Accommodation Service
Accoglienza degli ospiti presso le strutture residenziali universitarie Italian Version

Pursuant to the aforementioned regulations, in relation to personal data of which EDiSU will come into possession through the substitute declaration, the following is communicated:

• The data controller is the ‘Ente per il diritto allo studio universitario’ (hereinafter, EDiSU) (CF./P.IVA 02205710185), with its registered office in Via Sant'Ennodio, 26 - 27100 PAVIA
• The data handled is that provided by the declarant.
• It may be that in relation to the statements made, EDiSU may come into possession of special categories of personal data that reveal racial or ethnic origin, political opinions, religious or philosophical convictions, as well as genetic data, biometric data intended to unequivocally identify a subject, or data relating to the health of the applicant or his family. For its handling, the law requires a specific declaration of consent, which you will find in the online application procedure.
• The handling aims:
  • to fulfil all legal obligations related to civil, fiscal, accounting or any other rules, to European Union directives or regulations, also regarding public tenders;
  • cover contractual activities, the presentation of contractual offers, conclusion of agreements and contracts and any related activity, including those preliminary to the conclusion itself, fulfilment and execution of contractual obligations, administrative management of the relationship, checks and certifications:
  • to exercise every right and every legal action of this explanatory document and the subsequent relationship in the interest and protection of EDiSU in every setting, including judicial, also according to the art. 6, paragraph 1, lett. f, GDPR.
• The declarant's data is collected and will be handled only in a manner that is strictly necessary to the meeting of the aforementioned aims.
• Personal data may also be handled by specially appointed parties with the aid of electronic, computerized or telematic tools, with logic strictly related to the same aims and, in any case, according to procedures that guarantee the prudence, security and confidentiality of the data according to the provisions of the relevant laws, in compliance with the security measures pursuant to art. 32 of the GDPR and articles 33-36 of Annex B of Legislative Decree 196/2003, in compliance with the provisions of art. 29 of the GDPR. It should be noted that, in compliance with the principles of lawfulness, limitation of aims and data minimization, pursuant to art. 5 of the GDPR, the period of personal data storage is established for a period of time not exceeding the fulfilment of the aims for which they are collected and handled and in compliance with the deadlines prescribed by law.
• The personal data of the declarant may be communicated to bodies including the Ministry of Finance, the Guardia di Finanza and the state police for any checks that may be required, to subjects who provide functional services to those bodies cited above, to subjects who process the data in the execution of specific legal obligations, and to judicial or administrative authorities for the fulfilment of legal obligations.
• The data may be made accessible to those within EDiSU who require it due to their duties or position (staff, employees, collaborators, students in accommodation). These subjects, whose number will be as limited as possible, in compliance with the principle of data minimization, will be appropriately trained in order to avoid the loss, destruction, unauthorized access or unauthorized handling of the data
• The data may also be made accessible and transmitted, for all legal purposes, to third parties and / or companies (for example professional practices, professionals, consultants) who carry out activities on behalf of EDiSU.
• The data may also be revealed to the data processors and persons in charge of the processing as well as the persons in charge of the maintenance of the electronic processors and of the management software supplied to the body.
• The declarant’s personal data is not subject to any entirely automated decision-making process, including profiling.
• In compliance with the provision of art. 13, paragraph 1, lett. a), Legislative Decree 196/2003 and Articles 13, paragraph 1, lett. f), and 15, paragraph 1, lett. c) GDPR, we inform you that the personal data you provide may be disseminated nationally and to European Union countries to the subjects referred to in point 3) above.
• In compliance with the provision of art. 13, paragraph 1, lett. e), Legislative Decree 196/2003, as well as art. 13, paragraph 2 and 15 GDPR, we inform you that it is your right to:
  • obtain from EDiSU confirmation of the existence, or non, of personal data concerning you, even if not yet recorded, and their transmission in intelligible form;
  • obtain information regarding the logic applied in cases where data handling is carried out with the aid of electronic tools;
  • obtain information regarding the subjects or categories of subject to whom the personal data may be transmitted or who may learn about it as an appointed representative of the state, as management staff or staff appointed to handle the data;
  • obtain any updates, rectifications, data integrations or limitations of handling by EDiSU;
  • obtain the deletion, transformation into anonymous form or blocking of data handled in violation of the law, including data which does not need to be kept for the purposes for which the data was collected or subsequently handled and therefore to oppose any handling carried out in violation of the law;
  • obtain the certification that the operations referred to in letters d) and e) have been brought to the attention, also with regard to their content, to those to whom the data has been transmitted or disseminated, except in cases in which such fulfilment proves impossible or involves the use of means manifestly disproportionate to the protected right;
  • the right to object, in whole or in part and for legitimate reasons, to the handling of personal data provided;
  • to lodge a complaint with the supervisory authority pursuant to art. 77 GDPR
  • the right to obtain a copy of the personal data being handled, with a notification that, should further copies be requested by the data subject, EDiSU may charge a reasonable fee to cover administrative costs. If the interested party submits the request by electronic means, and unless otherwise indicated by the interested party, the information is provided in a commonly-used electronic format.
• The declarant may, at any time, exercise his/her rights outlined in this explanatory document by sending a letter to EDiSU (CF / P.IVA 02205710185) with its registered offices in Via Sant'Ennodio, 26 - 27100 PAVIA, by e-mail, to [email protected], to the PEC [email protected] or by registered post.