Regulation EU 2016/679, the “General Data Protection Regulation” (GDPR), provides that everyone has the right to the protection of personal data concerning him or her.
Pursuant to article 13 of the GDPR, the University of Trento provides users (hereinafter, the “data subjects”) with the information below.
Data controller
The data controller is the University of Trento, via Calepina 14, 38122 Trento (TN); email: ateneo@pec.unitn.it; ateneo@unitn.it.
Contact details of the data protection officer
The Data Protection Officer can be contacted at the following email address: rpd@unitn.it.
Purpose of the processing and legal basis
The data are processed by the University of Trento in the performance of its institutional tasks for dissemination of scientific and third mission activities pursuant to article 6, paragraph 1, point e) of the GDPR.
Categories of processed data
The data controller acquires the personal data voluntarily provided by data subjects as part of the subscription request they submitted via the form, including the e-mail address, which will be processed for the sole purpose of responding to the request itself.
Acquisition of data
Providing personal data is optional and failure to provide it will make it impossible to subscribe to the newsletter.
Data sources
The personal data is acquired via the specific form on the website.
Data processing methods
The processing of personal data shall be carried out by automated means by authorised staff. Personal data shall be processed lawfully, fairly and transparently, in a manner that is adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (GDPR, article 5, paragraph 1). No profiling is carried out, and decisions are not taken by automated means.
Categories of recipients of the personal data
In pursuing the purposes described in paragraph 3 and pursuant to the legal bases referred to therein, personal data will be processed by University personnel appointed pursuant to art. 29 GDPR and by data controllers duly appointed pursuant to art. 28 GDPR.
Outside of these cases, personal data may be communicated to third parties only in the event of compliance with a legal obligation, a provision and/or request from the Judicial Authority, Public Security or other public Authority.
Personal data will not be transferred to countries outside the EEA.
Data storage period
Personal data will be retained for the period necessary to achieve the purposes indicated above and, in any case, for the time established by current legislation and/or by the University regulations regarding the management and conservation of documentation produced by the University in carrying out its institutional activity.
In particular, personal data will be retained until consent is revoked.
Rights of the data subjects
The data subject shall exercise the rights referred to in article 15 et seq. of the GDPR at any time:
- access to personal data and other information (GDPR, article 15);
- rectification or completion of personal data;
- erasure of personal data, except where the University is required to store the data for compliance with article 17, paragraph 3, point b) of the GDPR;
- restriction of processing of personal data (see article 18 of the GDPR);
- object to the processing of personal data concerning them, in cases where this is permitted pursuant to article 21 of the GDPR;
- withdrawal of consent without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.
Data subjects can exercise their rights through the form available at the “Privacy and data protection” page on the University’s website. Fill in the form and email it to the Data protection officer (see contact details above).
In case there is an infringement of the GDPR on the processing of personal data, data subjects have the right to lodge a complaint with a data protection authority or to engage in legal proceedings by virtue of article 77 of the GDPR.
Last updated on 20/06/2025