(EU) REGULATION no. 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27 APRIL 2016 ON THE PROCESSING AND PROTECTION OF PERSONAL DATA
Pursuant to and for the purposes of Article 13 and Article 14 of Regulation no. 2016/679 of the European parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free flow of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereafter also "Regulation" or "GDPR"), we hereby inform you that the Personal Data you voluntarily provided to European Polytechnical University (hereafter also "EPU" or "University") will be processed in compliance with the regulations in force and with regard to the protection of Personal Data as well as Data- protection principles in pursuit of its legitimate activities as a University.
EPU will process the following Personal Data provided by the data subject:
The Personal Data you provided to EPU may be processed for the following purposes:
We remind you that, with reference to the purposes defined in points (a), (b) and (c), the data subject is obliged to provide the personal data. Any refusal and/or incomplete information may prevent:
With reference to further purposes defined in points (d), (e) and (f), both the provision and the consent to the processing of personal data for the above mentioned purposes, is optional and subject to explicit consent.
The processing of the subject’s Personal Data may be implemented through suitable paper, electronic and/or online documents, with logics strictly connected to the aforementioned purposes and, in such a way as to guarantee the protection of privacy and confidentiality of the Data itself.
The Personal Data of the subject are processed with the aid of IT tools, fairly and lawfully, for the fulfilment of the aforementioned purposes, including the safeguarding of confidentiality, integrity, authenticity, availability and updating, and are safeguarded with proper safety measures. Personal Data may be stored for the period of time necessary for the archiving purposes for which they were collected to or later processed.
If the user (i) logs in or signs up to the online platform of the University using the social network credentials (such as Facebook or Twitter, hereafter also as "Social Network") or (ii) he/she associates his/her account to a Social Network account of the same user, the subject may receive personal Data from the aforementioned Social Network, in compliance with the Terms and security policy of the Social Network itself. EPU may add information to the user’s Data already collected through its services. Whenever the user intends to share information through these Social Networks, he/she may receive the Data from the latter in accordance with the consent options provided by the user. The Personal Data possibly communicated from the Social Network will be subject to the Terms and Conditions of use of the Social Network.
Data may be communicated to business partners, members of the board of directors or other administrative body, Responsible for Data protection, and the Heads designated by the University and the persons in charge of the processing of Personal Data appointed by Pegaso International in the execution of their duties.
The Personal Data of the subject may be communicated to any third Party who provides the University with services or instrumental services for the purposes indicated in the previous par. 2 such as, tin an illustrative and not-exhaustive way, dominating societies, subsidiaries, investees and/or affiliates. The Personal Data of the subject may be also communicated to suppliers, contractors, subcontractors, banking and insurance groups and/or other subjects and/or bodies acting on behalf of EPU for:
The Personal Data of the subject may be eventually transferred to companies or societies which work as recruiting centers on behalf of companies for Pegaso International. The Personal Data of the subject may be potentially transferred abroad, in compliance with the current regulations, also to non-EU Countries, whereas the University possibly pursues its interests. The transfer to countries outside the EU is carried out in order to provide appropriate guarantees pursuant to Art. 46 or 47 or 49 of the Regulations, in addition to cases in which this is guaranteed by the adequacy decisions of the European Commission.
For the purposes referred to in points a), b) and c) of the previous paragraph 2 "Purposes of Processing" of this Regulation, your Personal Data will be processed only for the period needed. For the purposes referred to in points d), e) and f) of paragraph 2 "Purposes of Processing" of this Regulation, your Personal Data will be processed until the possible revocation of consent by the interested Party.
The Data will be stored according to the following criteria:
We inform you that at any time, with regard to your Data, you may exercise the rights provided within the limits and conditions set forth in articles 7 and 15-22 of the Regulations. In order to exercise the rights as described below, please contact the Controller of Personal Data Processing through the Privacy office the e-mail address firstname.lastname@example.org. A feedback will be provided within the timing established by the GDPR.
In detail, the interested Party has the right to:
The processing Controller of your Data is EPU with registered office in Pernik, ul. Sv. Sv. Kiril i Metodiy 23, Bulgaria, in the person of the Legal Representative pro- tempore. Any request relating to your personal Data processed by the University may be sent to the University's registered office, or via e-mail to the address: email@example.com.
The updated list of persons appointed as Responsible pursuant to article 28 of the GDPR is available at the University and may be consulted upon specific request via the modalities indicated above.
The contact of the Responsible of the Personal Data Protection is firstname.lastname@example.org. This information will be subjected to updates. EPU invites, therefore, the Users who intend to know the processing Personal Data collected by the University, to periodically visit this webpage.
European Polytechnical University
As indicated in the information provided pursuant to Regulation (EU) no. 2016/679 of the European Parliament and Council of 27 April 2016, You are aware that the carrying out of activities related to the processing of Personal Data, referred to in points a), b) and c) indicated in par. 2 of the aforementioned information, does not require the consent to processing.
The consent is optional for the processing of Personal Data referred to in points d), e) and f) indicated in paragraph 2 of the aforementioned Regulation.
We invite you to send an e-mail to: email@example.com if you intend not to authorize the processing of your Personal Data for promotional, marketing and recruiting purposes.