Corporate Privacy Policy

Information for those concerned,

Data collected from you will be processed according to the following principles: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality.

UNIVERSITA’ COMMERCIALE “LUIGI BOCCONI” (hereinafter referred to as “Bocconi University”), having its registered office in Milano in Via Sarfatti 25, hereby declares that it falls within the field of application of General Data Protection Regulation n. 679/2016 dealing with the protection of personal data (hereinafter referred to as the “Law”), with reference to use of the data subject’s personal data (hereinafter referred to as “Data”) also includes data regarded as “sensitive” (in the broadest sense of the term provided by the Law) namely information related to health, membership of political groups, information related to racial or ethnic origin, handicapped family members, etc., provided by the data subject.

1. The types of information we collect

We may collect the following types of personal data about you:

your name, and contact information such as address, email address, mobile and telephone number, as well as your date and place of birth, tax identification number and your passport number or national identity card details, country of domicile and your nationality, as well as your bank data or the data related to the companies or firm where you work;
information related to your education, position within the company and other related professional information. We will also keep records related to assessments of past interactions with the University and feedback in relation to the position of the company (clients for teaching or research activities of the University; supplier of the University; partner in activities or specific programs (i.e. Bocconi & jobs, Job gate [web site that organizes job openings, internships, business contacts, e.g. with internship supervisors], POL and others); supporter or donor;
Data related to your geographical position limited to the University buildings or urban campus;
All data necessary for the subscription to the Bocconi accelerator program, named B4i, for the attendance to related events and to benefit from all the services provided by B4i;
sensitive personal data: information related to health, political opinions, membership of political groups etc., shall only be processed for the purposes allowed for by the Law and only for tasks of the University.

2. Modality of the Treatment

The personal data are processed either in paper or electronic format. In the latter case, automatic instruments will be used. The Data will be kept strictly for the time and scope for which they were collected.
Specific security measures are adopted for preventing data breaches, illicit or non-correct uses and non-authorised accesses.

3. Purposes and Processing Data

As individual inside certain corporations, your image and information connected with the University and produced by Bocconi University during the performance of activities or the relationship with you, shall be subject to processing, including by electronic or automated means. Data will be processed for the following purposes:

a) For the supply of goods and services;

b) for management of academic and formative initiatives with University’s partner companies, including job placement, internships and any other related formative activity;

c) for the supply of research services, including research activities and formative products;

d) for the support of Bocconi University activities and fundraising;

e) under your consent, for the circulation of periodical publications, including Bocconi News, fundraising and events to support Bocconi University activities in any manner, and in both printed and electronic format to the email address you provide to us; other editorial/digital/paper activities for communication/promotion purposes of the University requiring the use of images carried out on Campus, that might consist of the publication in social networks;

f) for security and internal organization purposes. Moreover, on the same grounds, Data collected may be used for research and statistical purposes on an anonymous and aggregate basis;

g) for the subscription to the B4i program, the attendance to the related events and to benefit from all the services provided by B4i;

h) to meet logistic needs, we might process geo-localization data, to ensure more efficiency and to ensure safety;

i) for the organisation and participation in other events and initiatives for groove entrepreneurship, including competitions;

j) for the compliance with contractual and legal obligations. Note also that the University may pass some of your data to other organizations if necessary for the detection or prevention of crime or if it is required by law.

k) To send electronic communications, based on the Data Controller’s legitimate interest, to the email address you already provided, regarding similar products to those in which you have already shown interest.

4. Circulation and Communication of Data

Data may be accessed employees of Bocconi University and those required by Law or for carrying out of the University career, that have the need in order to perform duties, as well as other entities providing services to Bocconi University, who the University has specifically nominated as responsible or qualified for the processing of the Data of such subjects, in relation to their duties, shall have access to the pertinent Data. The access of data is always linked to the purposes pointed out previously.

In addition, the Data subject’s data may be communicated to:

a) public entities both national and international such as Ministries and Public Administration Offices, in relation to the performance of the institutional tasks of the University including those related to procedures for issuing the permit to stay;

b) bank institutes, in particular Banca Popolare di Sondrio S.C.p.A., under the scope of the contract with the data subject;

c) public and private bodies to demonstrate the previous experience and skills and field of excellence of the University and of its professors and researchers;

d) natural persons or legal entities, external bodies and associations, including public, professional studios and companies (also outside of the Republic of Italy), for the scope of the contract with the data subject and legitimate Bocconi University interests;

e) close relatives in the case where it could be necessary to inform them and provide them with urgent communications;

f) international entities, in relation to the participation in international programs or funding activities when the destination country complies with the adequacy principle of the GDPR.

5. Granting of Data

The following Data will not be subject to your consent: Data processed for security and internal organization purposes; Data for the fruition of requested and subscribed goods and services and Data processing for the compliance of legal obligations. Data that is being processed upon your consent might not be needed necessarily but will be significant for us in order to provide some services for your interest.

Data you provide will be located in servers located in the European Economic Area.

6. The basis for processing your information and how we use it

We may process your personal data because:

it is necessary for the performance of a contract or a collaboration agreement with your company;
it is necessary to provide or receive the goods and services contained in the contract, as well as other ancillary activities;
it is necessary for the performance of our tasks carried out in the public interest as an academic institution;
it is necessary for our or a third party's legitimate interests, including security and internal organisation measures and institutional communications;
your consent has been given;
it is necessary to comply with a legal obligation.

7. International Data Transfers

Some of the personal data we process about you will be transferred to and stored at a destination outside the European Economic Area ("EEA"), for example where it is processed by staff operating outside the EEA who work for us or for one of our suppliers or our partner, or where personal data is processed by one of our suppliers which are based outside the EEA or who use storage facilities outside of the EEA.

In these circumstances, your personal data will only be transferred on one of the following bases:

where the transfer is subject to one or more of the "appropriate safeguards" for international transfers prescribed by applicable law (e.g. standard data protection clauses adopted by the European Commission);
a European Commission decision provides that the country or territory to which the transfer is made ensures an adequate level of protection; or
there is another situation where the transfer is permitted under applicable law (e.g. where we have your explicit consent).

8. Data Subject´s Rights

Data subjects have the following rights:

to require correcting the personal data we hold about you if it is incorrect;
to require erasing your personal data;
to require restricting our data processing activities (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal);
to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller;
to object, on grounds related to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights.

Please note that the above rights are not absolute and we may be entitled to refuse requests where exceptions apply.

If you have given your consent and you wish to withdraw it, please contact the responsible using the contact details set out below. Please note that where our processing of your personal data relies on your consent and where you then withdraw that consent, we may not be able to provide all or some aspects of our services to you and/or it may affect the provision of those services.

9. Contact us

If you have any queries about this privacy notice or how we process your personal data, you can contact our Data Protection Officer at the following e-mail address: dpo@unibocconi.it

Bocconi University is the Data controller for the purposes of the personal data processed under this policy.