This page describes the management methods of the Campania Region University Education Agency (ADISURC) portal regarding the processing of personal data of users who visit it. This notice is provided pursuant to Art. 13 of EU Regulation 2016/679, the “General Data Protection Regulation” (“GDPR”), and applicable Italian data protection legislation for those who interact with the ADISURC website at www.adisurcampania.it, and not for other external websites that may be linked to this one. Processing of personal data means any operation or set of operations performed with or without the aid of automated processes and applied to personal data or sets of personal data, even if not recorded in a database, such as collection, recording, organization, structuring, storage, processing, selection, blocking, adaptation or modification, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction.

Purpose of the Processing

 Following consultation of this site, data relating to identified or identifiable individuals may be processed. The data provided freely and voluntarily by users is acquired and processed in compliance with the rules established by the Regulation for the following purposes: 

• execution of institutional functions and provision of services to users; 
• fulfillment of obligations established by laws, regulations, and community legislation.

Optional provision of data

Aside from what is specified below regarding navigation data, the user is free to voluntarily provide personal data in the registration forms or when using the various services on the official ADISURC website. Failure to provide certain personal data in forms and communications requesting information, making suggestions, or reporting on the website, or otherwise provided during telephone contacts with the Company, may only result in the impossibility of obtaining a response to the information reported or requested.

Type of data processed 

Personal data provided voluntarily by the user – During the provision and execution of the Services offered by the Company’s website, the user voluntarily provides certain personal data (name, surname, email address, etc.) for the purposes of the individual Services offered by ADISURC. This data is collected following the completion of specific forms included in the individual services or by sending emails to the Data Controller at the email addresses indicated on this website; some data is essential to provide an appropriate response to user requests. 3. In any case, the processing of sensitive and judicial data is excluded and, if provided voluntarily by the user, will be duly deleted. Browsing data – The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature, it could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) ​​addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment. This data is used solely to obtain anonymous statistical information on site usage and to verify its correct functioning, and is retained for the minimum period required by applicable law. The data could be used to ascertain liability in the event of hypothetical computer crimes against the site. Cookie Policy – For information regarding the cookies used on the ADISURC portal, please refer to the specific Cookie Policy .

Communication and dissemination of personal data

The data collected through the Company’s institutional website will be processed exclusively by ADISURC staff and collaborators. Some processing operations may also be carried out by other third parties to whom the Company entrusts certain activities, or parts thereof, essential to the provision of services. These parties, designated as Data Processors by contract or other legal instrument pursuant to EU or Member State law, are required to comply with personal data protection obligations according to the operating instructions received, with particular reference to the adoption of appropriate technical and organizational measures to ensure the confidentiality and security of the data pursuant to Art. 32 of the Regulation. Outside of these circumstances, the data will not be communicated to third parties or disseminated, except in cases specifically provided for by national or European Union law.

Transfer of personal data to countries outside the European Union

The data collected and processed are not transferred to companies or other entities outside the EU.

How to withdraw consent and how long data will be retained

To withdraw specific consent, you can contact the Data Controller or the Data Protection Officer at the address designated for exercising the rights pursuant to Articles 15-22 of EU Regulation 2016/679, indicated in the following paragraph of this policy. The criteria used to determine the retention period for personal data are those suggested by current Italian data retention regulations and, in any case, compliance with the principles of lawfulness, necessity, and proportionality, as well as the purposes for which the data was provided.

Rights of Users (as “interested parties”)

Users may exercise at any time the rights provided for in Articles 15 et seq. of EU Regulation 2016/679, where applicable. These rights include, in accordance with Articles 13, paragraph 2, letters (b) and (d), the right to request rectification or erasure of their registration data, restriction of processing, or to object to processing, where applicable; the right to lodge a complaint with the Italian Data Protection Authority, following the procedures and instructions published on the Authority’s official website at www.garanteprivacy.it.

Data Controller and Data Protection Officer

The Data Controller is ADISURC, represented by the Chairman of the Board of Directors, with registered office in Naples at Via De Gasperi 45 -80133-; Email: presidente@adisurcampania.it Switchboard: 081 7603111.

The Data Controller is Elio Erricchiello, Attorney at Law – dpo@adisurcampania.it

Attachments

Video surveillance information