You are visiting the English version of our website. 
Please note that only a part of the site is displayed and some contents could still be in Italian.

Privacy policy - CSAL website

The purpose of this privacy statement is to assist you in understanding how the University uses personal information collected via its official website.


Why this notice

The following information notice fulfils the requirements laid down in the Italian Legislative Decree no. 196/03 (Italian Personal Data Protection Code) which, pursuant to art. 13, requires that all persons using the Univpm website, accessible through its homepage at, must be informed concerning the processing of their personal data.

This privacy policy applies only to the website, not to any other websites or Univpm domains that users may link to from it.

This privacy policy has been drafted in accordance with the Recommendation no. 2/2001, adopted on May 17, 2001 by the EU authorities for personal data protection, that are all part of the Group created pursuant to art. 29 of Directive no. 95/45/EC. This Recommendation identifies some basic requirements for the on-line collection of personal data, and in particular specifications on how, when and what kind of information the data controller should provide to the users connecting for whatever reason to the website.



Data Controller

Data related to identified or identifiable persons can be processed after visiting this website.

The data controller is the CSAL.



Access to personal data

The data collected through the website are accessible to the authorized staff of the University.

The university may disclose appropriate personal data to third parties, where there is legitimate need for completing the services required. The data collected by the university may be disclosed outside the university to other government bodies, such as the Ministry of Education, Universities and Research, the Regional Agency for the right to Education, the Regional Observatories for Universities and other authorities promoting education and research, the development of universities and related services as well as the credit institute that receives student’s tuition fees.



Types of processed data

  • Navigation data

    The IT systems and the software procedures required to operate the website automatically collect some personal data, the transmission of which underlies the use of internet communication protocols and is used to better serve the website users.

    The above-mentioned personal data are not collected to be associated to any identified persons; yet, they could enable, because of their characteristics, the identification of users through elaboration and association with data collected by third parties.

    This category of data includes IP addresses or the domain names through which the users connect to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the procedures used to submit the request to the server, the size of the file obtained in reply, the numeric code indicating the state of the server’s reply (successfully delivered, error and so on) and other parameters relating to the user’s operating system or IT environment.

    These data are collected for the compilation of anonymous statistics, to ascertain accuracy or, when required, for investigations against computer misuse or unauthorized use of the website or of personal data. Once they have been used, the collected data are deleted from the system.


  • Directly logged data

    The personal data collected from information provided during the application and enrolment processes of students, as well as the information provided throughout their time at the University, will be processed fairly and lawfully, according to the general standards of security, confidentiality and privacy.

    The email addresses provided may be used to send website users information, respond to enquiries, and/or other requests or questions. The information collected are treated with the highest standards of security, confidentiality and privacy, according to the Legislative Decree 196/03.





The website uses the following cookies:

  • Cookies for anonymous users:
    no personal data are collected. 



Optional data provision

Except for navigation data, users are free to enter their personal data for filling in forms or for requiring delivery of information materials or other services.

Failure to provide such data could lead to the university being unable to perform any or all of the services required.



Processing Procedures

Personal data are acquired and processed by the university exclusively to perform the university’s institutional functions. Data must not be retained for longer than is necessary to achieve the purpose they are used for.

Appropriate security measures have been taken against unlawful or unauthorized processing of or access to personal data and against accidental loss thereof.



Right of access to personal data

Art. 7 of the Legislative Decree no. 196/2003, the data subject shall have the right to obtain confirmation as to the existence of personal data concerning him/her, regardless of its being already recorded, and communication of such data in an intelligible form.

This privacy policy may be updated and modified any time (in the university’s sole discretion).