Information notice on the processing of navigation Data and cookies

Website navigation

1. Introduction

In accordance with the provisions of current legislation on the protection of personal data, by means of this policy, Università Cattolica del Sacro Cuore, in its role as Data Controller (hereinafter also referred to as "University" or "Data Controller"), intends to provide users with all useful information regarding the characteristics of the processing carried out by the University in relation to navigation data on the website www.unicatt.it and in particular the cookies installed on the ALTIS website altis.unicatt.it.

This document is an integral part of the information notice on the processing of personal data, which can be consulted at the following link www.unicatt.eu/landings-privacy.

The information notice is rendered for all the websites of the unicatt.it domain and not even for other websites possibly consulted by the user through links.

2. Identity and contact details for the Data controller

The Data Controller of the data concerning users is Università Cattolica del Sacro Cuore, with registered office in Largo Agostino Gemelli 1, 20123 Milan, tel. (+39) 027234.1.

3.  Categories of personal data

Università Cattolica del Sacro Cuore, as Data Controller, collects the following data:

  • user identification data, such as, for example, IP addresses and computer domain names, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request and the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment: the computer systems and software procedures used to operate the site acquire, during their normal operations, some personal data whose transmission is implicit in the use of Internet communication protocols or is used to improve the quality of the service offered. This information is not collected to be associated with identified interests, but by their very nature could, through processing and association, allow users to be identified.
  • data relating to the use of the website by the user, through the use of technical, third party analytical and profiling cookies and data relating to the user's preferences, expressed while browsing the website: the website uses some cookies to make its services easy to navigate and to efficiently use the relevant web pages; the cookies used also make it possible to improve the service provided to users, making its use more effective and/or enabling certain functions.
  • data provided voluntarily by the user - identification information - for access to certain services offered through the website, for which please refer to the specific information in the relevant sections.

As far as the use of cookies is concerned, please refer to the specific sections of this policy.

4. Purpose of the processing and legal basis

The University processes personal data for the following purposes:

  • manage the correct use of the website;
  • evaluate, in statistical form, the use of the website by users;
  • collect information relating to user choices during web navigation;
  • send commercial information in line with the preferences expressed by the user during the browsing experience;
  • ascertain whether users have acted unlawfully to the detriment of third parties or to the detriment of the University
  • comply with European and national regulations, provisions of Public Administrations and/or Supervisory Authorities.

The legal basis of the processing is constituted by the consent of the interested party, expressed during the browsing experience and manifested during the consultation of the website.

The optional, explicit and voluntary sending of e-mails, messages or any type of communication addressed to the University's contact details indicated on the pages of the website, entails the subsequent acquisition of the sender's address or any other personal data that will be used to respond to requests. It is ensured that this treatment will be based on the principles of correctness, lawfulness, transparency, and protection of confidentiality pursuant to Article 13 of the GDPR 2016/679.

Specific summarised information is displayed on the pages of the websites set up for particular services on request.

5. Processing methods

Personal data are processed both in paper and electronic form (servers, cloud databases, application software, etc.). The University stores the user's personal information in accordance with certain fundamental criteria outlined below: referring in particular to the purposes of collection, the terms provided for processing for marketing purposes and the statute barred limitations dictated by law.

Apart from what specified for navigation data, the user is free to provide personal data contained in the forms on the University website or indicated during contacts to request information material, other communications or to access specific services. Failure to provide such data may make it impossible to obtain what has been requested.

Some pages on the University website may contain links to other websites that are not operated by Università Cattolica del Sacro Cuore. The University does not share personal information with such websites. The University is not responsible for the content, security, or privacy measures implemented by other sites and expressly refuses all liability.

6. Subject categories that the Data can be communicated to and Data tranfer

The data collected through cookies may be processed by employees and external companies that collaborate with the University, respectively as data processors and controllers. The list of designated data processors is constantly updated and available at the University's offices.

Such data will not be disclosed, but in the case of third-party cookies, they may also be transferred outside the European Union by and under the exclusive control of the companies that manage and install them.

7. Data Protection Officer

The University has appointed Ferdinando Zanatti as Data Protection Officer (D.P.O.), e-mail dpo@unicatt.it.

8. Rights of the Data subject

As an interested party, the user has the right to:

  1. Ask the Data Controller for access to the data, their cancellation, the rectification of inaccurate data, the integration of incomplete data, as well as the limitation of processing in the cases provided for by Article 18 of the GDPR;
  2. Oppose, at any time, in whole or in part, the processing of Data necessary for the legitimate pursuit of the interest of the Data Controller;
  3. In the event that the conditions for the exercise of the right to portability set forth in Article 20 of the GDPR are present, receive in a structured, commonly used and machine-readable format the data provided to the Data Controller, as well as, if technically feasible, transmit it to another Data Controller without hindrance;
  4. Withdraw the consent given at any time;
  5. Complain to the competent Supervisory Authority.

These rights may be exercised by registered mail, addressed to Università Cattolica del Sacro Cuore, General Management-Directorate - Privacy, Largo Agostino Gemelli 1, 20123, Milan, or by e-mail at dpo@unicatt.it.

Cookies

9. What are cookies

The management of the University's institutional website employs a technology called "cookies" together with other tracking tools (such as web beacons). Their use is mainly aimed at investigating how the website is used by users (most used pages, time spent, etc.), improving the website performance, facilitating and enhancing the user experience.

Cookies are small text strings that websites visited by the user send to the computer and any device used to access the Internet (such as smartphones and tablets), where they are stored and then transmitted to the same websites the next time the same user visits.

Cookies can be stored permanently and have a variable duration (the so-called persistent cookies - e.g. in order to automatically access a reserved area, users can choose to have their User-ID and password stored in one of these files), but they can also disappear when the browser is closed or have a limited duration (the so-called session cookies).

Cookies can be installed by the website you are visiting (the so-called first party cookies), but also by other websites (the so-called third-party cookies) and are used to perform computer authentication, session monitoring and storage of information regarding the activities of users who access a particular site.

The cookies, as indicated by the Guidelines cookies and other tracking tools of the Guarantor Authority, can be classified into two macro-categories:

  • technical cookies, used for the sole purpose of "carrying out the transmission of a communication on an electronic communication network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the contracting party or user to provide such service" (see article 122, paragraph 1 of the Code);
  • profiling cookies, used to trace determined, identified or identifiable subjects, specific actions or recurring behavioural patterns in the use of the functions offered (patterns) in order to group the various profiles within homogeneous clusters of different sizes, so that it is possible for the Data Controller, among other things, to modulate the provision of the service in an increasingly personalised manner beyond what is strictly necessary for the provision of the service, as well as to send targeted advertising messages, i.e. in line with the preferences expressed by the user when surfing the web.

Based on the purpose of use, they can also be divided into:

  • Navigation and functionality cookies: used respectively for authentication purposes and to improve the user experience (e.g. storing language preferences);
  • Analytical cookies: used by the operator of the website to collect information about users who visit the website; used to collect information, in aggregate form, on the number of users and the ways in which they visit the website.
  • Profiling cookies: used for advertising purposes to send messages in line with the preferences of users collected while surfing the web;
  • Social Cookies: used to allow interaction with social networks.

It is not necessary to obtain the user's consent for the installation of technical cookies. Cookies can be installed directly by the operator of the website or by a different website that installs them through the first one (the so-called "third party" cookies).

Users can obtain more detailed and updated information on the duration, as well as any other relevant information in the privacy policies of the respective third-party providers (through the links provided) or by contacting the Controller.

10. First-party technical cookies

The website uses the following types of first-party technical cookies:

  • Session cookies: fundamental to allow the user to move normally within the website and correctly use the relative services. Since they are not stored on the user's computer, they disappear when the browser is closed;
  • Functionality cookies: aimed solely at improving and speeding up navigation on the website, by storing certain choices made by the user (such as language preferences).

They are therefore tools used by the Data Controller to guarantee, for example, efficient navigation, session stability, log-in permanence and pre-selection of the chosen navigation country. They also serve to remember, in an anonymous form, the choices made by the user regarding the display of certain elements of the page, such as information and communication banners.

As already stated, the use of technical cookies and the performance of processing related to them does not require the user's prior consent.

In any case, it remains possible for the latter to prevent the installation of such cookies at any time through the settings of their browser, as indicated later in this policy, knowing that such a choice could, however, complicate, slow down and sometimes block navigation on the website and, more generally, on the Internet.

11. Third-party technical cookies

The website also uses cookies that are not managed and controlled by the Data Controller, as they belong to third parties. More specifically, these are:

A. Interaction with social networks and external platforms

This type of service allows for interactions with social networks, or other external platforms, directly from the pages of this Website. The interactions and information acquired by this Website are in any case subject to the User's privacy settings for each social network. This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it. It is recommended that you disconnect from the respective services to ensure that the data processed on this Website is not linked back to your profile.

  • Twitter Tweet button and social widgets (Twitter, Inc.)
    The Tweet button and Twitter social widgets are services for interacting with the Twitter social network, provided by Twitter, Inc.
    Personal data processed: Cookies and Usage Data.
    Processing place: United States - Privacy Policy.
  • Facebook Like button and social widgets (Meta Platforms, Inc. formerly Facebook, Inc.)
    The Facebook "Like" button and social widgets are services for interaction with the Facebook social network, provided by Meta Platforms, Inc, formerly Facebook, Inc.
    Personal data processed: Cookies and Usage Data.
    Processing Place: United States - Privacy Policy.
  • LinkedIn Button and Widgets (LinkedIn Corporation)
    The LinkedIn button and widgets are services for interaction with the LinkedIn social network, provided by LinkedIn Corporation.
    Personal data processed: Cookies and Usage Data.
    Processing Place: United States - Privacy Policy.
B. Displaying content from external platforms

This type of service allows users to view content hosted on external platforms directly from the pages of this Website and interact with them. This type of service may, however, collect data on web traffic related to the pages where the service is installed, even when users do not use it.

  • YouTube Video Widget (Google Ireland Limited)
    YouTube is a video content display service operated by Google Ireland Limited which enables this Website to integrate such content into its pages.
    Personal data processed: Cookies and Usage Data.
    Processing Place: Ireland - Privacy Policy.
  • Google Maps Widget (Google Ireland Limited)
    Google Maps is a map display service operated by Google Ireland Limited which allows this Website to integrate such content into its pages.
    Personal data processed: Cookies and Usage Data.
    Processing Place: Ireland - Privacy Policy.

If Users prefer not to receive cookies, they can prevent their transmission by the website by configuring their Internet browser accordingly. In some cases, however, the use of some parts of the website may be conditioned by the memorization of cookies on the User's computer.

C. Targeting and Advertising

This Website uses cookies and tracking tools to provide commercial content tailored to the users’ behaviour and to manage, deliver and track advertisements.

  • Facebook Like button and social widgets (Meta Platforms, Inc. formerly Facebook, Inc.)
    The Facebook "Like" button and social widgets are Facebook social network interaction services provided by Meta Platform, Inc. formerly Facebook, Inc.
    Personal data processed: Cookies and Usage Data.
    Processing Place: United States - Privacy Policy.
  • LinkedIn Button and Widgets (LinkedIn Corporation)
    The LinkedIn button and widgets are services for interaction with the LinkedIn social network, provided by LinkedIn Corporation.
    Personal data processed: Cookies and Usage Data.
    Processing Place: United States - Privacy Policy.
  • Twitter Social Widgets (Twitter, Inc.)
    These are services for interacting with the social network Twitter which allows, where Twitter acts as a third-party host, to collect data through a range of plug-ins and integrations, primarily used for tracking and targeting.
    Personal data processed: Cookies and Usage Data.
    Processing Place: United States - Privacy Policy.
D. Remarketing and behavioural targeting

This type of service allows this Website and its partners to communicate, optimize and provide advertisements based on your past use of this Website.
This activity is facilitated by tracking Usage Data and using cookies and tracking tools to collect information that is then transferred to partners who handle remarketing and behavioural targeting activities.
Some services offer a remarketing option based on mailing lists.
In addition to the opt-out features offered by the services below, you may opt-out by visiting the Network Advertising Initiative opt-out page.

Users may also opt out of certain advertising features through the corresponding device configuration options, such as mobile device advertising configuration options or generic advertising configuration.

  • Google Ads Remarketing (Google Ireland Limited)
    Remarketing Google Ads is a remarketing and behavioural targeting service provided by Google Ireland Limited that links the activity of this Website with the advertising network Google Ads and the DoubleClick Cookie.
    Users may opt out of the use of Google cookies for ad customization by visiting Google's Ads Settings.
    Personal data processed: Cookies and Usage Data.
    Processing Place: Ireland - Privacy Policy - Opt Out.
  • Facebook Remarketing (Meta Platforms, Inc. formerly Facebook, Inc.)
    Facebook Remarketing is a Remarketing and Behavioural Targeting service provided by Meta Platforms, Inc. formerly Facebook, Inc. that links the activity of this Application with the Facebook advertising network.
    Personal data collected: Cookies and Usage data.
    Processing Place: United States - Privacy Policy.

Users may opt out of Facebook cookies for ad customization by visiting Google's Ads Settings.

12. Analytical cookies

A. Cookies for anonymous statistics

Google Analytics cookie through which information is collected, in an aggregated and anonymous way, on how the website is used by users (number of visitors, pages visited, dwell time, conversions, etc.). This information is generally used to improve the functionality of the website, allowing, for example, to record any errors detected by users and ensure, therefore, a smoother and more immediate navigation.

However, it is not possible to exclude, as these activities are outside the control of the Data Controller, that Google may enrich or cross the information obtained through these cookies - that the user's browser transmits to Google in the United States according to the relevant terms of service - with other data at its disposal, for purposes outside the scope of this policy. To disable the installation of these cookies, please follow the procedures indicated in the following links (disablement of Google Analytics cookies)

  • Google Analytics with anonymized IP (Google Ireland Limited)
    Google Analytics is a web analytics service provided by Google Ireland Limited ("Google"). Google uses the Personal Data collected in order to track and examine the use of this Website, compile reports and share them with other services developed by Google.
    Google may use Personal Data to contextualize and personalize ads in its advertising network.
    This Google Analytics integration anonymizes your IP address. The anonymization works by shortening the IP address of the Users within the borders of the member states of the European Union or other countries that are party to the Agreement on the European Economic Area. Only in exceptional cases, the IP address will be sent to Google's servers and shortened within the United States.
    Personal data processed: Cookies and Usage Data.
    Processing Place: Ireland - Privacy Policy - Opt Out.
B. Analytical cookies for non-anomie statistics

The services contained in this section allow the Data Controller to monitor and analyse traffic data and are useful to keep track of the User's behaviour.

  • Google Analytics (Google Ireland Limited)
    Google Analytics is a web analytics service provided by Google Ireland Limited ("Google"). Google uses the Personal Data collected in order to track and examine the use of this Website, compile reports and share them with other services developed by Google.
    Google may use Personal Data to contextualize and customize ads in its advertising network.
    Personal data processed: Cookies and Usage Data.
    Processing place: Ireland - Privacy Policy - Opt Out.
  • Google Ads Conversion Tracking (Google Ireland Limited)
    Google Ads conversion tracking is a statistical service provided by Google Ireland Limited that links data from the Google Ads network with actions taken within this Website.
    Personal data processed: Cookies and Usage Data.
    Processing place: Ireland - Privacy Policy.
  • LinkedIn Conversion Tracking (LinkedIn Insight Tag) (LinkedIn Corporation)
    LinkedIn Conversion Tracking (LinkedIn Insight Tag) is a behavioural targeting and statistics service provided by LinkedIn Corporation that links data from the LinkedIn ad network to actions taken within this Website. The LinkedIn Insight Tag tracks conversions that can be attributed to LinkedIn ads and allows for the targeting of groups of Users based on their prior use of this Website.
    Users may opt-out of behavioural advertising features through their device settings, their LinkedIn account settings, or by visiting the Ad Choices opt-out page.
    Personal Data Processed: Usage Data, Device Information and Tracking Tool.
    Processing place: United States - Privacy Policy.

13. How to disable cookies

Without prejudice to the right to object to the installation of cookies in the modalities indicated above, considering that most browsers are programmed to accept cookies automatically, the user may choose not to receive them, especially when the third party involved does not give the opportunity to properly opt-out, even by accessing the browser settings and disabling their use, according to the procedures described at the following addresses:

In any case, it should be noticed that disabling cookies may complicate Internet navigation or prevent users from moving freely from one page to another, enjoying all the website functions.

For further information on cookies, please visit www.youronlinechoices.com (limited to the services surveyed by this platform), to obtain information on how to delete or manage cookies according to the browser used and to set preferences for the use of third-party cookies.

In addition, whenever the use of Cookies (and/or tracking tools) is dependent on consent, the User can give or revoke such consent by setting their preferences within the cookie policy.

Users can also remove previously saved cookies and/or tracking tools using special browser or device functions.

Other tracking tools in the browser's local memory can be removed by deleting the browsing history.

With regard to third party cookies, Users may manage their preferences and revoke their consent by visiting the relevant opt out link (if available), using the tools described in the third party's privacy policy or contacting the third party directly.

Users may also manage certain cookies and tracking tools for mobile applications by turning them off through appropriate device settings, such as mobile advertising settings or tracking settings in general (Users may consult their device settings to find the relevant one).

Vuoi rimanere sempre aggiornato sui nostri corsi e le iniziative per te? Lasciaci i tuoi contatti