Privacy & Data Protection Policy (GDPR)

Last updated: 06/09/2025

1. Data Controller

The entity responsible for the processing of personal data collected through this website is:
Alma Mater Studiorum – Università di Bologna
Via Zamboni, 33 – 40126 Bologna – Italy

2. Data Protection Officer

The Data Protection Officer (DPO) can be contacted at:
sami.dzogang@outlook.com

3. Data Collected

The website may collect the following categories of personal data:

• Identification data such as name, surname, and email address when filling out forms.

• Academic data submitted in the context of applications to the GrEnFIn EMJM programme.

• Technical data such as cookies, IP addresses, and browsing logs.

4. Purposes of Processing

The data is collected and processed for the following purposes:

• To respond to user contact requests.

• To manage applications and enrolments for the GrEnFIn EMJM programme.

• To provide academic and administrative information related to consortium activities.

• To improve website usability, performance, and audience measurement.

5. Legal Basis for Processing

Data processing is carried out based on:

• The consent of the user (Article 6.1.a GDPR).

• The performance of a task carried out in the public interest in the field of higher education and research (Article 6.1.e GDPR).

6. Data Recipients

Personal data may only be shared with partner universities within the GrEnFIn EMJM consortium. Data is not sold or disclosed to third parties for commercial purposes.

7. Retention Period

• Contact data will be retained for a maximum of 3 years after the last interaction.

• Application data will be retained for a maximum of 5 years after the end of the selection process.

• Technical logs and navigation data will be retained for a maximum of 12 months.

8. User Rights

In accordance with the GDPR, users have the following rights:

• Right of access to their data.

• Right to rectification of inaccurate or incomplete data.

• Right to erasure (“right to be forgotten”).

• Right to restriction of processing.

• Right to object to processing.

• Right to data portability.

Requests to exercise these rights should be sent to:
sami.dzogang@outlook.com

9. Security

Appropriate technical and organisational measures are applied to protect data against loss, unauthorised access, alteration, or disclosure.