Go to the content

Privacy Policy

This privacy notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and concerns the processing of personal data carried out in connection with the consultation and use of this institutional website of the Scuola Normale Superiore.

Data Controller

The Data Controller is the Scuola Normale Superiore, represented by its Director pro tempore, with registered office at Piazza dei Cavalieri 7, 56126 Pisa, Italy.

Telephone: +39 050 509111
Certified email (PEC): protocollo@pec.sns.it

Data Protection Officer

The Data Protection Officer (DPO) of the Scuola Normale Superiore can be contacted at:

Email: dpo@sns.it
Telephone: +39 050 500082

Purposes of the processing and legal basis

Personal data processed through this website are used by the Scuola Normale Superiore for purposes related to the management, security and proper functioning of the website, the dissemination of institutional information and the provision of services requested by users.

Processing is mainly carried out in the performance of tasks carried out in the public interest by the Scuola Normale Superiore or in the exercise of its official authority, pursuant to Article 6(1)(e) of Regulation (EU) 2016/679, as well as on the basis of any other applicable legal provisions.

Where processing is based on the data subject’s consent, consent constitutes the legal basis pursuant to Article 6(1)(a) of the Regulation.

Categories of data processed

Browsing data

The IT systems and software procedures used to operate this website acquire, as part of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes, by way of example:

• IP addresses or domain names of the devices used by users;
• URI/URL addresses of the requested resources;
• date and time of the request;
• the method used to submit the request to the server;
• the size of the files received in response;
• the numerical code indicating the status of the server response;
• other parameters relating to the user’s operating system, browser and IT environment.

These data are processed to ensure the proper functioning of the website, obtain aggregated statistical information on its use and guarantee the security of IT systems.

The data may also be used to establish liability in the event of possible cybercrime or attacks affecting the website or the Scuola Normale Superiore’s infrastructure.

Data voluntarily provided by users

The optional sending of messages to the contact addresses published on the website, or the use of online services and forms, entails the acquisition of the data required to respond to users’ requests and provide the requested service.

By way of example, identification and contact details may be processed, such as name, surname, email address and telephone number, as well as any further personal data voluntarily included by the data subject in communications.

Where specific services involve the processing of personal data, dedicated privacy notices are provided, where necessary, on the relevant pages or during the relevant access procedures.

Processing methods

Personal data are processed using electronic and telematic tools in accordance with the principles of lawfulness, fairness, transparency, data minimisation and storage limitation, and with appropriate technical and organisational measures designed to ensure their security and confidentiality.

Processing is carried out exclusively for the purposes for which the data were collected.

Categories of recipients

Personal data may be processed by employees and collaborators of the Scuola Normale Superiore who are authorised to process such data and have been appropriately instructed, as well as by system administrators within the scope of their respective responsibilities.

Where necessary, personal data may also be processed by external parties providing technical, IT or organisational services to the Scuola Normale Superiore and acting, where applicable, as data processors pursuant to Article 28 of Regulation (EU) 2016/679.

Data may also be disclosed to other public administrations or public bodies where required by law or where necessary for the performance of their respective institutional duties.

Personal data are not disseminated, except where required by applicable legislation.

Transfers of data to third countries

Where possible, the Scuola Normale Superiore gives preference to processing carried out within the European Economic Area.

Where the use of third-party services involves the transfer of personal data to countries outside the European Economic Area, such transfers are carried out in compliance with the conditions laid down in Articles 44 et seq. of Regulation (EU) 2016/679.

For further information on processing carried out by external service providers, please refer to their respective privacy policies.

Data retention period

Personal data are retained for no longer than is necessary for the purposes for which they were collected, in accordance with applicable legal obligations and IT security requirements.

Browsing data and technical logs are retained in accordance with the procedures adopted by the Scuola Normale Superiore for the management and security of its IT systems.

For data voluntarily provided by the data subject and processed in connection with specific services, the relevant retention periods are indicated, where necessary, in the corresponding privacy notices.

Rights of the data subject

Where applicable, data subjects may exercise the rights provided for under Articles 15 et seq. of Regulation (EU) 2016/679 and, in particular, may:

• obtain access to their personal data;
• request the rectification or completion of inaccurate or incomplete data;
• request erasure of their personal data where permitted by law;
• obtain restriction of processing;
• object to processing in the cases provided for under Article 21 of the Regulation;
• withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

Requests may be addressed to the Data Controller or to the Data Protection Officer using the contact details provided in this privacy notice.

Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) pursuant to Article 77 of Regulation (EU) 2016/679.

Mandatory or optional provision of data

Except for browsing data necessary for the operation of the website, users are free to decide whether or not to provide their personal data.

However, failure to provide data indicated as necessary may make it impossible to provide certain services or respond to users’ requests.

Cookies and other tracking technologies

Cookies are small text files that websites may store on the device used by a user while browsing.

This website uses cookies and other technical tools that are necessary for its operation and for the provision of services requested by users.

Technical cookies do not require users’ consent, without prejudice to the obligation to provide the information required by applicable legislation.

Web Analytics Italia

This website uses Web Analytics Italia (WAI), the national platform for collecting and analysing statistical data relating to the use of Italian public administration websites.

For this purpose, analytical cookies may be used to collect aggregated information on the number of users and on how the website is used.

Web Analytics Italia provides for the anonymisation of users’ IP addresses and states that the cookies used do not allow users to be identified or profiled.

Where configured in accordance with the requirements of applicable legislation, analytical cookies used solely to produce aggregated statistics may be treated in the same way as technical cookies and therefore do not require prior consent.

For further information, please refer to the Web Analytics Italia privacy policy.

Third-party multimedia content

Some pages of the website may include videos or other content hosted on third-party platforms, such as YouTube.

Such content is not loaded automatically where this would involve the use of cookies or other tracking technologies that are not strictly necessary.

Before the content is displayed, users are therefore asked to provide their consent.

Only after consent has been given may the browser connect to the external provider’s servers, which may use cookies or other identifiers in accordance with its own data protection policies.

For YouTube content, please refer to Google’s privacy policy.

Users may modify or withdraw any consent previously given at any time by using the preference management tools available on the website.

Managing cookies through the browser

Users may also configure their browser to receive notifications about cookies, or to reject or delete some or all cookies.

Disabling technical cookies may, however, affect the proper functioning of some website features.

Information on how to manage cookies is available in the support documentation for the main browsers:

• Chrome
• Firefox
• Safari
• Microsoft Edge
• Opera

Updates to this privacy policy

This privacy policy may be updated to reflect changes in legislation, organisational arrangements, technical configurations or the services used by the website.

Users are therefore advised to consult this page periodically.

---