Privacy Policy
Notice on the Processing of Personal Data
SCOPE AND PROCEDURES
Pursuant to Article 13 of EU Regulation 2016/679 (“GDPR”), we hereby inform you that your personal data will be processed under the following terms and conditions:
1. TYPES OF DATA PROCESSED
The Data Controller may process the following categories of data:
- Data voluntarily provided by the user: The optional, explicit and voluntary submission of personal data by the user—such as name, surname, legal name, address, telephone number, e-mail address, and banking details for donations—through any of the forms on this website entails the acquisition of such data by the Data Controller.
- Browsing data: The IT systems and software procedures used to operate this website acquire, during normal use, certain personal data, the transmission of which is implicit in the use of Internet communication protocols (e.g. IP addresses of users’ computers, the URLs of requested resources, the time of the request, the method used to submit the request to the server, the size of the response file, the numerical code indicating the status of the response, and other parameters related to the user’s operating system and IT environment).
2. WHY WE COLLECT AND USE PERSONAL DATA AND LEGAL BASIS
In accordance with Article 13 of the GDPR, we inform you that personal data is processed for the following purposes and on the following legal bases:
- To deliver the services requested by the data subject, including educational services and activities promoting peace and intercultural understanding within a residential school community. The legal basis is the performance of a contract to which the data subject is party or of pre-contractual measures adopted at the request of the data subject;
- To comply with contractual obligations, legal and regulatory requirements, including those at national and EU level, and to fulfil administrative, accounting, and tax obligations. The legal basis is compliance with a legal obligation to which the Data Controller is subject;
- To ensure the technical functionality of the website through the use of browsing data. The legal basis is the legitimate interest of the College;
- To conduct wealth screening in order to identify prospective donors who may support the College’s mission and values. The legal basis is the legitimate interest of the College;
- To collect data voluntarily submitted via online forms for the purposes of donations and/or information requests. The legal basis is informed consent and the legitimate interest of the College in promoting its mission and values;
- To send newsletters. The legal basis is the data subject’s consent.
3. HOW AND HOW LONG WE COLLECT AND USE YOUR DATA
Data will be processed lawfully, fairly, and in a manner that ensures appropriate security and confidentiality. Processing may be carried out using paper-based or electronic systems. Data will be stored in accordance with applicable laws and retained only for as long as is strictly necessary to fulfil the purposes outlined above. Browsing data is deleted immediately after processing.
4. NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSING TO COMPLY
The provision of data for the purposes outlined in points 2 (a), (b), (c), (d), and (e) is necessary to properly deliver the requested services and related administrative operations. Failure to provide such data will make it impossible for the College to proceed with the requested services.
The provision of data for the purposes described under point 2 (f) is optional and requires your specific consent. Refusing to provide such consent will not affect the provision of the requested services.
5. DATA ACCESS AND SHARING
Your personal data may:
- Be accessible to the Rettore, employees, and collaborators of the Data Controller in their capacity as authorised personnel or system administrators;
- Be disclosed to third parties or entities (e.g. banks, professional firms, consultants, insurance companies) providing outsourced services on behalf of the Data Controller;
- Be shared with public and private entities, including law enforcement authorities;
- Be used for statistical or research purposes, provided that the data is anonymised and aggregated in such a way that data subjects cannot be identified;
- Be published on the website, in brochures, and in other College publications, provided that no identifying data is disclosed;
Be transferred outside the European Union in the context of the College’s services, to universities, research institutions, other UWC Colleges, relevant UWC National Committees, and UWC International. The Data Controller ensures that such transfers are carried out in full compliance with applicable legislation.
6. DATA SHARING AND THE EU
Personal data is stored on servers located within the European Union. Should it become necessary to transfer data to servers located outside the EU, the Data Controller will ensure such transfer is conducted in accordance with applicable data protection laws, including through the adoption of Standard Contractual Clauses approved by the European Commission.
7. HOW TO EXERCISE YOUR RIGHTS
As a data subject, you have the right to obtain confirmation from the Data Controller as to whether or not your personal data is being processed. You also have the right to:
- Access your data;
- Request rectification or erasure of your data;
- Request restriction of processing;
- Object to the processing at any time, including processing for direct marketing purposes or decisions based solely on automated processing;
- Request data portability;
- Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
- Lodge a complaint with the competent supervisory authority.
You may exercise your rights at any time by writing to:
UWC Adriatic Foundation – ETS
Località Duino, Via Trieste 29
34011 Duino Aurisina (TS), Italy
Email
9. DATA CONTROLLER
The data Controller is UWC Adriatic – Collegio del Mondo Unito dell’Adriatico O.N.L.U.S., Loc. Duino, Via Trieste 29, 34011 Duino Aurisina (TS), email.
