NEWSLETTER PRIVACY NOTICE

pursuant to Article 13 of Regulation (EU) 2016/679

Ca’ Foscari University of Venice and the Ca’ Foscari Foundation, as joint controllers under Article 26 of the Regulation (hereinafter the “Joint Controllers”), provide you with the following information, in accordance with Article 13 of Regulation (EU) 2016/679 (“Regulation”), regarding the processing of your personal data in the context of the commercial and/or institutional communications service (“Newsletter”). For more information on other processing activities carried out by the Joint Controllers, please refer also to the general privacy policy.

1. Joint Controllers
   The Joint Controllers are::
   • Ca’ Foscari University of Venice, with registered office at Dorsoduro 3246, 30123 Venice (VE), represented by the acting Rector (hereinafter the “University” or “Institution”);
   • Ca’ Foscari Foundation, with registered office at Dorsoduro 3246, 30123 Venice, represented by its legal representative pro tempore (hereinafter the “Foundation”).
     
     
2.  Data Protection Officers
   The University has appointed a Data Protection Officer (DPO), who can be contacted at:
   Email: dpo@unive.it
   Postal address: Ca’ Foscari University of Venice, Data Protection Officer, Dorsoduro 3246, 30123 Venice (VE). 3246, 30123 Venice (VE).
   
   The Foundation has appointed a Data Protection Officer, who can be contacted at:
   Email: dpo.fondazione.cf@unive.it Postal address: Ca’ Foscari Foundation, Dorsoduro 3859/A, 30123 Venice.
   
   
3. Categories of Personal Data, Purpose, and Legal Basis for Processing
   To subscribe to the Newsletter service, you will be asked to provide personal data (such as your name, surname, and email address). These will be processed for the following purposes:
   1. Commercial communications
      With your explicit and specific consent, the Foundation may process your personal and contact data in order to send you promotional communications regarding initiatives such as master’s programs, courses, seminars, and events, including via the newsletter you subscribe to. These communications may be made using automated contact methods (email, SMS, MMS, chat, instant messaging, social networks, bulk messaging tools, etc.).
      
      The legal basis for this processing is
      You may withdraw your consent at any time, with effect for future processing activities. 6.1.a) del Regolamento (“consenso dell’interessato”).
      This consent may be withdrawn at any time, with effect for future processing.
   2. Institutional communications
      The University may also use the email address you provide—such as when enrolling in a master’s program—to send communications and newsletters about its institutional activities in teaching, research, and public engagement.
      The legal basis for this processing is Article 6.1(e) of the Regulation (“task carried out in the public interest”). You can unsubscribe from such newsletters at any time by using the link included in every email or by contacting the DPO at the addresses provided above.
      The provision of such data is necessary to receive the Newsletter; if the data is not provided, the University will not be able to send you the requested communications.
      
      The processing of personal data is carried out in accordance with the principles of fairness, lawfulness, and transparency, and with respect for the confidentiality and rights of the data subject, as well as the additional principles set out in Article 5 of the Regulation.
      
      
4. Methods of Processing
   Data will be processed by authorized personnel (in accordance with Article 29 of the Regulation and Article 2-quaterdecies of Legislative Decree 196/2003), using automated procedures and appropriate technical and organizational measures to prevent unauthorized or unlawful access, as well as accidental loss, destruction, or compromise of integrity and confidentiality.
   
   
5. Data Retention
   For the purposes described above, your data will be retained:
   by the Foundation for 24 months from the date of collection;
   by the University for as long as the Newsletter is being sent, or until you unsubscribe.
   
   
6. Recipients and Data Transfers Outside the EEA
   For the purposes outlined, personal data may be processed by University staff and collaborators who are authorized and instructed accordingly, as well as by third parties providing related services, designated as data processors.
   An updated list of such entities is available on the University’s website under Elenco destinatari dei dati (List of data recipients).
   
   To request the list of data processors for the Foundation, please contact: privacy.fcf@unive.it.
   
   Specifically, for managing contacts and sending newsletters, the University uses Salesforce.org, which involves the transfer of personal data to the United States.
   Salesforce.org has been appointed as a data processor and has signed Standard Contractual Clauses with the University to ensure adequate safeguards.
   
   
7. Diritti degli interessati e modalità di esercizio
   In qualità d’interessato, ha diritto di ottenere dall’Ateneo, nei casi previsti dal Regolamento, l’accesso ai dati personali, la rettifica, l’integrazione, la cancellazione degli stessi o la limitazione del trattamento ovvero di opporsi al trattamento medesimo (artt. 15 e ss. del Regolamento).
   La richiesta potrà essere presentata, senza alcuna formalità, contattando direttamente:
   • For the University: the Data Protection Officer at dpo@unive.it, or by mail to:
     Ca’ Foscari University of Venice – Data Protection Officer, Dorsoduro 3246, 30123 Venice.
     Alternatively, you can contact the Joint Controller by certified email at protocollo@pec.unive.it. In alternativa, è possibile contattare il Contitolare del trattamento, inviando una PEC a protocollo@pec.unive.it.
   • For the Foundation: the Data Protection Officer at privacy.fcf@unive.it or dpo.fcf@unive.it.

If you believe that the processing of your personal data violates the Regulation, you also have the right to file a complaint with the Italian Data Protection Authority, as provided for in Article 77 of the Regulation, or to seek judicial remedy under Article 79.

Last updated: 06.06.2024