Privacy clause

Privacy policy: translation of the existing institutional text

This is an English translation of the institution's existing notice, which refers to Italian Legislative Decree 196/2003. The notice contains historical provisions and requires institutional and legal review before it can serve as the current privacy information for the academic portal.

General information

International European Academy describes collecting information through voluntary requests and subscriptions on its website, https://www.campusiea.com. It states that no more personal information is requested than is reasonably necessary to answer enquiries and that commercial information may be sent with consent.

Data controller and processing location

The existing text identifies International European Academy as the controller of data processed through the campus portal. It describes processing at the organisation's premises by authorised staff or external personnel responsible for maintenance and updates.

Information provided when requesting services or information is used to fulfil the request. Disclosure to third parties is described as limited to what is necessary for the requested service. The text lists internal staff, collaborators, representatives, administrative, tax, accounting and IT advisers, banks and financial institutions, legal representatives, debt-recovery personnel, document-delivery providers and business-control personnel.

Browsing data

The original notice explains that computer systems and software may obtain data implicit in internet communication protocols, including IP addresses, domain names and information about operating systems and computing environments. Such information is not collected for association with identified individuals but may permit identification when combined with data held by third parties.

The text states that browsing data are used to produce anonymous usage statistics and check that the website operates correctly.

Information voluntarily supplied

Sending an email voluntarily to an address on the website provides the sender's address, which is needed to reply, and any other personal information included in the message.

Google Analytics: historical provision

The existing notice describes Google Analytics, cookies stored on a user's computer, and the transmission of website-usage information, including IP addresses, to Google servers in the United States. It describes Google using the information to analyse use, compile reports and provide related services, and possible disclosure where required by law or to processors acting for Google.

It further states that Google does not associate the user's IP address with other Google data, that cookies may be refused through browser settings at the possible expense of some functionality, and that using the site implies consent. This reproduces the historical notice, not a confirmation that Analytics is currently installed or that implied consent is an adequate current consent mechanism.

Providing information

Apart from browsing data, the original notice states that users are free to provide personal information through request forms or requests for information. Not providing necessary information may prevent a response. It also refers to compulsory information requests by the competent authority under Article 157 of Legislative Decree 196/2003 in cases outside the site's ordinary operation.

Processing methods

The text describes automated processing for the time strictly necessary to fulfil the purpose of collection, with security measures intended to prevent loss, unlawful or incorrect use and unauthorised access.

Rights described in the original notice

The notice refers to Article 7 of Legislative Decree 196/2003 and describes rights to confirmation that personal data exist, access to content and origin, verification of accuracy, completion, updating and correction. It also describes requests for erasure, anonymisation or blocking of unlawfully processed data, and objection to processing on legitimate grounds.

The stated contact for these requests is [email protected]. The institution must confirm its current controller details, privacy contact, applicable rights, retention periods, recipients and international transfers in an updated notice.

Information for people sending enquiries

The additional notice under Article 13 of Legislative Decree 196/2003 concerns individuals, and their organisations where relevant, who intend to send messages using the website's contact addresses. It supplements the general privacy policy.

It states that data are processed only for the purposes expressed in received messages, such as responding to information requests, and are retained only as long as necessary to provide a response. Electronic tools and organised procedures are used, and supplied information is stored in a database managed by the controller.

The original notice asks users not to send sensitive information, such as health information, religious beliefs or political opinions. It states that such information will be deleted without express written authorisation for processing.

Users are directed to the responsible contact listed in the policy or homepage to exercise rights, including access, correction, updating and objection for legitimate reasons. This translation does not replace the updated legal notice required for current processing.