This page contains the Privacy used on EDUCatt's websites and the general policies used for specific applications.

The following rules on the protection of personal data - also to be understood as information pursuant to art. 13 of the European Regulation 2016/679 "General Data Protection Regulation" - are intended to describe the procedures for the collection and use of personal data through this website and are addressed to users and users of EDUCatt's web services, accessible by electronic means from the address www.educatt.it which gives access to the institutional website of the EDUCatt Foundation.

The data controller of personal data is EDUCatt Foundationthe Ente per il Diritto allo Studio Universitario dell'Università Cattolica, with registered office in Milan, Largo Agostino Gemelli no. 1, in the person of its Director (hereinafter referred to as the "Holder" or the "Entity").
A Data Protection Officer has been designated, in the person of Dr Cosimo Calabrese, who may be contacted, for all matters relating to the processing of personal data and the exercise of rights under the GDPR, at the e-mail address privacy@educatt.org.

The Controller processes personal data directly communicated by the data subject:

  • by accessing the 'Contact' area;
  • via the website, in the different access areas;

- Student reception and financial aid;
- Housing solutions;
- Catering;
- Health care;
- Psychological counselling;
- Books - Solutions and Tools;
- Sport InCampus.

  • using the e-mail addresses dedicated to the different services.

Data are collected and processed for the purpose of:

  1. responding to requests made by the data subject, providing the services requested. In accordance with Art. 6 of the GDPR, the legal basis of the processing is the performance of the services requested by the user (let. b)).
  2. Fulfil a legal obligation to which the Data Controller is subject; fulfil obligations arising from the law, regulations, national and EU legislation or an order from the Authority. In accordance with Article 6 of the GDPR, the legal basis for the processing is the fulfilment of a legal obligation (let. c)).
  3. To inform data subjects about aspects and updates of EDUCatt's activities and services, initiatives and events, within the framework of the activities carried out by the Foundation. In accordance with Article 6 of the GDPR, the legal basis for the processing is the legitimate interest of the Data Controller (let. f)).

Certain processing operations, for which the data subject's personal data are required, such as participation in competitions for scholarships or admission to colleges, require specific information on data processing and, where necessary, consent.

There are forms in some areas of the website:
- Filodiretto;
- Form reports to the Supervisory Board;
- Questionnaire on satisfaction with the Foundation's Mission Statement;
- Suggestions of new titles for digital HUB;
- Requesting information and sending suggestions or recommendations for the library service;
- ThinkGreen catering service satisfaction questionnaire;
- Catering service satisfaction questionnaire;
- Request information on the University's colleges;
- Focus group.
Any personal data transmitted by filling in these forms will be processed exclusively for purposes directly related to the form itself.

The Controller processes personal data of the type:

  • municipality: identification data, address, telephone number, e-mail address, other personal information;
  • particular: for specific needs, e.g. related to calls for tenders, the Data Controller may process data of a particular category such as: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning the person's health or sexual life or sexual orientation.

The processing of data for the purposes set out above takes place by automated means, on electronic media, in compliance with the rules of confidentiality and security provided for by law, the ensuing regulations and specially issued internal provisions.
EDUCatt undertakes not to disclose the data to unauthorised persons, nor to use them for purposes other than those indicated above. These data may only be shown at the request of the authorities authorised by law.
The data are processed and stored at the Ente per il Diritto allo Studio Universitario EDUCatt, based in Milan (Italy), Largo Agostino Gemelli n. 1.

All the data processed through the website are collected following communication by the person concerned. It follows that consent to the processing is inherent in the communication and any refusal would put EDUCatt in the position of not being able to provide the services requested.
Processing is also mandatory in order to comply with a legal obligation to which the data controller is subject, referred to in point b).
For certain processing operations, the specific information explains the purpose of processing and the possible consequences in the event of refusal to provide consent.

Cookies are small text files that sites you visit send to your terminal (PC, tablet, smartphone, notebook), which are stored and then retransmitted to the same sites on your next visit. There are different cookies that contain different information (e.g. authentication of computer information, session tracking, storage of preferences for sending advertising messages, etc.). Each cookie, in turn, contains different data (e.g. the name of the server it comes from, a numeric identifier, etc.).
This data may remain on the user's device for different periods of time, such as one browser session, a few hours, several days or longer periods.
They are used to perform computer authentication, session monitoring and storage of information on sites. While browsing a site, the user may also receive cookies on his/her terminal that are sent by different sites or web servers (so-called "third parties"), on which some elements (such as, for example, images, maps, sounds, specific links to pages of other domains) present on the site he/she is visiting may reside.
The website www.educatt.it uses exclusively technical cookies.
These cookies allow the user to use the site easily and find information more easily, simplifying the connection and transmission of data between the user and the site. They serve to carry out navigation or to provide a service requested by the user. They are not used for any other purpose.
Technical cookies are necessary for the proper functioning of the site. Without the use of such cookies, certain operations could not be carried out or would be more complex and/or less secure. Therefore, technical cookies are indispensable. Technical cookies do not require the user's consent as they are necessary for the proper functioning of the site. In particular, we use temporary and permanent navigation or session cookies that ensure the normal navigation and use of the website by allowing, for example, to save information inherent to navigation, to store data in order to keep the navigation session active and/or to save information inherent to the "full screen" on/off settings when navigating the site.
They may also be used analytical cookies, to collect information about the use of our site. These cookies, which are similar to technical cookies, are processed in aggregate form to monitor the areas of the site that are visited most, to improve the content of the site, to facilitate its use by the user and to monitor the proper functioning of the site. The analytics cookies used are set by a website other than the one the user is visiting. This is because on each site there may be elements (images, maps, sounds, specific links to web pages of other domains, etc.) that reside on servers other than that of the site visited.
In addition to the data freely entered by the user on the site, navigation data collected as a result of the user's use of our services may also be processed, and in particular
information on the device with which the user connects;

  • device-specific information (e.g. type of device, mobile network information);
  • log information. During your use of our services or viewing content provided by the Controller, we may automatically collect and store certain information in server logs. This information may include: data about how you use our service, such as search queries; information about internet connection data such as IP address and all data related to it; information about device events such as system activity, hardware settings, browser type and language, date and time of requests and referring URLs; cookies that may uniquely identify your browser or account.

The data may be communicated to public and private individuals and/or legal entities (legal, administrative and tax consultancy firms, any IT companies and others) to whom such communication is necessary to pursue contractual, administrative and accounting purposes, as well as to guarantee the use and enjoyment of the website.
The data may also be communicated to other parties when such communication is required or imposed by law.
Personal data are processed within the territory of the European Union.

Personal data will be processed for as long as necessary to achieve the purposes for which they were collected.
Please note, in particular, that navigation data will be deleted within 2 years of their processing.
In any case, a longer retention period is reserved, where required by law or regulation.

Pursuant to Articles 13, 15-22 of the GDPR, the data subject has the right, in particular:

  • to obtain confirmation as to whether or not personal data concerning him are being processed;
  • to obtain access to the data and the following information (purpose of processing, categories of personal data, recipients and/or categories of recipients, storage period);
  • to obtain the rectification or supplementation of inaccurate personal data concerning him/her;
  • to obtain the deletion of personal data concerning him in the cases provided for in Article 17 GDPR;
  • to revoke their consent to the processing, without prejudice to the lawfulness of the processing based on the consent given before revocation;
  • to obtain that the personal data concerning him/her be only stored without any other use being made of them in the following cases provided for in Article 18 GDPR;
  • to receive, in a commonly used, machine-readable and interoperable format, personal data concerning him/her processed by automated means, if they are processed under contract or on the basis of his/her consent.

For any request or communication, or to exercise your rights, you may contact the Data Controller:

  • by writing to the address: EDUCatt - Ente per il Diritto allo Studio Universitario dell'Università Cattolica, Largo A. Gemelli n. 1, 20123 Milan;
  • by sending an e-mail to the address privacy@educatt.org.

The Controller reserves the right to update this policy at any time. You are therefore advised to check it periodically in order to keep up to date with the Entity's privacy policy. In the event of material changes to the policy, a notice will be posted on the Site, along with the updated Privacy Policy.