enforcing University rights in disciplinary/judicial settings (e.g., unpaid fees, plagiarism, exam irregularities, property damage).
- Anonymized data may be used for statistical reports.
Information for Students
Pursuant to and in compliance with Regulation (EU) 2016/679 (GDPR) and Legislative Decree No. 196/03 and subsequent amendments (Code regarding the protection of personal data), the “University of Gastronomic Sciences” (UNISG), with registered office at Piazza Vittorio Emanuele 9, Pollenzo — 12042 Bra (CN), as Data Controller, is required to provide certain information regarding the use of such data.
TYPES AND SOURCES OF PERSONAL DATA
Upon your enrollment at UNISG, the following personal data will be processed:
- Personal and contact details, including emergency contact information
- Data concerning your citizenship and geographical origin
- Academic qualifications obtained, grades, and types of courses you wish to enroll in
- Languages spoken
- Information regarding any disabilities and need for assistive devices
- Information regarding any food allergies and/or intolerances and/or dietary habits linked to religious or philosophical precepts, as well as allergies resulting from insect stings
- Financial data concerning your bank details and any income certifications or scholarship requests
- Data concerning your image (photographs and videos) captured during lectures, courses, seminars, and/or subsequent activities, including data related to test/exam results and event participation
- Data concerning your academic progress and career, such as grades, examinations, participation in events promoted by the University and academic partners, as well as lectures, courses, seminars, information on test/exam results, and further personal data related to scholarship requests held by the University
- Data concerning your participation in study trips, and any reimbursement requests for meal expenses and mandatory vaccinations
Additionally, the University may process your personal data and information related to your academic path during and after the conclusion of your career at UNISG. Information regarding your professional experiences may also be processed within the job placement service.
Personal data and special categories of personal data are collected directly from the data subject and freely provided by them.
UNISG may also receive personal data and attributable information from third parties, such as the Friends of the University of Gastronomic Sciences Association and Slow Food, which process data of individuals involved in carrying out certain University activities.
For enrollment purposes at UNISG, the provision of personal data is partially mandatory as required by legislation on education and workplace safety. Where not strictly required, the provision of data is optional; however, failure to provide such data may result in the impossibility of establishing and fulfilling the relationship with the University. Consequently, your application as a student may not be considered.
PURPOSES OF DATA PROCESSING
Personal data is processed within the scope of the University’s ordinary educational, organizational, operational, administrative, and selection activities, based on the legal grounds outlined in Articles 6 and 9 of the GDPR, for the following purposes:
- Purposes strictly related to the provision of educational and auxiliary services, including selection procedures, enrollment, informing relevant course coordinators, operations pertaining to educational activities, enabling students to use University services (including job placement via the Career Office), post-graduate training, and courses issuing legally recognized qualifications or amateur/professional/corporate courses without such qualifications.
- Purposes strictly connected to managing student relationships (e.g., pre-acceptance assessments, operations under contracts with entities providing student services, employment surveys, interviews about University experiences).
- Purposes related to study trips, including reimbursement requests for meal expenses and, where mandatory under destination countries’ laws, proof of mandatory vaccinations/vaccination reimbursement (see Travel Regulations).
- Purposes connected to legal obligations or requirements from authorized authorities.
- Purposes related to institutional activities, including data communication to public bodies (e.g., Ministry of Education, Regional Body for University Study Rights) managing research grants/scholarships or promoting studies/research.
- Functional purposes for University activities (e.g., educational/dissemination materials, brochures, website, posters, publications, audio/photo/video from academic activities), where consent may be required (e.g., promotion/sale of products/services, satisfaction surveys).
- Functional purposes for the Friends Association and Slow Food based on legitimate interest (e.g., sharing food culture initiatives), subject to consent.
- Promotional purposes for the University/students/alumni via books, CVs, images, CDs, websites, etc., subject to consent.
- Purposes related to photo/video services on University premises/external venues for promotional/informational purposes.
- Purposes related to enforcing University rights in disciplinary/judicial settings (e.g., unpaid fees, plagiarism, exam irregularities, property damage).
- Anonymized data may be used for statistical reports.
GUARANTEES FOR SENSITIVE AND SPECIAL CATEGORIES OF PERSONAL DATA
Sensitive data will be processed exclusively for institutional functions indispensable to fulfilling legal obligations or tasks within institutional aims. Processing methods ensure protection of the data subject’s rights, fundamental freedoms, and dignity.
DATA PROCESSING METHODS
Data processing includes collection, recording, organization, storage, elaboration, modification, deletion, destruction, or combination thereof. Processing occurs via manual, IT, and telematic tools, with logic strictly tied to the stated purposes, ensuring security and confidentiality. Data will be processed lawfully, fairly, and stored accurately/updated where necessary, with adequate security measures.
TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS OUTSIDE THE EU/EEA
By default, personal data will not be transferred outside the EU/EEA, except in specific cases (e.g., study trips). Where transfers occur, the Controller ensures adequate safeguards under GDPR Article 46 (e.g., standard contractual clauses) absent an EU adequacy decision. During individual trips, additional consent may be sought for strictly necessary data, per Travel Regulations.
RETENTION PERIOD
Data will be stored in identifiable form no longer than necessary for processing purposes or statutory limitation periods for legal claims/defenses.
CATEGORIES OF RECIPIENTS
(Limited to Data Strictly Necessary for the Purposes)
- External bodies overseeing university activities
- Employees, consultants, and offices of the Controller
- External parties for pre/post-graduate internships, other universities for transfers/study abroad
- External parties organizing study trips (e.g., accommodations, transport companies)
- External parties performing tasks on the University’s behalf (updated list available at the Student Secretariat)
- Banks for payment management
- Founding entities (e.g., Slow Food, Friends Association)
- University sponsors/collaborators
- External parties upon student’s explicit written request for specific purposes
- Entities as required by law
Non-sensitive personal data, videos, and photos may be disseminated via the University’s web portal or other communication channels.
DATA SUBJECT RIGHTS
At any time, data subjects may:
- Exercise rights (access, rectification, erasure, restriction, portability, objection, no automated decision-making) under GDPR Articles 15–22 (link: EUR-Lex).
- Lodge complaints with the Italian Data Protection Authority (Garante: garanteprivacy.it).
- Withdraw consent (where applicable), without affecting pre-withdrawal lawfulness.
Note: Due to the nature of the relationship and the University’s status as a public body, students cannot request data erasure but may exercise the right to data updating. For photo/video services, measures ensure the right to avoid being filmed where feasible.
Rights may be exercised via email: privacy@unisg.it.
DATA PROTECTION OFFICER (DPO)
UNISG appointed Spaziottantotto s.r.l., represented by Eng. Massimiliano Bonsignori, as DPO. Contact: dpo@unisg.it.
AUTHORIZATION FOR DATA PROCESSING
As a non-economic public body, the University does not require consent for processing strictly indispensable to its institutional role under public regulations (laws, decrees) and contractual/pre-contractual agreements via enrollment.
For optional processing, consent will be requested case-by-case, or processing will occur under legitimate interest (with right to object).
Sensitive data will be processed exclusively for institutional functions indispensable to fulfilling legal obligations or tasks within institutional aims. Processing methods ensure protection of the data subject’s rights, fundamental freedoms, and dignity.
DATA PROCESSING METHODS
Data processing includes collection, recording, organization, storage, elaboration, modification, deletion, destruction, or combination thereof. Processing occurs via manual, IT, and telematic tools, with logic strictly tied to the stated purposes, ensuring security and confidentiality. Data will be processed lawfully, fairly, and stored accurately/updated where necessary, with adequate security measures.
TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS OUTSIDE THE EU/EEA
By default, personal data will not be transferred outside the EU/EEA, except in specific cases (e.g., study trips). Where transfers occur, the Controller ensures adequate safeguards under GDPR Article 46 (e.g., standard contractual clauses) absent an EU adequacy decision. During individual trips, additional consent may be sought for strictly necessary data, per Travel Regulations.
RETENTION PERIOD
Data will be stored in identifiable form no longer than necessary for processing purposes or statutory limitation periods for legal claims/defenses.
CATEGORIES OF RECIPIENTS
(Limited to Data Strictly Necessary for the Purposes)
- External bodies overseeing university activities
- Employees, consultants, and offices of the Controller
- External parties for pre/post-graduate internships, other universities for transfers/study abroad
- External parties organizing study trips (e.g., accommodations, transport companies)
- External parties performing tasks on the University’s behalf (updated list available at the Student Secretariat)
- Banks for payment management
- Founding entities (e.g., Slow Food, Friends Association)
- University sponsors/collaborators
- External parties upon student’s explicit written request for specific purposes
- Entities as required by law
Non-sensitive personal data, videos, and photos may be disseminated via the University’s web portal or other communication channels.
DATA SUBJECT RIGHTS
At any time, data subjects may:
- Exercise rights (access, rectification, erasure, restriction, portability, objection, no automated decision-making) under GDPR Articles 15–22 (link: EUR-Lex).
- Lodge complaints with the Italian Data Protection Authority (Garante: garanteprivacy.it).
- Withdraw consent (where applicable), without affecting pre-withdrawal lawfulness.
Note: Due to the nature of the relationship and the University’s status as a public body, students cannot request data erasure but may exercise the right to data updating. For photo/video services, measures ensure the right to avoid being filmed where feasible.
Rights may be exercised via email: privacy@unisg.it.
DATA PROTECTION OFFICER (DPO)
UNISG appointed Spaziottantotto s.r.l., represented by Eng. Massimiliano Bonsignori, as DPO. Contact: dpo@unisg.it.
AUTHORIZATION FOR DATA PROCESSING
As a non-economic public body, the University does not require consent for processing strictly indispensable to its institutional role under public regulations (laws, decrees) and contractual/pre-contractual agreements via enrollment.
For optional processing, consent will be requested case-by-case, or processing will occur under legitimate interest (with right to object).
Electronic attendance registers information – Attendances
This information supplements the general information, in accordance with Reg. (EU) 2016/679 (GDPR) and Italian Legislative Decree 30 June 2003, no. 196 (Personal Data Protection Code, hereinafter referred to as “Code”) and subsequent amendments and additions.
It relates to the personal data collected through the “Presences” procedure, based on a web app, which allows students and university lecturers to transmit and collect data about classroom attendance and/or participation in initiatives organized by the University through computer support and online connections throughout the duration of their studies, managed by the University. We would like to inform you of the following:
- The processing of your personal data, collected from you exclusively through electronic devices such as smartphones, tablets, PCs and their connection to the Internet, is carried out by those in charge of and responsible for the processing of the data through electronic or automated means. It is used (a) to determine the attendance rate of courses and participation in examinations according to the conditions set by the lecturer responsible for the “attending students”; (b) the data may also be used for the purpose of performing checks and monitoring students. Should these checks show that any of the data are false; the University may initiate disciplinary action.
- Personal data collected will not be transferred or shared to a recipient in a third country or to an international organization outside the European Union (EU) or the European Economic Area (EEA)
- The data collected will be kept until the end of the legal prescription to defend oneself or to make use of a right in the judicial court, after the purpose (treatment purpose) for which the data had been collected.
- Personal data may be communicated to those responsible for processing, both internal and external to the organization, who carry out specific tasks and operations as permitted by law. Personal information that is individually reported will not be disclosed.
- See also the specific Cookie Policy for the application.
- The provision of personal data is optional, but it is essential to access the services referred to in paragraph 1, point (a). Indeed, refusal to provide the data may result in limited access to the exams as an “attending student.” Regardless, the data transmitted through the online procedure must be accurate and real; otherwise, the student may face the disciplinary action cited in paragraph 1, point (b).
- Consenting to the processing of the provided data is not necessary as the “Presences” procedure was approved on 30/05/2017 and as a contractual obligation is the only admissible method for attendance registration.
- At any time the interested party may: exercise his / her rights (access, rectification, cancellation, limitation, portability, opposition, absence of automated decision-making processes) when intimated towards the data controller, pursuant to article 15 to 22 of the GDPR; to propose a claim to the Guarantor (www.garanteprivacy.it). And if the treatment is based on consent, he or she can revoke the consent given, taking into account that the withdrawal of such consent does not affect the lawfulness and legitimacy of the treatment based on consent before revocation.
- The owner of the processed data is the University of Gastronomic Sciences (unisg.it), Piazza Vittorio Emanuele II, 9, Pollenzo,12042 Bra (Cn), Italy.
- The Manager of the collected data is the Administrative Director.
- The requests must be addressed to the Data Protection Officer, responsible for data protection, to the address privacy@unisg.it to the attention of the Engineer. Massimiliano Bonsignori.
“Presences” Cookie Policy
WHAT ARE COOKIES?
Cookies are small strings of text that a website can send to your device while browsing (whether you are using a PC, notebook, smartphone or tablet, they are generally stored directly on the browser). The same website that transmitted them can then read and record cookies found on the same device to gather different types of information.
COOKIE ORIGIN
By visiting a website, you may receive cookies either from the visited site (“proprietary” or “own” cookies), or from sites managed by other organizations (“third party cookies”) that have plugins, widgets and specific embedded features on the website/application pages you are browsing.
The presence of these plugins involves the transmission of cookies to and from all sites managed by third parties.
TYPE OF COOKIES
Technical cookies
Navigation, functionality and session cookies are strictly used to ensure the proper functioning of a site.
Analytics cookies gather aggregated information about the number of users, as well as how often they visit the site. Their goal is the continuous improvement of the functionality, content organization and support of different platforms and browsers.
Cookie widgets. This category includes all the graphic components whose purpose is to facilitate the user’s interaction with the system. For example, Google Maps, Sharethis, etc. are widget cookies. More information regarding individual privacy policies can be found directly on the websites themselves.
Profile cookies
These are permanent cookies used to identify (whether anonymously or not) the user’s preferences and enhance their navigation experience.
THE “PRESENCES” PROCEDURE
The “Presences” procedure is based on a web application (wedo.unisg.it) that uses only proprietary and third party cookies. There are neither profile cookies nor third party profile cookies on the site.
The management of information collected by “third parties” is governed by the relevant information to which reference is made. To ensure greater transparency and convenience, listed below are the web addresses of the sites that provide information with regard to managing cookies (see the “GOOGLE ANALYTICS COOKIES” section below).
It is not necessary to consent to the processing of technical data regarding cookies. However, you can change your browser options to disable cookies according to the procedures detailed by each browser (see the next paragraph on “HOW DO I DISABLE COOKIES?”). Keep in mind, however, that disabling cookies can also disable some of the features on the application.
Interested users may exercise their rights under Article 7 of the Privacy Code (see the general Privacy Policy) by contacting the person responsible for data processing indicated below.
The owner of the collected data is the University of Gastronomic Sciences (www.unisg.it), Piazza Vittorio Emanuele II, 9, Pollenzo,12042 Bra (Cn), Italy.
The Manager of the collected data is the Administrative Director.
GOOGLE ANALYTICS COOKIES
Google Analytics is a web analytics service provided by Google, Inc. (“Google”), which uses “cookies” through which it collects user information that is transmitted to and deposited in Google servers in the United States.
The service has been configured so that the user’s IP address cannot be traced.
Google uses this information to track and review your site usage, compile site activity reports for website operators, and provide other services related to website activities and Internet usage. Google does not associate the user’s IP address with any other data held by Google. Any refusal to use cookies by selecting the appropriate setting on your browser may prevent you from using all the features of this website.
Google Analytics cookies can also be disabled by following the procedure outlined by Google:
https://tools.google.com/dlpage/gaoptout?hl=it
HOW CAN I DISABLE COOKIES?
You can change your browser to disable cookies by following some very simple steps.
To delete cookies from your smartphone/tablet browser, refer to the device’s operating manual.
Warning: Turning off cookies can disable some features of the website.
Safari:
- Open Safari.
- Choose “Preferences” in the toolbar, then select the “Security” panel in the dialog box that follows.
- In the “Accept cookies” section, you can specify whether and when Safari should save cookies from websites. For more information, click the Help button (marked with a question mark).
- For more information about cookies that are stored on your computer, click on “Show cookies.”
Firefox:
- Open Firefox
- Press the “Alt” button on the keyboard.
- In the toolbar at the top of your browser, select “Tools” and then “Options”.
- Then select the “Privacy” tab.
- Go to “History settings” and then “Use custom settings”. Uncheck “Accept cookies from sites” and save your preferences.
Internet Explorer:
- Open Internet Explorer
- Click on the “Tools” button and then on “Internet Options”
- Select the “Privacy” tab and move the slider up or down according to the privacy level you want to set (move it up to lock all cookies, or down to allow them all).
- When you are done, click “OK.”
Google Chrome:
- Open Google Chrome
- Click on the “Tools” icon
- Select “Settings” and then “Advanced Settings”
- Select “Content Settings” under “Privacy”
- By clicking on the “Cookies” tab, you can clear cookies and save your preferences.