Information notice on the processing of navigation data and cookies

Pursuant to art. 13 and 14 of the Regulation (EU) 2016/679 on the "protection of natural persons with regard to the processing of personal data" (hereinafter also "GDPR"), we provide you with the information required on the processing of your personal data ("Data") carried out by the Università Cattolica del Sacro Cuore (hereinafter also "University" or "University") while browsing the https://www.unicatt.it website  (the "Website").

The information notice is provided for all the websites of the unicatt.it, unicatt.eu, cattolicanews.it domains, sites related to the aforementioned domains that are used to collect data through forms and not even for other websites that may be consulted by the user through links.

The Controller of the processing of your Data is Università Cattolica del Sacro Cuore, with registered office in Largo Agostino Gemelli 1, 20123 Milan, telephone (+39) 027234.1.

Università Cattolica del Sacro Cuore, as Data Controller, collects the following data:

• navigation data: the computer systems and software procedures used to operate this site acquire, during their normal operations, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment;
• data relating to the use of the website by the user, through the use of technical cookies;
• browsing data collected through Google Analytics with IP anonymization, adopting every useful measure to reduce the possibility of identifying users who connect to it; for example: type of device used to connect, city from which you connect, duration of visit to a site, etc.;
• website navigation data collected by third-party tracking tools;
• data provided voluntarily by the user - identification information - for access to certain services offered through the website, for which please refer to the specific information in the relevant sections.

As far as the use of cookies is concerned, please refer to the specific sections of this policy.

The University processes personal data for the following purposes:

• manage the correct use of the website and the correct functioning of the services offered;
• obtain statistical information on the use of services (most visited pages, number of visitors per hour or per day, geographical areas of origin, etc.);
• improve the service provided to users, making the use of the site more effective and/or enabling certain interaction features with other websites and social networks;
• assessing the effectiveness of institutional communication activities and/or conferring knowledge and visibility to institutional activities and/or content on issues of public and social interest;
• release and manage the credentials, IT resources and online services made available to potential students, participants in the initiatives and / or users;
• ascertain whether users have acted unlawfully to the detriment of third parties or to the detriment of the University;
• comply with European and national regulations, provisions of Public Administrations and/or Supervisory Authorities.

The legal basis of the processing is constituted by the consent of the interested party, expressed during the browsing experience and manifested during the consultation of the website, by the execution of contractual measures of which the data subject is possibly part.

The optional, explicit and voluntary sending of e-mails, messages or any type of communication addressed to the University addresses indicated on the pages of the site, involves the subsequent acquisition of the sender's address or any other personal data that will be used to respond to requests. It is ensured that this treatment will be based on the principles of correctness, lawfulness, transparency, and protection of confidentiality pursuant to Article 13 of the GDPR 2016/679.

Specific summarised information is displayed on the pages of the websites set up for particular services on request.

Personal data are processed both in paper and electronic form (servers, cloud databases, application software, etc.). The University stores the user's personal information in accordance with certain fundamental criteria outlined below: referring in particular to the purposes of collection, the terms provided for processing for marketing purposes and the statute of limitations dictated by law.

Apart from what specified for navigation data, the user is free to provide personal data contained in the forms on the University website or indicated during contacts to request information material, other communications or to access specific services. Failure to provide such data may make it impossible to obtain what has been requested.

Some pages on the University website may contain links to other websites that are not operated by Università Cattolica del Sacro Cuore. The University does not share personal information with such websites. The University is not responsible for the content, security, or privacy measures implemented by other sites and expressly refuses all liability.

The data collected, also through cookies, may be processed by employees and external companies that collaborate with the University - which deal, for example, with maintenance services of IT resources and online services made available through the Site - respectively as data processors and data processors. The list of Data Processors appointed is constantly updated and available from the University offices.

This data will not be disclosed, but in the case of third-party cookies may also be transferred outside the European Union by and under the exclusive control of the companies that manage and install them.

The University has appointed a Data Protection Officer (D.P.O.), who can be contacted at the e-mail address dpo@unicatt.it

As an interested party, the user has the right to:

1. Ask the Data Controller to access, cancel, rectify if inaccurate, integrated if incomplete your data, and to limit processing in cases set forth in art. 18 of the GDPR;
2. Object, at any time, in whole or in part, to processing of Data necessary for the legitimate pursuit of the interest of the Data Controller;
3. In the event that the conditions for the exercise of the right to portability pursuant to art. 20 of the GDPR, receive in a structured, commonly used and machine-readable format the Data provided to the Data Controller, as well as, if technically feasible, transmit it to another Data Controller without hindrance;
4. Revoke consent given at any time;
5. Lodge a complaint with a supervisory Authority.

These rights may be exercised by registered mail, addressed to Università Cattolica del Sacro Cuore, Direzione Amministrativa - Privacy, Largo Agostino Gemelli 1, 20123, Milan, or by e-mail at dpo@unicatt.it.

Warning for children under the age of 14
Minors under the age of 14 may not provide personal data. The University shall in no way be held responsible for any collection of personal data, nor for any misrepresentation, provided by the minor, and in any case, should the use of such data be detected, the University will facilitate the right of access and cancellation forwarded by the legal guardian or the person exercising parental responsibility.

The management of the University's institutional website employs a technology called "cookies" together with other tracking tools (such as web beacons). Their use is mainly aimed at investigating how the website is used by users (most used pages, time spent, etc), improving the website performance, facilitating and enhancing the user experience.

Cookies are small text strings that websites visited by the user send to the computer and any device used to access the Internet (such as smartphones and tablets), where they are stored and then transmitted to the same websites the next time the same user visits.

Cookies can be stored permanently or have a variable duration (the so-called persistent cookies - e.g. in order to automatically access a reserved area, the User can choose to have their User-ID and password stored in one of these files) but they can also disappear when the browser is closed or have a limited duration (the so-called session cookies).

Cookies can be installed by the website you are visiting (the so-called first party cookies), but also by other websites (the so-called third-party cookies) and are used to perform computer authentication, session monitoring and storage of information regarding the activities of users who access a particular site.

The cookies, as indicated by the Guidelines cookies and other tracking tools of the Italian Data Protection Authority, can be classified into two macro-categories:

• technical cookies, used for the sole purpose of "carrying out the transmission of a communication on an electronic communication network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the contracting party or user to provide such service" (see section 122, paragraph 1 of the Code);
• profiling cookies, used to trace determined, identified or identifiable subjects, specific actions or recurring behavioural patterns in the use of the functions offered (patterns) in order to group the various profiles within homogeneous clusters of different sizes, so that it is possible for the Data Controller, among other things, to modulate the provision of the service in an increasingly personalised manner beyond what is strictly necessary for the provision of the service. service, as well as sending targeted advertising messages, i.e. in line with the preferences expressed by the user when surfing the web.

It is not necessary to obtain the user's consent for the installation of technical cookies. Cookies can be installed directly by the operator of the website or by a different website that installs them through the first one (the so-called "third party" cookies).

Users can obtain more detailed and updated information on the duration, as well as any other relevant information in the privacy policies of the respective third-party providers (through the links provided) or by contacting the Data Controller.

A list of the cookies used is available on the Privacy Preference Centre (SETTINGS button on the cookie banner and/or Cookies Settings link).

The management of cookies may involve the transfer of data to countries outside the European Union for which the adequacy of the third country's legislation is not recognised by decision of the European Commission (Art. 45 of EU Regulation 2016/679). By providing consent to the use of analytical and/or profiling cookies, you agree, where necessary, to such transfer.

The website uses the following types of first-party technical cookies:

• Session cookies: fundamental to allow the user to move normally within the website and correctly use the relative services. Since they are not stored on the user's computer, they disappear when the browser is closed;
• Functionality cookies: aimed solely at improving and speeding up navigation on the Site, by storing certain choices made by the user (such as language preferences).

They are therefore tools used by the Data Controller to guarantee, for example, efficient navigation, session stability, log-in permanence and pre-selection of the chosen navigation country. They also serve to remember, in an anonymous form, the choices made by the user regarding the display of certain elements of the page, such as information and communication banners.

As already stated, the use of technical cookies and the performance of processing related to them does not require the user's prior consent.

In any case, it remains possible for the latter to prevent the installation of such cookies at any time through the settings of their browser, as indicated later in this policy, knowing that such a choice could, however, complicate, slow down and sometimes block navigation on the Site and, more generally, on the Internet.

The Site uses both cookies installed directly by the Data Controller and cookies installed by third parties other than the Data Controller. More specifically, these are:

Measurement and performance

The Site uses cookies for anonymous statistics. These are Google Analytics cookies through which are collected, in an aggregated and anonymous way, information on how the Site is used by users (number of visitors, pages visited, dwell time, etc.). This information is generally used to improve the functionality of the Site, allowing, for example, to record any errors detected by users and ensure, therefore, a smoother and more immediate navigation.

• Google Analytics with anonymized IP (Google Ireland Limited)
  Google Analytics is a web analysis service provided by Google Ireland Limited ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website by anonymizing your IP address in accordance with the requirements of the Italian Data Protection Authority. Read further information for the protection of privacy.
  Personal Data processed: Cookies and Usage Data.
  Place of processing: Ireland - Privacy Policy - Opt Out.

The Website uses Tracking Tools to monitor and analyse traffic data and to provide customised commercial content based on the User's behaviour, as well as to manage, distribute and optimise advertisements on external sites and platforms.

Advertising, remarketing and behavioral targeting

This type of service allows, by tracking tools, User Data and Data on the use of this Website by the User to be used for advertising communication purposes.  
This does not mean that all Personal Data is used for this purpose. Information and conditions of use are shown below.
Some of the services may use Tracking Tools to identify the User or use behavioral targeting technique, i.e. displaying advertisements tailored to the User's interests and behavior, including those detected outside this Website. Some services offer a remarketing option based on lists of email addresses that are acquired and subsequently managed by the University.
For more information, please check the privacy policies of the relevant services.

For more information, please check the privacy policies of the relevant services.

• Advertising services Facebook and Instagram (Meta Platforms, Inc. formerly Facebook, Inc.)
  These services enable the use of a range of advertising products, such as showing advertisements to people who have already visited the University website when they are on Facebook or a digital platform supported by Facebook Advertising.
  Personal Data processed: Cookies and Usage Data.
  Place of processing: United States of America – Privacy Policy Facebook / Privacy Policy Instagram.
• Google conversion tracking (Google Ireland Limited)
  Google conversion tracking is an analytics service provided by Google Ireland Limited that connects data from the Google Ads advertising network with actions performed on this Website.
  Personal Data processed: Cookies and Usage Data.
  Place of processing: Ireland – Privacy Policy.
• LinkedIn conversion tracking (LinkedIn Corporation)
  LinkedIn conversion tracking (LinkedIn Insight Tag) is an analytics and behavioral targeting service provided by LinkedIn Corporation that connects data from the LinkedIn advertising network with actions performed on this Website. The LinkedIn Insight Tag tracks conversions that can be attributed to LinkedIn ads and allows groups of Users to be targeted based on their previous use of this Website.
  Users may opt out of behavioral targeting features through their device settings, their LinkedIn account settings or by visiting the AdChoices opt-out page.
  Personal Data processed: device information, Tracker and Usage Data.
  Place of processing: United States of America – Privacy Policy.
• Google Ads (Google Ireland Limited)
  The service uses cookies and other advertising technologies, e.g. to publish and display advertisements, personalise advertisements, limit the number of views of an advertisement for a user, deactivate advertisements that you do not want to receive, and evaluate the effectiveness of advertisements.
  Google Ads is a service provided by Google Ireland Limited that connects the activity of this Website with the Google Ads advertising network and the DoubleClick Cookie.
  Users can opt out of Google's use of cookies for ads personalization by visiting Google's Ads Settings.
  Personal Data processed: Cookies and Usage Data.
  Place of processing: Ireland – Privacy Policy – Opt Out.

Generally, services of this type offer the possibility to disable such tracking.
Users may also opt-out of certain advertising features through the corresponding device configuration options, such as mobile device advertising configuration options or generic advertising configuration.
In addition to the opt-out capabilities offered by referral services, you may opt out by visiting the Network Advertising Initiative's opt-out page.
In addition to any opt-out functionality provided by any of the services listed in this document, the User can read more about how to disable interest-based advertisements in the "How to disable cookies" section in this document.

Considering that most browsers are programmed to accept cookies automatically, the user may choose not to receive them, especially when the third party involved does not give the opportunity to properly opt-out, even by accessing the browser settings and disabling their use, according to the procedures described at the following addresses:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Internet Explorer
• Microsoft Edge
• Good
• Work

In any case, it should be noticed that disabling cookies may complicate Internet navigation or prevent users from moving freely from one page to another, enjoying all the website functions.

For further information on cookies, please visit the www.youronlinechoices.com website (limited to the services surveyed by this platform), to obtain information on how to delete or manage cookies according to the browser used and to set preferences for the use of third-party cookies.

In addition, whenever the use of Cookies (and/or tracking tools) is dependent on consent, the User can give or revoke such consent by setting their preferences within the cookie policy. In particular, you can change your cookie consent by clicking on the "Cookie Settings" link at the bottom of each page of this Website.

Users can also remove previously saved cookies and/or tracking tools using special browser or device functions.

Other tracking tools present in your browser's local storage can be removed by clearing your browsing history.

With regard to third-party cookies, Users may manage their preferences and revoke their consent by visiting the relevant opt out link (if available), using the tools described in the third party's privacy policy or contacting the third party directly.

Users may also manage certain cookies and tracking tools for mobile applications by turning them off through appropriate device settings, such as mobile advertising settings or tracking settings in general (Users may consult their device settings to find the relevant one).

For more information, check out the following sites:

• www.allaboutcookies.org
• www.cookiechoices.org

Last updated: September 6, 2022