Privacy Policy of www.artecomraise.it

WHY THIS NOTICE
This page describes how the site manages the personal data of users who consult it. It is an information notice that is also provided pursuant to the EU General Regulation 2016/679 (hereinafter “GDPR”) on the protection of personal data to those who interact with the web services of the University of Teramo, accessible electronically from the address: www.artecomraise.it
(hereinafter “website”). The information is provided only for the site www.artecomraise.it of the University of Teramo and not for other websites that may be consulted by the user through links. The information notice also takes inspiration from Resolution No. 13 of March 1, 2007 “on the internet and e-mail” by the Privacy Guarantor, to identify some minimum requirements for the online collection of personal data, and, in particular, the methods, times, and nature of the information that the data controllers must provide to users when they connect to web pages, regardless of the purposes of the connection. The Recommendation and a brief description of its purposes are reported on the official website of the Privacy Guarantor. Following consultation of this site, data relating to identified or identifiable persons may be processed.

PLACE OF DATA PROCESSING
The processing connected to the web services of this site takes place at the legal headquarters of the University of Teramo, located at Campus “Aurelio Saliceti” via R. Balzarini 1 64100 Teramo, and is handled only by technical personnel of the Office in charge of processing, or by any persons in charge of occasional maintenance operations. The hosting/housing/cloud servers are located at ARUBA S.p.A, which is within the European Economic Area and acts in compliance with European standards (Privacy Policy). No data deriving from the web service is communicated or disseminated.

TYPES OF DATA PROCESSED

Navigation Data
The computer systems and software procedures responsible for the operation of this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified subjects, but by its very nature could, through processing and associations with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. This data is used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this possibility, currently, the data on web contacts do not persist for more than 30 days.

Data provided voluntarily by the user
To use the services provided by the University of Teramo, the completion of contact request forms and/or registration forms may be required, containing fields for the provision of mandatory and optional personal data. The provision of personal data indicated as mandatory is necessary to complete the contact request or registration procedure; therefore, failure to provide or partial provision of such data makes it impossible to register for the services and/or use them. The provision of non-mandatory data is optional; therefore, failure to provide or partial provision does not prevent registration and/or use of the services. The personal data requested by the University of Teramo for registration for the services may differ depending on the registration forms used. The voluntary and explicit sending of e-mails to the addresses indicated in the different access channels of this site does not require consent and involves the acquisition of the sender’s address and data, necessary to respond to requests, as well as any other personal data included in the message. This data is voluntarily provided by the user at the time of the service request.

COOKIES
As better explained in the “Cookie policy,” the website uses “cookies,” defined as short fragments of text (letters and/or numbers) that allow the web server to store on the client (the browser) information to reuse during the same visit to the website (session cookies) or later, for subsequent visits to the same website (persistent cookies). For more information, you can visit the Cookie Policy page where you can set the types of cookies to use.

PURPOSES AND LEGAL BASIS OF DATA PROCESSING
The Personal Data provided through the Site will be processed for the following purposes:

1. The Personal Data provided through the Site will be processed for the following purposes:
2. Purposes related to providing information about services available through the Site (e.g., contact requests via forms on the site, account registration, service provision, etc.);
3. Purposes of research/statistical analysis on aggregated or anonymous data, without the possibility of identifying the user, aimed at measuring the functionality of the Site and its operational functions, including the resolution of any technical problems;
4. Purposes aimed at preventing or preventing fraudulent activities or misuse that could damage the site or compromise the security of operations;
5. Purposes related to the fulfillment of a legal obligation to which we are subject;
6. Purposes necessary to ascertain, exercise, or defend a right in judicial proceedings or whenever the judicial authorities exercise their judicial functions;
7. Purposes for sending advertising, informational, promotional material, and periodic updates on initiatives, services, products, and events of the University of Teramo (so-called marketing).

The processing of personal data for the purposes from point a) to point e) above does not require your express consent (art. 24, lett. a) and b) of the Code and art. 6 lett. b) and e) of the GDPR) as they are part of a service contract, and the legal basis of the processing is based on the legitimate interest of the Data Controller to fulfill contractual obligations towards the data subjects based on their respective requests. The processing of personal data for the purposes in point f) above requires your express consent (art. 23 of the Code and art. 7 of the GDPR). This consent concerns both the automated and traditional communication methods described above. You will always have the right to oppose easily and free of charge, in whole or in part, to the processing of your data for these purposes, for example by excluding automated contact methods and expressing your desire to receive commercial and promotional communications exclusively through traditional contact methods. The legal basis of the processing is based on the data subject’s consent.

DETAILS ON THE PROCESSING OF PERSONAL DATA
Personal Data is collected for the following purposes and using the following services:

Direct Contact

Contact Form
By filling in the contact form with their data, the User consents to their use to send and receive information requests of any other nature indicated by the form header. Personal Data collected: email.

Contact via telephone
Users who have provided their telephone number may be contacted for informational or promotional purposes by the University of Teramo, as well as to fulfill support requests. Personal Data collected: phone number.

Interaction with social networks and external platforms
This type of service allows interactions with social networks, or other external platforms, directly from the pages of the website. Interactions and information acquired by the website are in any case subject to the User’s privacy settings related to each social network. In case a service of interaction with social networks is installed, it is possible that, even if Users do not use the service, it collects traffic data relating to the pages in which it is installed.

Platform monitoring
This type of service allows the website to monitor the use and behavior of the website, to enable performance and functionality improvement, maintenance, or problem resolution. Personal Data processed depends on the characteristics and mode of implementation of these services, which by their nature filter the website’s activity.

Statistics
The services contained in this section allow the Data Controller to monitor and analyze traffic data and serve to keep track of User behavior.

Directly collected statistics
The website may use an internal statistics system, which does not involve third parties, for additional statistics. Personal Data collected: Cookies and Usage Data.

PROVISION OF DATA
Apart from what is specified for navigation data, the user is free to provide personal data reported in the request forms or otherwise indicated in contacts with the Office to solicit the sending of orders, material, information, or other communications. Therefore, your possible refusal, even partial, to provide such data would make it impossible to establish and manage the relationship itself and to provide the requested service.

PROCESSING METHODS
The processing of data is carried out both through paper supports and with the help of automated electronic tools (by means of our computer system and in this case the data will be recorded on protected computer supports) for the time strictly necessary to achieve the purposes for which they were collected. These supports, both electronic and paper, will be properly maintained and protected by us for the entire time necessary for processing through procedures suitable to guarantee their security and confidentiality to prevent data loss in compliance with the security measures of art. 32 of GDPR 2016/679, from unlawful or incorrect uses, and unauthorized access.

DURATION OF PROCESSING AND PERIOD OF STORAGE OF PERSONAL DATA
The data collected are processed for the time necessary for the purposes for which they were collected, and in any case not beyond the times prescribed by the law. Data necessary for tax purposes are stored until the assessments relating to the corresponding tax period are defined, therefore for at least 10 years and more if the relevant year is not yet prescribed for tax purposes. Upon expiration of this term, the data will be deleted or anonymized unless there are further purposes for their storage (e.g., warranty provision obligations, tax obligations). Personal data that are no longer necessary, or for which there is no longer a legal basis for storage, are irreversibly anonymized (and in this way may be stored) or securely destroyed. Below we report the storage times in relation to the different purposes listed above:

1. Fulfillment of contractual obligations: Data processed to fulfill any contractual obligation may be kept for the entire duration of the contract and in any case not beyond the subsequent 10 years, in order to verify any outstanding issues including accounting documents (e.g., invoices).
2. Operational management and purposes strictly related to access to the website: May be kept for one month from the date we obtained your last consent for this purpose (excluding opposition to receiving further communications), after which they will be destroyed or anonymized.
3. Customer satisfaction survey purposes: Data processed for this purpose may be kept for one month from the date we obtained your last consent for this purpose (excluding opposition to receiving further communications).
4. Disputes: In the event that we need to defend ourselves or act or even make claims against you or third parties, we may keep the personal data we reasonably deem necessary to process for such purposes, for as long as such a claim can be pursued.
5. If the data collected are processed based on explicit consent, they will be processed until revocation of the same, or until the end of the provided service and in the absence of it, they will be kept for a maximum period of one month after which they will be destroyed or anonymized.

RIGHTS OF THE DATA SUBJECTS
We inform you that as a data subject, you have, pursuant to Articles 15 to 23 of the GDPR 2016/679, the following rights which you can exercise by making a specific request to the Data Controller and/or the data processor, in addition to the right to lodge a complaint with a supervisory authority:

Art. 15 – Right of access
The data subject has the right to obtain from the data controller the confirmation of whether or not personal data concerning them is being processed and, if so, access to the personal data and information regarding the processing.

Art. 16 – Right to rectification
The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning them without undue delay. Considering the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by providing a supplementary statement.

Art. 17 – Right to erasure (right to be forgotten)
The data subject has the right to obtain from the data controller the erasure of personal data concerning them without undue delay, and the data controller has the obligation to erase personal data without undue delay.

Art. 18 – Right to restriction of processing
The data subject has the right to obtain from the data controller the restriction of processing when one of the following applies:

1. the data subject contests the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
2. the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead;
3. although the data controller no longer needs the personal data for processing purposes, the data is required by the data subject for the establishment, exercise, or defense of legal claims;
4. the data subject has objected to the processing pursuant to Article 21, paragraph 1, pending the verification of whether the legitimate grounds of the data controller override those of the data subject.

Art. 20 – Right to data portability
The data subject has the right to receive the personal data concerning them, which they have provided to a data controller, in a structured, commonly used, and machine-readable format, and has the right to transmit those data to another data controller without hindrance from the data controller to which the personal data have been provided. In exercising their rights with respect to data portability according to paragraph 1, the data subject has the right to have the personal data transmitted directly from one data controller to another, where technically feasible.

Art. 21 – Right to object
The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them pursuant to Article 6, paragraph 1, letters e) or f), including profiling based on those provisions.

Art. 22 – Right not to be subject to automated decision-making, including profiling
The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

COMMUNICATION AND DISCLOSURE
Your data will not be “disclosed” by us (with this term meaning making it known to unspecified subjects in any way, including by making it available or consulting it, unless specific consent is given by the data subject with a separate act). Your data may instead be “communicated” by us (with this term meaning making it known to one or more specific subjects) in the following cases:

• to individuals within the University of Teramo tasked with processing your data, specifically those in administrative offices;
• to individuals who may access the data by virtue of legal, regulatory, or community law provisions, within the limits established by such rules;
• to individuals who need access to your data for auxiliary purposes related to the relationship between you and us, strictly necessary to perform the auxiliary tasks assigned to them;
• to our consultants, within the limits necessary to perform their duties at the University of Teramo, or in an outsourcing regime, as external Data Processors, following our letter of appointment that imposes the duty of confidentiality and security in the processing of your data.

METHODS OF EXERCISING RIGHTS
You may exercise your rights or revoke consent at any time by sending a communication to the addresses and in the manner indicated below.

THE “CONTROLLER” OF THE PROCESSING
We inform you that the Data Controller is the University of Teramo, represented by the Legal Representative pro-tempore, with its legal headquarters at Campus “Aurelio Saliceti” via R. Balzarini 1 64100 Teramo, electively domiciled at the headquarters of the University of Teramo, to which communications for the exercise of the rights recognized to the data subject pursuant to Articles 15 to 23 of the GDPR should be sent by registered letter, certified email (PEC), or regular email, where the complete list of subjects to whom the data can be communicated is also available.

Requests should be addressed to: protocollo@pec.unite.it
Telephone: 0861.2661
This privacy policy is updated as of 02/26/2025