The Sandra and Enea Mattei Foundation – Collegio Nuovo is aware of the importance of protecting the confidentiality of personal data and, considering that the Internet is potentially a great tool for the exchange and circulation of information, it intends to make its full commitment to respecting rules of conduct and in adopting suitable security measures that are in line with current legislation on the protection of personal data in order to guarantee safe, controlled and confidential browsing on the network.
Below is information relating to the Foundation's management methods in relation to the processing of data of users who access the website www.colnuovo.unipv.it.
This information is valid for the purposes of art.13 Legislative Decree 196/2003 and subsequent amendments and pursuant to art.13 GDPR 679/2016 European Regulation on privacy, as well as pursuant to the Provision on cookies n. . 229 of 8 May 2014, with which we wish to inform visitors to the site about the use of the data entered and the cookies used by the site itself.

The information is provided only for the Foundation and not for other websites that may be consulted by the user via links contained therein.

If the user is under 14 years of age, pursuant to art.8 c.1 of EU Regulation 679/2016 and art.2 quinquies of Legislative Decree 196/2003 as amended by Legislative Decree 101 /2018, will have to legitimize their consent through the authorization of their parents or guardians.

THE HOLDER OF THE TREATMENT
In relation to this website, the Owner is:
Sandra and Enea Mattei Foundation – New College (hereinafter referred to as the “Foundation”), in the person of the President and Legal Representative, with headquarters in Via Abbiategrasso n. 404 – 27100 Pavia, Italy,

PLACE OF DATA PROCESSING
The processing connected to the web services of this site takes place at the aforementioned headquarters of the Foundation. If necessary, the data can be processed by the company's staff who maintain the technological part of the site at the headquarters in Via Abbiategrasso n.404.

PURPOSE OF TREATMENT
The processing of your data has your consent as its legal basis and is carried out for the following purpose:

• allow navigation and functionality of the web,
• forward e-mail (contact form),
• download the forms for participation in admission calls,
• register online for training activities,
• make donations.

LEGAL BASIS OF TREATMENT
We process data mainly on the basis of consent of users. Consent is given via the banner at the bottom of the page when consulting the site. This consent is kept track of for 6 months. With the expression of consent and consultation of the site, visitors and users approve this privacy policy and consent to the processing of their personal data in relation to the methods and purposes described, including any disclosure to third parties if necessary for the provision of a service. Through the communication or service request forms, further consent is collected relating to the specific purpose of the service.
The provision of data and, therefore, consent to the collection and processing of data is optional, the User can deny consent, and can revoke a consent already given at any time (via the cookie link at the bottom of each page or your browser settings or the Contact link). However, denying consent may make it impossible to provide certain services and the browsing experience on the site may be compromised.  
The data for the security of the site and for the prevention of abuse and SPAM, as well as the data for the analysis of site traffic (statistics) in aggregate form, are processed on the basis of legitimate interest of the Data Controller to protect the site and the users themselves. In such cases the user always has the right to object to the processing of data.

DATA PROCESSED AND PROCESSING METHODS
The computer systems and software procedures used to operate the website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP (Internet Protocol) addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, type of browser and parameters of the devices used to connect, name of the internet service provider (ISP), date and time of visit, web page from which the visitor came (referall) and exit, and other parameters relating to the operating system and the user's IT environment.
The aforementioned information is processed in an automated form and collected exclusively in aggregate form in order to verify the correct functioning of the site and for security reasons.
For security purposes (spam filters, firewalls, virus detection), the automatically recorded data may also include personal data such as the IP address which could be used, in compliance with the laws in force on the subject, in order to block attempts to damage the site or to cause harm to other users or in any case activities that are harmful or constitute a crime.
Such data is not MAY used to identify or profile the user.
The site allows the possibility of sending e-mails or making donations or enrolling in training activities or registering for the call for admission to the College. In these cases the site automatically detects and records some user identification data, including the email address. Such data is intended to be voluntarily provided by the user when using the service. By entering your data or other information, the user expressly accepts the privacy policy and, in particular, agrees that the contents inserted are freely used by the recipient. The data, however, will be used exclusively for the provision of the requested service and only for the time necessary to achieve the purposes indicated above.
 
The information that users of the site decide to make public through the tools/services made available by the site are provided by the user knowingly and voluntarily, exempting this site from any liability regarding any violations of the law. It is up to the user to verify that they have permission to enter personal data of third parties or content protected by national and international regulations.

As indicated above, the optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.

Specific summary information can be reported or displayed on the site pages set up for particular services.
Specific security measures are observed to prevent illicit or incorrect use or unauthorized access.
No data deriving from the web service is communicated or disseminated (except communication to judicial or police bodies if necessary).

TRANSFER OF DATA
With regards to the possible transfer of data to third countries, including countries that may not guarantee the same level of protection provided for by the applicable legislation, it is hereby noted that the processing will take place only on the basis of one of the methods permitted by current law, such as for example the adoption of Standard Clauses approved by the EU Commission, the selection of subjects adhering to international programs for the free movement of data (e.g. EU-USA Privacy Shield) or operating in countries considered safe by the EU Commission.

COOKIES INFORMATION

What are cookies
Cookies are small text files that the sites visited by users send to their terminals, where they are stored before being re-transmitted to the same sites on the next visit. The so-called "third party" cookies are, however, set by a website other than the one the user is visiting. This is because on each site there may be elements (images, maps, sounds, specific links to web pages of other domains, etc.) that reside on servers other than that of the site visited. Cookies are used for different purposes: performing computer authentication, monitoring sessions, enabling certain features, storing information on specific configurations regarding users who access the server, storing preferences, etc.
The Foundation uses cookies to make the user's browsing experience easier and more intuitive and to make its services simple and efficient by adapting the operation of the site to the user's expectations, offering a more personalized browsing experience. The cookies on this site are processed electronically.

Below you will find all the information on the cookies installed through this site, and the necessary information on how to manage your preferences regarding them.
It is possible to change the settings relating to cookies at any time. Below is more information about the cookies used by the Site and how to manage the settings relating to them.

TYPES OF COOKIES USED

Technical cookies that do not require consent:
Cookies relating to activities strictly necessary for the functioning of the site and the provision of the service.
All technical cookies do not require consent, therefore they are installed automatically following access to the site.

Browsing or session cookies
The use of so-called session cookies is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient exploration of the site. The so-called session cookies used on this site avoid the use of other IT techniques potentially prejudicial to the privacy of users' browsing and do not allow the acquisition of personal identification data of the user. These cookies are not stored permanently on the user's computer and disappear when the browser is closed.

feature cookies
These cookies are essential for the correct functioning of the website and allow you to navigate the site according to a series of selected criteria (e.g. language) using its best performance.

Analytical and third-party cookies for which consent is required:
All cookies (or other technologies), other than the technical ones indicated above, are installed or activated only following the express consent by the user the first time they visit the site. Consent can be expressed in a general way, by interacting with the short information banner present on the landing page of the site, according to the methods indicated in this banner; or it can be provided or denied selectively, according to the methods indicated in the banner itself.
A record of this consent is kept on subsequent visits. You always have the possibility to revoke all or part of the consent already expressed.

In relation to their origin, a distinction is made between cookies sent to the browser directly from the site you are visiting and third-party cookies sent from your computer to other sites and not from the one you are visiting.
Permanent cookies are often third-party tracking cookies used to identify online behavior, understand interests and therefore personalize offers for users.

The use of analytical cookies occurs anonymously in order to improve the usability of the site.
Cookies or other technologies managed by third parties are also installed through this site.

profiling cookies
The site does not use profiling cookies.

Management of cookies through browser settings
Almost all browsers allow you to check which cookies are present on your hard drive, block all cookies or receive a warning every time a cookie is installed. In some cases, however, failure to install a cookie may make it impossible to use some parts of the Site.
The user can oppose the registration of cookies on his device by configuring the browser used for navigation: if he uses the Site without changing the browser settings, it is assumed that he intends to receive all the cookies used by the Site and to use all the functions.

If you do not know the type and version of browser you are using, click on "Help" in the browser window at the top, from which you can access all the necessary information. If you know your browser, click on the one you are using to access the cookie management page. Below are the addresses of the most popular browsers to allow the user to manage their options (deletion or navigation without cookies) regarding the use of cookies:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Internet Explorer
• Microsoft Edge
• Brave
• Opera

For more information, visit the page www.youronlinechoices.eu

Duration of cookies
Some cookies (session cookies) remain active only until the browser is closed or the logout command is executed. Other cookies "survive" when the browser is closed and are also available on subsequent visits by the user.
These cookies are called persistent and their duration is set by the server at the time of their creation. In some cases a deadline is set, in other cases the duration is unlimited.
The site, in relation to which the information is stored exclusively for technical purposes, does not use persistent cookies.
Upon expiration, the data will be deleted or anonymized, unless there are no further purposes for storing them.

Consent to the use of Cookies
By connecting to the Site, the user will see a brief information on the use of cookies (banner) which will allow him to select the cookies to activate (with the exception of "Necessary and/or Technical") via flag or, even, the refusal of everyone. The expression of consent is tracked for a period of 6 months. At any time you can change your choice by clicking on the "Cookie management" link at the bottom of each page of the site.

EXTERNAL LINKS
This website contains links to other sites and specifically to the University of Pavia, the IUSS, the Conference of University Colleges of Merit, the MIUR, the Alumnae Register. This Policy does not apply to third-party sites, so if you want information on their data collection methods and policies we suggest consulting their privacy policies.

Social Media Networks
This site also incorporates buttons for social networks to allow easy sharing of content on Facebook, Instagram, Twitter and LinkedIn.
The Foundation is responsible for the content of these pages even if it does not have full access to the data collected or to any user profile as they can only access information from their "public" profile. Information shared by you as "public" can be modified by you through your personal Facebook settings. The user can also actively hide their "Likes" or delete the "Likes" and/or "Follow/Follow" and/or "Recommend" from their page through their personal settings on Facebook, Instagram and of LinkedIn. The user's profile will no longer be listed on the page. The Foundation receives anonymous statistics from Facebook based on legitimate interest on the use of its page. The following anonymous information may be provided: 
Followers: the number of people who follow the Foundation. 
Range: number of people who see specific content.
Performance: how many people saw an ad or article or interacted with it 
Demographics: average age of visitors, gender, place of residence, language.
These statistics are used to constantly improve Facebook's online content and to better respond to the interests of our users. We cannot link statistical data with the profiles of our fans or individual users. The user can use Facebook settings to decide in what form the contents of the page can be displayed.
Please note that the user who voluntarily logs in to the social media has already consented to the use of cookies when consulting the social network even if he is not registered.
The collection and use of information obtained through social media are governed by the respective privacy policies of the social networks, to which please refer:
Facebook: https://www.facebook.com/help/cookies
Instagram: https://help.instagram.com
LinkedIn: https://www.linkedin.com/legal/cookie-policy
Twitter: https://twitter.com/en/privacy.
The Foundation is not aware of the user data collected by these social media.

AUTOMATED DECISION MAKING PROCESSES
The Data Controller does not carry out processing that consists of automated decision-making processes.

REVOCATION OF CONSENT
With reference to art.23 of Legislative Decree 196/2003 and subsequent amendments and art. 6 of the GDPR 679/16, the interested party can revoke the consent at any time without prejudice to the lawfulness of the processing carried out before the revocation.

RIGHTS OF
With reference to article 7 of Legislative Decree 196/2003 and subsequent amendments and articles. 15 “right to access”, art. 16 “right of rectification”, art. 17 “right to cancellation”, art. 18 “right to limit processing”, art. 20 “right to portability”, art.21 “right to object to the automated decision-making process of GDPR 679/2016,
the user to whom the personal data refers has the right at any time to obtain confirmation of the existence or otherwise of the same data and to know its content and origin, verify its accuracy or request its integration or updating and rectification.

The user has the right to request cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, their processing.
Requests should be addressed to:

• Sandra and Enea Mattei Foundation, Via Abbiategrasso n.404 – 27100 Pavia,
  to the attention of Dr. Paola Bernardi – e-mail: rettrice.collegionuovo@unipv.it.

PROPOSAL OF THE COMPLAINT
The interested party has the right to lodge a complaint with the supervisory authority of the state of residence.

DEFENSE IN JUDGMENT
The user's personal data may be used for defense by the Foundation in court or in the preparatory stages of its possible establishment, against abuses in the use of the same or related services by the user.
Following a subpoena, judicial order or other legal initiative; in order to establish or exercise the rights granted to us by law; to defend ourselves in the event of legal action against us or for other purposes dictated by law.
The user declares to be aware that the Joint Controllers may be required to reveal data upon request by public authorities.

AMENDMENTS AND UPDATES TO THIS INFORMATION
The Data Controller reserves the right to modify or simply update, in whole or in part, this privacy policy also in consideration of the modification of laws or regulations that regulate this matter at any time. The user is therefore invited to periodically check this page. In case of non-acceptance of the changes made to this privacy policy, the user has the right to cease using this application and can request the Joint Controllers to remove their personal data and/or to modify their choices.

LEGAL REFERENCES
This information is drawn up in compliance with the obligations established by Legislative Decree 196/2003 and by GDPR 679/16, as well as the provisions of recent Guidelines for cookies and other tracking tools – 10 June 2021
(Published in the Official Journal no. 163 of 9 July 2021), Register of measures
n. 231 of 10 June 2021, operational from 9 January 2022.
This information applies only to this website.

Pavia, 16 February 2022                                                                                             

The Owner
Sandra and Enea Mattei Foundation – New College
Prof. Anna R. Malacrida