CLA - Università di Napoli

Università degli studi di Napoli Federico II

Information on the processing of personal data of users visiting the institutional website of the Linguistic Center Federico II

Pursuant to Article 13 of EU Regulation No. 2016/679 (hereinafter referred to as the "Regulation"), we provide information on the processing of personal data of users visiting this website, accessible online at the address These provisions do not apply to other websites, pages, or online services that may be accessed through links published on this website.

Data Controller and Data Processor.
Data Protection Officer.
Personal Data Processing Contact.
External Data Processor.
Types of Data Processed and Purposes of Processing.
Rights of Data Subjects.
Data Breach.
Right to Lodge a Complaint.
Privacy Policy.

Data Controller and Data Processor (DPO)

The Linguistic Center of the University of Naples Federico II, represented by the Director of the Linguistic Center, is the Data Controller for all personal data processing, including special categories of data under Article 9 (formerly sensitive data) and criminal convictions and offenses under Article 10 of GDPR 679/2016 (formerly judicial data), carried out within its activities, in compliance with specific legal provisions (EU 2016/679, Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, and related regulations of the University of Naples Federico II on personal data processing). The registered office of the Linguistic Center is located at Via Mezzocannone, 8 - 80138 Naples.



Data Protection Officer (DPO)

The University has appointed a Data Protection Officer (DPO) since 01/03/2023 (DG/2023/216 of 28/02/2023). 


Contact for Personal Data Processing

In accordance with the regulations of the University of Naples Federico II on personal data processing, the Technical Management of Language Certifications, represented by Dr. Fabrizia Venuta, is the contact person for personal data processing related to their respective activities, in compliance with Article 2-quaterdecies of the "Code regarding the protection of personal data," Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018.



External Data Processor (EDP)

The company Deda Digital Srl - tax code / VAT number: 02047381203, with registered office at Via Toscanini, 7/2 - 40055 Castenaso (Bo), represented by its legal representative, has been appointed as the External Data Processor (EDP) in accordance with Article 28 of the EU Regulation and the University Regulation as of 15/03/2023. Specifically, the processing of personal data is as follows: updating, maintenance, assistance, and help desk services for the CLA website. The servers of the External Data Processor are located in EU countries.


Types of Data Processed and Purposes of Processing

Personal data is provided by the data subject when using the "online registration procedures" service accessed through the Portal from the following URL: The collected data will be used exclusively for the institutional purposes of the linguistic center of the University and, in particular, for booking and registration purposes related to international certification exams at the Technical Management of International Language Certifications. The computer systems used to operate this website automatically acquire some personal data during their normal operation, and such data is transmitted implicitly through web communication protocols. These data, if combined with other data held by third parties, may identify users/visitors. Examples include IP addresses and domain names of the computers used by users/visitors connecting to this website. Such personal data is normally collected for statistical analysis, managed in an anonymous form, and used to facilitate navigation on this website. Navigation data do not persist for more than six months and are deleted immediately after being aggregated (except when necessary for the investigation of crimes by the judicial authorities). Information about Cookies is available on the Cookie Policy page - CLA - University of Naples (


Rights of Data Subjects

Data subjects have the right to request the Data Controller, the Linguistic Center of the University of Naples Federico II, for the exercise of their rights under Articles 15 to 22 of EU Regulation 679/2016:

- Access to their personal data and all information specified in Article 15 of EU Regulation 2016/679;
- Rectification of inaccurate personal data and integration of incomplete data;
- Erasure of their data (the "right to be forgotten"), except for data contained in documents that must be retained by the University;
- Restriction of processing where one of the conditions under Article 18 of EU Regulation 2016/679 is met;
- Objection to the processing of personal data, except in cases where data processing is necessary and mandatory for using the services offered;
- Withdrawal of consent previously given for non-mandatory data processing, without affecting the lawfulness of the processing based on consent prior to its withdrawal;
- Data portability where the conditions are met, particularly when the legal basis for processing is consent, even for the purpose of communicating such data to another data controller;

The deadline for responding to data subjects, even in the event of refusal, is one month, which may be extended to three months in complex cases (Article 12(3) of EU Regulation 2016/679).


Data Breach

To exercise their rights regarding the protection of their personal data or report a personal data breach, data subjects can contact the Data Controller and the internal Data Processor using the following contact details:

Data Controller:


Data Processing Contact:



Right to Lodge a Complaint

Data subjects who believe that the processing of their personal data through this website violates the provisions of the Regulation have the right to lodge a complaint with the Data Protection Authority, as provided for in Article 77 of the Regulation, or to seek remedies in court (Article 79 of the Regulation)


Information on Personal Data Processing (clear and transparent information, communication, and exercise of the rights of the data subject, in accordance with Article 12 of European Regulation 2016/679)

This information is provided by the Data Controller, the University of Naples Federico II, in a concise, easily accessible form, using clear and simple language, to the data subjects, in order to provide them with the necessary information to ensure the correct and transparent processing of their personal data.