The Alma Mater Studiorum – University of Bologna, as the data controller, informs that following the entry of personal information on this site and/or through authentication to web services of the University, data relating to identified or identifiable persons may be processed. The sites of the Portal System may also use:

• some cookies to make the services easy to navigate and efficiently use the web pages of the Alma Mater Studiorum – University of Bologna;
• cookies that allow for the improvement of the service provided to users, making the use more effective and/or enabling certain functionalities;
• cookies and other tracking tools that are sent by sites or web servers different (i.e., “third parties”), on which some elements (such as, for example, images, maps, sounds, specific links to pages of other domains) present on the page that the user is visiting, may reside.

1.1 Necessary Technical Cookies

1.1.1 Cookies to facilitate the operation of the site

The sites of the Portal System use:

• session cookies essential for managing authentication to online services and restricted areas. The use of such cookies (which are not stored persistently on the user’s computer and are deleted with the closing of the browser) is strictly limited to the transmission of session identifiers necessary to enable safe and efficient exploration of the site;
• session cookies for load balancing, to optimize the performance of the website by reducing page loading times;
• strictly necessary cookies for the correct functioning of the sites or to save browsing preferences and cookie preferences (lasting six months).

Disabling these cookies does not allow the use of part of the online services.

1.1.2 Analytical/Monitoring Cookies

The sites of the Portal System use third-party analytical cookies for which the third party has committed to use the cookies only to provide the service and in an anonymous mode, not crossing the information obtained with other information it may have.

In particular, the University uses:

• Matomo, an open-source web analytics utility, used to analyze user navigation data anonymously and in aggregate form directly and without the help of third parties. For more information visit the respective Privacy policy;
• Web Analytics Italy (hereafter WAI), based on Matomo, which uses analytics cookies owned by AgID, exclusively for statistical purposes and using IP anonymization procedures. For more information visit the respective Privacy policy;
• on some pages (e.g., in the Studenti Online web application) the site also uses New Relic, a web traffic analysis service provided by New Relic, Inc., 188 Spear Street – Suite 1200 – San Francisco, CA – 94105 USA, which uses cookies to collect and analyze information related to the navigation of users in an anonymous or aggregate form. For more information on the policies applied by New Relic, Inc. regarding data confidentiality, you can visit the Privacy Policy page.

Analytical/monitoring cookies can be disabled without any consequence on the navigation of the portal: to disable them see the following section “How to deny and/or disable cookies”.

Regarding the retention times set by the University for New Relic and Matomo cookies, the following is specified:

1.2 Optional Profiling Cookies

The Portal System may integrate, within some pages, functionalities developed by third parties and/or profiling cookies of third parties that may be installed during navigation. The site may use particular tracking tools called “pixels or beacons” of third parties, for example, from Facebook or Youtube or further web social service providers. These cookies allow third parties to acquire data related to visits by users who are browsing the University sites and to interact with these directly on the favorite social networks.

The purpose of such integration is to evaluate the effectiveness of institutional communication activities and/or to provide knowledge and visibility to institutional activities and/or content on topics of public and social interest. Such parts may include, for example:

• the use of java script code through which information relating to users who have viewed a specific page following the publication of ads on the mentioned social networks is recorded and sent to Facebook, Instagram, LinkedIn, or other social networks;
• the use of services that allow interactions with social networks (e.g., “social plugin”) or with other external platforms through the pages of the Portal System (example, viewing Youtube and Vimeo videos, Google Maps).

In such cases or where you access the site after having “logged in” through your Facebook, LinkedIn, Google, or Twitter account, some personal information may be acquired by the managers of the social network platforms. The management of information collected by “third parties” is governed by the related notices to which please refer. To ensure greater transparency and convenience, the web addresses of the various notices and methods for managing cookies are reported below:

• Facebook (notices): Cookie policy and Privacy Policy
• Google/Youtube (notices): Cookie Policy and Privacy Policy
• Vimeo (notices): Cookie Policy and Privacy Policy
• LinkedIn (notices): Cookie Policy and Privacy Policy

1.3 Telematic Traffic Data

The computer systems and software procedures used for the operation of the sites of the Portal System record, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols and whose recording is necessary to improve the quality of the service offered.

These are information that are not collected to be associated with identified interested parties, but which by their very nature could, also through processing and associations, allow users to be identified.

In this category of data may fall the accounts and IP addresses of users who connect to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.

 Except for different provisions provided by the applicable legislation, such data are stored for six months. After the first six months, the data are anonymized by removing the last digit of the IP address or are deleted.

These data are used to obtain anonymous statistical information on the use of the site and/or to check the correct functioning of the computer systems. The data could also be used for the ascertainment of responsibility in case of hypothetical computer crimes or in case damages occur to the University or to third parties. Such data are processed in compliance with what is indicated in the D.R. 271/2009 and may be communicated to the Judicial Authority in case of investigations, inspections, etc.

1.4 Data Voluntarily Provided by the User

The optional, explicit, and voluntary sending of electronic mail, messages or any type of communications to the addresses indicated on this portal involves the subsequent acquisition of the sender’s address or of any other personal data that will be used to respond to requests. It is assured that such processing will be guided by the principles established by the GDPR, with particular regard to the lawfulness, correctness, and transparency of the processing, to the use of data for specified, explicit, legitimate purposes, in a manner relevant to the processing, respecting the principles of data minimization, accuracy, limitation of conservation, integrity and confidentiality, accountability (Art. 5 of the GDPR). For particular services, specific notices are published at www.unibo.it/privacy.

The personal data indicated on this page are processed by the University in the execution of its own tasks of public interest or otherwise connected to the exercise of its public powers, including the task of carrying out activities of institutional information and communication under the law n. 150/2000 and the D.R. 271/2009. The legal basis for the processing of profiling cookies or other similar tracking tools described above is found in the consent pursuant to Art. 6, paragraph 1, letter a) of Regulation (EU) 2016/679.

To disable cookies

You can deny consent for the use of the above-mentioned profiling cookies by using the banner that appears on first access or via the “Cookie Settings” link displayed in the footer of the site (for example on the home page).

You can also revoke consent to the use of cookies by selecting the appropriate setting on your browser. However, it should be noted that, should you revoke consent to the use of all cookies, you will not be able to use the services that require authentication.

Below are the links that also explain how to disable cookies for the most common browsers (for other browsers possibly used we suggest looking for this option in the software help).

Internet Explorer: http://windows.microsoft.com/it-IT/internet-explorer/delete-manage-cookies#ie=ie-10  

Google Chrome: https://support.google.com/chrome/answer/95647?hl=it

Mozilla Firefox: 

http://support.mozilla.org/it/kb/Gestione%20dei%20cookie?redirectlocale=en-US&redirectslug=Cookies

Opera: http://help.opera.com/Windows/10.00/it/cookies.html

Apple Safari:  http://www.apple.com/it/privacy/use-of-cookies/ 

To disable profiling cookies and/or third-party cookies

Disabling profiling cookies may also be possible through the methods described in the respective notices mentioned above, made available directly by the third-party owner. For example, to disable only Google Analytics cookies, you can use the opt-out add-on provided by Google for major browsers.

To delete cookies already stored on the terminal

Even if the authorization to use third-party cookies is revoked, before this revocation, cookies may have been stored on the user’s terminal. For technical reasons, it is not possible to delete these cookies, however, the user’s browser allows their deletion through the privacy settings. The browser options indeed contain the option “Clear browsing data” that can be used to delete cookies, site data, and plug-ins. 

The recipients of the data collected following the consultation of some of the services listed above, under Article 28 of Regulation (EU)
2016/679, as data processors, are the service providers of
development, delivery, and operational management of the technological platforms.