An American university in the heart of Rome
Fundraising Privacy Information
privacy
Fundraising Privacy Information

Fundraising Privacy Information

Information pursuant to Article 13 of the European Data Protection Regulation 2016/679 (hereinafter the “GDPR”) – Fundraising Campaigns and Events.

With this information, pursuant to the provisions of Article 13 of the GDPR, we wish to inform you about the processing of your personal data for the purpose of sending newsletters by John Cabot University, which will be carried out in compliance with the applicable legislation on the protection of personal data.

Data Controller and DPO

The “data controller”, pursuant to Art. 4, paragraph 1, no. 7 of the GDPR, is John Cabot University (hereinafter also referred to the “Data Controller” or “University”), located in Rome at Via della Lungara, 233.

Categories Of Data Processed

For the purposes described in the following paragraph, the Data Controller will process the following data related to you:

  1. Contact details (email, phone number, home address);
  2. Personal data (first and last name, profession);
  3. Computer information (IP addresses, cookie data).

No processing of special data or any type of profiling will be carried out.

Purpose of Processing and Legal Bases

Personal data will be processed for the following purposes:

Communications related to fundraising campaigns and events, and informative, cultural, or scientific events offered or sponsored by the Controller through the Office of Development and Alumni Affairs, using automated means of email, postal mail, phone calls by operators, and other informational materials.

The legal basis for the processing is your specific consent, which you are free to give or withhold, and which can be revoked at any time

Data Processing Methods and Data Retention

The processing of Your Data will be carried out using suitable paper, electronic and/or telematic tools in compliance with the legal provisions on the processing of personal data, adopting adequate security measures to ensure the security and confidentiality of the data. Your data will also be handled by specially designated, trained, and instructed personnel.

The communication will be managed through Mailchimp's newsletter communication platform. Following your consent to receive communications, your identifying data will be stored on their servers. For further information, we invite you to consult Mailchimp's privacy policy at the Global Privacy Statement | Intuit.

Disclosure and Categories of Data Recipients

Data will not be disclosed and will be processed by duly trained and authorized internal staff.
The data may be communicated to third parties contractually bound to the data controller and solely for the achievement of the expressed purposes or to comply with contractual or legal obligations, belonging to the following categories: internal subjects responsible for managing IT systems, external subjects providing services for managing the information system and telecommunications networks, including email, newsletters, and website management.
The data will be stored in Italy or, in any case, in the European Area.
The list of any external data processors is constantly updated and available upon request at the Controller's office.

Data Retention Period

Your data will be kept for a period not exceeding the achievement of the purposes for which they are processed, in full compliance with the principle of data conservation limitation provided by the Regulation. Specifically, your data will be stored for the duration of the newsletter service unless you revoke your consent.

Data Subject Rights Chapter III of the GDPR

In accordance with the conditions set out in the GDPR, you can exercise, with respect to the data controller, the rights provided for in Articles 15 and following the GDPR, if applicable. For example, you have the right to request:

  • access to your data, in applicable cases;
  • rectification of inaccurate data and integration of incomplete data;
  • erasure of data for the reasons provided, such as when they are no longer necessary for the above-mentioned purposes or are not processed in compliance with the Regulation;
  • restriction of processing in the cases provided, such as when the accuracy of the data is contested and verification of its accuracy is required;
  • portability, meaning the right to receive, in applicable cases, your data in a structured, commonly used, machine-readable format and to transmit this data to another data controller;
  • objection to processing in applicable cases.

In order to exercise the aforementioned rights, you may send an appropriate request to the email address of the DPO designated by the University: [email protected] .

Moreover, in accordance with Article 77 of the GDPR, if you believe that the processing of personal data concerning you is not in compliance with EU Regulation 2016/679, you have the right to lodge a complaint with the Italian Data Protection Authority as the supervisory authority, following the procedures and indications available on the website www.garanteprivacy.it.

Updates

This information is effective from the date of publication. In order to best meet any informational privacy needs and to comply with the evolving sector regulations, this information may be subject to updates and changes.