Privacy Policy

European General Data Protection Regulation (GDPR)

Cookie policy

Use of the training materials, or parts thereof, implies knowledge and acceptance of the following conditions by the user.

All course content viewable in the Reserved Area, transmitted by email or delivered in the classroom is the sole property of the lecturers and/or the University.

This material cannot be photocopied or reproduced and cannot be used for activities outside the course.

Without the written consent of the lecturers and/or the University, it is categorically forbidden to elaborate, alter, adapt, transform, translate and change the originals, content, titles, authors, editors and sources of the training materials, even partially, in any form, manner or format, by any means and in any medium.

Any use of the teaching materials, or parts thereof, primarily intended or directed towards the pursuit of a commercial or financial advantage, whether direct or indirect, or private monetary compensation, or for profit and/or commercial purposes is strictly prohibited.

It is permitted to have access to the teaching materials, or parts thereof, to view, consult, download and print them only for exclusively personal and private use, without any commercial purpose and/or profit motive.

Quotations, summaries, and in any case any permitted use, are allowed on condition that they are faithful, exact, without any changes to the originals of the training materials and training courses, and that they contain mention of the titles, authors, editors and source, as well as copyright and ownership information.

Any use other than the private and personal use indicated and permitted above requires the written authorisation of the lecturers and/or the University.

No liability is assumed by LIUC Carlo Cattaneo University in relation to the use of the training materials.

LIUC Carlo Cattaneo University will under no circumstances be liable for any kind of damage, direct or indirect, resulting from any use of the training materials and/or parts thereof.

Information on the processing of personal data of employees and those treated as such

Pursuant to current legislation, regarding the protection of personal data, with particular reference to Article 13 of Regulation (EU) 2016/679, I hereby inform you in my capacity as Data Processor, that your personal data, collected exclusively for the purpose of the establishment, completion and management of your employment by the University, will be processed in full compliance with legal duties and principles, guaranteeing the full protection of your fundamental rights and freedoms, with particular regard to the principles applicable to the processing of personal data as set out in Article 5 of the Regulation.

1. Origin and type of data processed

The processing of your personal data, directly provided by you, is carried out by us for the purpose of fulfilling the duties arising from: the legal provisions applicable to your employment contract; the negotiating provisions of your employment contract; the provisions of any national collective agreement which may be applicable to your contract. This processing includes:

a) the personal and tax data and bank account details for you and of any members of your household provided by you. Those data are processed in order to fulfil legal and/or contractual duties, such as, for example, the processing and payment of your salary, recognition of family allowances and the like;

b) data that relate to your employment relationship with the University, such as feedback and checks on the fulfilment of contractual duties, such as statistics on your presence and absence from work, data on the management and updating of your professional profile, the assignment of new tasks and assignments, professional and career development, also in the form of CVs, and performance evaluation;

c) data on any trade union membership and filling of trade union positions;

d) data on the holding of elected public offices, in order to enjoy the ex officio rights provided for by law;

e) the data needed to control the expenses of employees and those treated as such, such as financial planning; the preparation of budgets and their management; the control of cost items relating to employees and those treated as such; the management of travel expenses; the management of the costs of telephone services, cars, and office automation tools provided;

f) data relating to the use of work tools, collected and processed for reasons of computer system security, for technical and/or maintenance reasons, such as, for example, updating, replacement or implementation of programmes, hardware maintenance, back-up, for the control and planning of business costs, such as, for example, checking internet connection costs, telephone traffic, or for regulatory requirements;

g) images collected and processed, at the premises where you work, by means of video surveillance systems designed to ensure the protection and safety of company property and persons, with clear respect for your rights.

This also includes data that current legislation considers as ‘special’, i.e. sensitive data, pursuant to Article 9 of the GDPR. These include, for example, those disclosing state of health, maternity, accidents, incapacity. These will be processed as per Article 9, Paragraph 2, letters a) b) c) d) e) f) g) h) i) and j), as necessary.

2. Purpose of processing

Your personal data, whether requested or acquired prior to the establishment of your employment or during or at the end thereof, will be processed by us for the following purposes:

a) to manage your employment relationship in all its contractual, social security, insurance and tax aspects;

b) to fulfil any obligation imposed by law or arising from your employment contract or the provisions of national collective labour agreements;

c) to perform any other task entrusted by law to the person acting in their capacity as employer;

d) to fulfil or require the fulfilment of specific duties, also with reference to collective agreements, as applicable from time to time;

e) the administration and organisation of your employment and professional evaluation;

f) the qualification and further training of employees and those treated as such, and the organisation of training courses;

g) the management of career and academic development plans and processes as necessary;

h) to comply with orders or measures of the judicial authorities, the financial administration, social security and welfare institutions, including supplementary ones, and insurance institutions;

i) to assert or defend a right in court, including by a third party, provided that, where the data are likely to reveal your state of health, the right to be asserted is of equal to or more important than your right to privacy;

j) to respond to any request made by you in the context of your employment;

k) the management of the company’s IT resources and equipment assigned to you, even on an exclusive basis;

l) the protection of life and limb for you and any other person;

m) to implement all necessary security measures to prevent the risk of destruction, loss, dissemination, alteration, theft, undue access and any other unauthorised activity involving personal data.

3. Legal bases for processing

Your personal data are processed by the University for the purposes specified above for the sole object of executing your contract of employment and/or fulfilling the legal duties to which the Data Controller is subject.

On the other hand, with regard to your data of a sensitive nature, as referred to in the above Article 9 of the GDPR, they will be processed by the University solely for the purpose of fulfilling the duties and exercising the rights of the Data Controller and/or Employer, in the field of employment law and social security and social protection, as well as for the purposes of preventive or occupational medicine, assessment of your capacity to work or, finally, to enable the University to ascertain, exercise or defend a right in court.

Personal data relating to you, collected from third parties, may also be processed for the same purposes as above, to the extent permitted by applicable law and the GDPR.

In addition to this, the Data Controller may process your image, possibly taken by video surveillance systems, on the basis of and within the limits of the provision issued by the Italian Data Protection Authority on 8 April 2010, as amended, as well as agreements entered into with the competent trade unions or an authorisation issued by the competent ITL (Local Labour Inspectorate), where necessary.

LIUC Carlo Cattaneo University may arrange for the publication and/or dissemination in any form, of images/videos on its website, in printed media and/or any other means of dissemination and the preservation of the photos themselves in its archives, confirming that the purposes of such publications are purely advertising and promotion of the University.

4. Communication and dissemination

Your personal data may be disclosed to third parties in order to comply with duties laid down by law or by the collective labour agreement, which may be applicable, as well as in execution of any proxies conferred by you, such as, for example: crediting your salary at banks; paying a portion of your salary to insurance companies, and the like. In relation to these purposes, your personal data will be communicated, by way of example but not limited to, to social security bodies, financial administrations, insurance and credit institutions, trade union organisations that are signatories to the applicable national collective labour agreement and the competent company doctor.

The data may also be made available to third-party service providers, outsourcers and, more generally, external companies to which you entrust the performance of duties arising from your contract of employment or other activities relating to personnel management (for example, companies entrusted with the storage and archiving of the personal data of employees and those treated as such, payroll management, the development and/or operation of information systems, companies issuing meal vouchers, travel agencies in relation to trips made by you, car rental companies, auditing and audit companies, etc.). These bodies, organisations, companies and professionals will process your data as autonomous data controllers or data processors depending on the purpose and type of processing in question. This is without prejudice to the Data Controller’s obligation to communicate the data to the competent judicial or administrative authorities, following a specific and legitimate request from the latter.

At the time of issuance of this notice, your data will be communicated to and processed by:

a) Studio Engolli Aspesi Battistuz Colombo & Associati, Busto Arsizio; tax code CLMVTR69S12L319M; [email protected]; function: employment consultant

b) Studio Dr Fabio Bianchi, Busto Arsizio, tax code BNCFGS66C09B300I; [email protected]; function: employment consultant;

c) Sabicom S.r.l. – Legnano, VAT no. 12600040153; [email protected]; function: the supply and maintenance of online attendance and payroll software;

d) Sabicom Sistemi S.r.l. – Legnano, VAT no. 05378560964; [email protected]; function: the provision and maintenance of data centre service.

5. Transfer abroad

Your data may be transferred outside the European Economic Area if this is necessary for the management of your working relationship with the University. In that case, protection and security duties equivalent to those guaranteed by the Data Controller will be imposed on the recipients of the data. In any case, only data necessary for the pursuit of the intended and described purposes will be disclosed, and the guarantees applicable to data transfers to third countries will be applied where required.

6. Processing methods and retention times

Your data are collected and recorded lawfully and fairly, in accordance with the provisions of Articles 5 and 6 of the GDPR, for the pursuit of the above-mentioned purposes and in compliance with the fundamental principles laid down in the applicable legislation. Personal data may be processed by manual, computerised or telematic means, but always under the supervision of appropriate technical and organisational measures to guarantee their security and confidentiality, especially in order to reduce the risks of destruction or loss, even accidental, of the data, of unauthorised access, or of processing that is not permitted or does not comply with the purposes of collection.

Personal data will be processed by the University for the entire duration of your contract of employment and also thereafter, within the limits granted by law and by the rules of national collective labour agreements and any applicable regulations, for administrative and accounting purposes, as well as to assert or protect the rights of the Data Controller and/or the Employer, as necessary.

7. Nature of conferment and consent to processing

As indicated above, the provision of your data is mandatory, as it is necessary for the performance of duties arising from legal or contractual provisions, as provided for in Article 6, letters a) b) c) d) e) and f) of the GDPR.

This also applies in relation to your data of a sensitive nature, as referred to in Article 9 of the GDPR, given that any refusal to provide this specific type of data would prevent the Data Controller/Employer from performing certain essential services provided for your benefit, the ineffectiveness of which, in certain cases, could make it impossible to establish or continue your employment and lead to its termination. A similar provision applies to judicial data, which may be processed by the University on the basis of express provisions of the law, regulations or collective agreements that may be applicable to you.

8. Your Rights

You may exercise your rights at any time, including:

a) to access your personal data, obtaining evidence of the purposes pursued by the Data Controller, the categories of data involved, the recipients to whom the data may be communicated, the applicable retention period, the existence of automated decision-making processes;

b) to obtain without delay the rectification of inaccurate personal data concerning you;

c) to obtain, in the cases provided for, the deletion of your data;

d) to obtain restriction of processing, where possible;

e) to request the portability of the data provided to third parties specifically indicated by you, i.e. to receive them in a structured, commonly-used and machine-readable format, also for the purpose of transmitting such data to another data controller, without any hindrance, in all cases where this is required by law;

f) to lodge a complaint with the Data Protection Authority.

To exercise these rights, simply send a written request to the Data Processor at [email protected].

Address of the Data Controller: Carlo Cattaneo University – LIUC, Corso Matteotti 22, 21053 Castellanza (VA)

9. Data Controller

The data controller, pursuant to current legislation, is the Carlo Cattaneo University – LIUC.

10. Data Processor manager

The Managing Director, Dr Massimo Colli has been appointed Data Processor manager.

11. Data Protection Officer

Mauro Pelittias has been appointed Data Protection Officer and can be contacted by email at [email protected] .

The Data Processor manager,
Dr Massimo Colli

Information on the processing of personal data related to initiatives and events at LIUC Carlo Cattaneo University

Fundraising information

Data Controller

Data Protection Officer

What data are processed?

Purpose of processing and legal basis

Minors

Nature of provision

Data security and retention times

Scope of communication and dissemination

Rights of the data subject

Updates

1. Origin and type of data processed

2. Purpose of processing

3. Legal bases for processing

4. Communication and dissemination

5. Transfer abroad

6. Processing methods and retention times

7. Nature of conferment and consent to processing

8. Your Rights

Privacy Policy

Data Controller

Data Protection Officer

What data are processed?

Purpose of processing and legal basis

Minors

Nature of provision

Data security and retention times

Scope of communication and dissemination

Rights of the data subject

Updates

Data Controller and contacts

General information on cookies

Types of cookies

Cookie consent rules

Use of cookies on this website

Control and management of cookies on this website

Provision of data

Communication and transfer of personal data

Rights of data subjects

Changes to this policy

1. Origin and type of data processed

2. Purpose of processing

3. Legal bases for processing

4. Communication and dissemination

5. Transfer abroad

6. Processing methods and retention times

7. Nature of conferment and consent to processing

8. Your Rights