HUMANITAS HU ALUMNI APP – Privacy Policy Information on the Processing of Data

This information is provided with reference to the processing of your personal data pursuant to article 13 of EU Regulation 2016/679 – General Data Protection Regulation. According to the regulation indicated, the processing of personal data will be based on principles of fairness, lawfulness and transparency and protection of confidentiality. We therefore provide the following information:

1) DATA CONTROLLER

The Data Controller is Humanitas University (or Hunimed), with registered offices in Pieve Emanuele (MI), 20090, Via Rita Levi Montalcini,4 in the figure of the pro tempore Chief Executive Officer You may also contact the Data Controller by email by writing to the following address: hunimed@pec.it.

2) DATA PROTECTION OFFICER

The Data Protection Officer (DPO) for Humanitas University may be contacted at the following address: dataprotectionofficer@humanitas.it.

3) DATA CATEGORIES, PURPOSE AND LEGAL BASIS FOR PROCESSING

All processing operations are attributable to the types of data, purposes and legal basis described below: A. personal details, contact details, study course, professional career, all processed for the purpose of registering within the Alumni Community. B. personal details and contact detailsforsending communications promoting courses and services provided by Hunimed, as well as for providing information on teachers, events and dedicated initiatives, etc. C. personal details, contact details,study course, professional career and other similar information collected by sending specific questionnaires aimed at analysing your interests and keeping you informed about the activation of new services that may meet your needs. D. personal and contact details for sending anonymous and voluntary questionnaires aimed at evaluating new types of services/processes. E. personal and contact details for any legal matters. For the purpose referred to in letter A), processing data is necessary for executing a contract and/or pre contractual measures, pursuant to art. 6, paragraph 1, letter b) of EU Regulation 679/2016. It is necessary to communicate the data for such purposes, as its non-communication will lead to the inability to register. For the purposes referred to in letters B) and C), the data will be processed only under explicit consent, pursuant to art. 6, paragraph 1, letter a) of EU Regulation 679/2016 and failure to provide such data in no way precludes registration. In any case, it is always possible to revoke the consent given, without prejudice to the lawfulness of the processing based on the consent given before such revocation. For the purposes referred to in letters D) and E), the processing of data is necessary for pursuing the legitimate interest of the Data Controller, consisting in the improvement of its processes and services and the protection of its rights.

4) DATA RECIPIENTS

Considering the purposes of the Almuni Community, personal data will be visible to all members. The data will be processed by authorised Humanitas University staff, as well as by third partiesin contractual or conventional relationship for administrative and institutional purposes or for the execution and assistance of the services provided and who operate as Data Controllers or Data Processors. The list of Data Processors is available at the headquarters of Hunimed or can be requested by writing to privacy@humanitas.it. For specific or technical requirements, your personal data may be transferred outside the European Union and, in particular, to countries for which the European Commission has expressly authorised the transfer to, or have provided suitable guarantees in accordance with the regulations in force during the current time. For further information, please contact the Data Controller or write to privacy@humanitas.it. V.02_2020.07V.02_2020.07

5) STORAGE PERIOD

Personal data will be stored until you choose to terminate your Community membership by deleting the account. Asforsending of communications, personal data will be kept aslong as you continue to wish to receive them and you are on the mailing list. Personal data and contact details for any defensive need will be kept for the entire duration of the extra judicial and/or judicial proceedings and, in any case, until the end of the terms of judicial protection and/or appeal. Personal data collected through the questionnaires will be kept for at least two years.

6) RIGHTS OF THE DATA SUBJECT

You can find out at any time how your data has been acquired, check whether it is accurate, complete, up to-date and well stored, as well as exercise your rights under Articles 15 et seq. of EU Regulation 2016/679 (right of access to, rectification or cancellation of data, right to limitation of processing or opposition to processing, right to data portability, right of revocation), by writing to privacy@humanitas.it or privacy.humanitas@pec.it. If you find a law violation in your personal data processing, you may lodge a complaint with the Data Protection Supervisor. This shall not in any way affect the possibility of appealing to the competent judicial authority.