Alumni Privacy Policy

Information pursuant to Articles 13 of the European Data Protection Regulation 2016/67G (hereinafter "GDPR") 

With this information, pursuant to the provisions of Article 13 of the GDPR, we wish to inform you about the processing of your personal data for the purpose of participation in the John Cabot University Alumni
Association, which will be carried out in compliance with the applicable legislation on the protection of personal data.

DATA CONTROLLER
John Cabot University (hereinafter “JCU” or just “University”), with registered office in Via della Lungara, 233, 00165 Rome, Italy, is the Data Controller.

CATEGORIES OF DATA PROCESSED
For the purposes described in the following paragraph, the Data Controller will process the following data related to you:

1. Contact details (email and mailing address);
2. Personal data (first and last name, profession, and any data necessary for participation retrieved from the John Cabot database through the student ID).

No processing of special data or any type of profiling will be carried out.

PURPOSE OF PROCESSING AND LEGAL BASES
Personal data will be processed for the following purposes:

Communications related to training courses, conferences, and informative, cultural, or scientific events
offered or sponsored by the Controller through the Alumni Office, using automated means of email, postal mail, phone calls by operators, and other informational materials.

The legal basis for the processing is your specific consent, which you are free to give or withhold, and which can be revoked at any time. 

DATA PROCESSING METHODS AND DATA RETENTION
The processing of Your Data will be carried out using suitable paper, electronic, and/or telematic tools in compliance with the legal provisions on the processing of personal data, adopting adequate security
measures to ensure the security and confidentiality of the data. Your data will also be handled by specially designated, trained, and instructed personnel.

Electronic communication will be managed through Mailchimp's newsletter communication platform. Following your consent to receive communications, your identifying data will be stored on their servers. For further information, we invite you to consult Mailchimp's privacy policy at the Global Privacy Statement | Intuit.

DISCLOSURE AND CATEGORIES OF DATA RECIPIENTS
Data will not be disclosed and will be processed by duly trained and authorized internal staff.

The data may be communicated to third parties contractually bound to the data controller and solely for the achievement of the expressed purposes or to comply with contractual or legal obligations, belonging to the following categories: internal subjects responsible for managing IT systems, external subjects providing services for managing the information system and telecommunications networks, including email, newsletters, and website management.

The data will be stored in Italy or, in any case, in the European Area.

The list of any external data processors is constantly updated and available upon request at the Controller's office.

DATA RETENTION PERIOD
Your data will be kept for a period not exceeding the achievement of the purposes for which they are
processed, in full compliance with the principle of data conservation limitation provided by the Regulation, unless you revoke your consent.

DATA SUBJECT RIGHTS CHAPTER III OF THE GDPR
In accordance with the conditions set out in the GDPR, you can exercise, with respect to the data controller, the rights provided for in Articles 15 and following of the GDPR, if applicable. For example, you have the right to request:

• access to your data, in applicable cases;
• rectification of inaccurate data and integration of incomplete data;
• erasure of data for the reasons provided, such as when they are no longer necessary for the above- mentioned purposes or are not processed in compliance with the Regulation;      restriction of processing in the cases provided, such as when the accuracy of the data is contested, and verification of its accuracy is required;
• portability, meaning the right to receive, in applicable cases, your data in a structured, commonly used, machine-readable format and to transmit this data to another data controller;
• objection to processing in applicable cases.

In order to exercise the aforementioned rights, you may send an appropriate request to the email address of the DPO designated by the University: [email protected].

UPDATES
JCU reserves the right to modify the information on this document by publishing the changes on the website https://www.johncabot.edu/privacy-policies/website-privacy-policy, therefore we advise the data subject to periodically check this information.