Pursuant to Article 13 of EU Regulation No. 2016/679 (hereinafter referred to as the "Regulation"), we provide information on the processing of personal data of users visiting this website, accessible online at the address www.cla.unina.it. These provisions do not apply to other websites, pages, or online services that may be accessed through links published on this website.
The Linguistic Center of the University of Naples Federico II, represented by the Director of the Linguistic Center, is the Data Controller for all personal data processing, including special categories of data under Article 9 (formerly sensitive data) and criminal convictions and offenses under Article 10 of GDPR 679/2016 (formerly judicial data), carried out within its activities, in compliance with specific legal provisions (EU 2016/679, Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, and related regulations of the University of Naples Federico II on personal data processing).
The registered office of the Linguistic Center is located at Via Mezzocannone, 8 - 80138 Naples.
In accordance with the regulations of the University of Naples Federico II on personal data processing, the Technical Management of Language Certifications, represented by Dr. Fabrizia Venuta, is the contact person for personal data processing related to their respective activities, in compliance with Article 2-quaterdecies of the "Code regarding the protection of personal data," Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018.
The company Deda Digital Srl - tax code / VAT number: 02047381203, with registered office at Via Toscanini, 7/2 - 40055 Castenaso (Bo), represented by its legal representative, has been appointed as the External Data Processor (EDP) in accordance with Article 28 of the EU Regulation and the University Regulation as of 15/03/2023. Specifically, the processing of personal data is as follows: updating, maintenance, assistance, and help desk services for the CLA website. The servers of the External Data Processor are located in EU countries.
Data subjects have the right to request the Data Controller, the Linguistic Center of the University of Naples Federico II, for the exercise of their rights under Articles 15 to 22 of EU Regulation 679/2016:
- Access to their personal data and all information specified in Article 15 of EU Regulation 2016/679;
- Rectification of inaccurate personal data and integration of incomplete data;
- Erasure of their data (the "right to be forgotten"), except for data contained in documents that must be retained by the University;
- Restriction of processing where one of the conditions under Article 18 of EU Regulation 2016/679 is met;
- Objection to the processing of personal data, except in cases where data processing is necessary and mandatory for using the services offered;
- Withdrawal of consent previously given for non-mandatory data processing, without affecting the lawfulness of the processing based on consent prior to its withdrawal;
- Data portability where the conditions are met, particularly when the legal basis for processing is consent, even for the purpose of communicating such data to another data controller;
The deadline for responding to data subjects, even in the event of refusal, is one month, which may be extended to three months in complex cases (Article 12(3) of EU Regulation 2016/679).
To exercise their rights regarding the protection of their personal data or report a personal data breach, data subjects can contact the Data Controller and the internal Data Processor using the following contact details:
Data Processing Contact:
Data subjects who believe that the processing of their personal data through this website violates the provisions of the Regulation have the right to lodge a complaint with the Data Protection Authority, as provided for in Article 77 of the Regulation, or to seek remedies in court (Article 79 of the Regulation)
This information is provided by the Data Controller, the University of Naples Federico II, in a concise, easily accessible form, using clear and simple language, to the data subjects, in order to provide them with the necessary information to ensure the correct and transparent processing of their personal data.