Privacy notice
1. The Data Controller for the personal data provided by data subjects is the Scuola Normale Superiore, a public university institute, located at Piazza dei Cavalieri, 7, Pisa – 56126, represented by the Director and legal representative pro tempore.
The personnel of the STG-San Cataldo Service (email: stg.sancataldo@sns.it), along with staff from other offices of the School, are trained and authorized to process the data.
2. The personal data of participants (name, surname, email address, affiliation) are collected for the purpose of managing participation in the event.
3. Personal data are thus provided by the data subject for the execution of tasks carried out in the public interest or in the exercise of official authority vested in the Controller (Art. 6, letter e) of EU Regulation 679/2016), as well as for the management of the legal relationship with the School (Art. 6, letter b) of EU Regulation 679/2016), including purposes of archiving, historical research, and statistical analysis in anonymous and aggregated form.
Any personal data belonging to special categories are provided only if necessary for the exercise of the data subject’s rights (e.g., verification of chronic or temporary disability for potential accommodations during selection procedures), or in fulfillment of legal obligations pursuant to Art. 9, letters b) and h) of EU Regulation 679/2016.
Personal data are processed, including by automated means (software and databases managed by the School and hosted by contractors such as SerSe and CINECA, appointed as external processors, with servers located in Italy), in compliance with the principles of accountability, lawfulness, fairness, data minimization, transparency, integrity, accuracy, confidentiality, and proportionality.
4. The personal data collected may be communicated or transferred to third parties (public and/or private entities) within the scope of institutional relationships, for the fulfillment of legal, regulatory, or contractual obligations.
The personal data collected may be communicated or transferred to entities established in third countries only after verifying the existence of an adequacy decision or appropriate safeguards for data protection.
5. The collected personal data will be processed and stored only for as long as is strictly necessary to achieve the purposes for which they were collected, without prejudice to the application of public record retention regulations.
At any time, the data subject may exercise the following rights:
-
Access to personal data, in the cases and in the manner provided by Art. 15 of the Regulation;
-
Rectification, erasure (right to be forgotten), or restriction of processing of personal data, in the cases and in the manner provided by Arts. 16–18 of the Regulation; erasure is not permitted for data contained in records that must be retained by the School;
-
Data portability, in the cases and in the manner provided by Art. 20 of the Regulation;
-
Objection to processing, in the cases and in the manner provided by Art. 21 of the Regulation;
-
Lodging a complaint with the data protection authority.
The data subject may exercise their rights by submitting a request via email to:
privacy@sns.it or gestione.personale@sns.it, or via certified email (PEC) to protocollo@pec.sns.it.
For any further information, the Data Protection Officer (DPO) can be contacted at dpo@sns.it.
