ECAMPUS

INFORMATION REGARDING THE PROTECTION OF PERSONAL DATA

Identity and contact information of the Data Controller. The Data Controller is eCampus University (hereinafter referred to as the Controller) headquartered in via Isimbardi n. 10, 22060 Novedrate (CO), Italy, VAT N./Tax ID N.90027520130 privacy@uniecampus.it.

a. Contact information for the Data Protection Officer (DPO). The Data Protection Officer can be contacted at the following address: dpo@uniecampus.it.

b. Purpose of Data Processing.

Personal data is collected and used for the following purposes.

b.1. Management of portal registrations, enrolment, and course registration to provide information regarding academic courses. For administrative purposes related to the provision of academic services, including exams, grades, and other related activities. To send institutional communications to students, including notices, updates, and information regarding the university’s academic and administrative activities. For research activities and to monitor and evaluate student participation in such activities. To provide access to library services and online resources necessary for study and research. To offer student support services, including academic assistance and counselling, as well as for activities related to internships. To collect feedback from students in order to develop and improve services offered by the university and to conduct market research. To comply with legal or regulatory obligations, including those provided for in the academic regulations. For participation in classes provided via online systems that involve the processing of multimedia recordings (photos, audio, and video) of the participant, including for research and scientific dissemination purposes.

b.2. To provide information and send promotional materials regarding educational products and services deemed related to those covered by the enrolment, registration, or request for information, and considered to be of interest to the recipient, including through automated and conventional means, email, and related web applications, based on the recipient’s express consent.

c. Categories of Personal Data. The personal data subject to processing includes your personal data and, where applicable, that of your family members or cohabitants, which is directly or indirectly related to your relationship with the Data Controller.
Identifying information, contact information, academic information, financial information, information related to accessing and using online services, information regarding participation in university events and activities, information related to research and development activities, photographs and audio or video recordings, feedback on university courses or services, and health information.
Cookies
For more information about the cookies we use, please refer to our Cookie Policy, available at: https://www.uniecampus.it/gdpr/policy_ECA_cd.html 

d. Recipients of Personal Data. For the purposes indicated above, your personal data will be or may be disclosed to: academic and administrative staff, the Registration Office and the Administration Office, and the Finance Office. the Student Administration Office (counseling, guidance, and assistance), library services, faculty and researchers, partner companies and employers (internships, work placements, or job opportunities), certification and qualification bodies (external exams or accreditation organizations), data management and archiving systems, government authorities, and regulatory bodies.
With regard to the purposes provided for in section b.2, this information may also be disclosed to the joint controllers listed below: STUDIUM S.r.l. a socio unico privacy@studiumeducation.it, ADLM S.r.l. a socio unico privacy@accademiadellusso.com, Scuola Radio Elettra S.r.l. privacy@scuolaradioelettra.it.

e. Data processing methods. In relation to the purposes indicated above, your personal data will be processed in accordance with the fundamental principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality, using paper-based, computerized, or electronic means. The Data Controller informs you that the data provided will be processed by designated personnel, using manual, paper-based, and computerized methods, by entering it into both archives (containing paper documents) and the databases in use. The Data Controller and the Data Processors implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in compliance with the current legislation.

f. Data Retention.

In accordance with the purposes indicated above, your personal data will be retained:

• For the duration of the contract and for ten years following the period during which the Data Controller is subject to retention obligations for tax, contractual, or other purposes required by law or regulation, or for the purposes already indicated. Upon the expiration of this period, unless expressly reconfirmed by the data subject, the data will be deleted.
• To manage requests for information and to respond to inquiries regarding the services provided by eCampus in connection with pre-contractual measures. The processed data will be retained only for as long as necessary to respond to the prospective student’s request for information.
• For communications regarding educational offerings and services, personal data will be retained in a form that allows for the identification of the data subjects for a period of time appropriate to achieving the purposes described in Article 2, letter b2), including data collected by third parties and/or joint controllers as indicated in the privacy notice, and in any case for a period not exceeding 5 years from the granting of appropriate consent, subject to revocation by the data subject.
• To comply with legal obligations and in the event of disputes, for the period necessary for judicial and/or extrajudicial defense and, in any case, for a subsequent period of at least ten years from the expiration of the contract and/or for the time necessary for defense in court.

g. Rights of the Data Subject. You may exercise the rights provided for in Articles 15 and following of the Regulation (for example, requesting access to your personal data, rectification or erasure of such data, restriction of processing concerning you, or objection to the processing of your personal data, as well as the right to data portability) at any time by sending a certified letter to the following address: eCampus University, via Isimbardi n. 10, 22060 Novedrate (C0), Italy, P. Iva/CF. 90027520130 or by email at the following address privacy@uniecampus.it.

In relation to the joint controllers, it must exercise the rights set forth in point d. above of this privacy notice.