Privacy information update pursuant to the European Regulation on the Protection of Personal Data (2016/679)
The University of Eastern Piedmont is updating the information pursuant to the new European Regulation 2016/679 concerning the protection of natural persons with regard to the processing of personal data.
All information will be updated soon. In the meantime, this information is integrated with the information indicated below:

• References to the General Data Protection Regulation 95/46/EC are repealed.
• The Data Controller is the University of Eastern Piedmont in the person of the Rector; to contact him: protocol@pec.uniupo.it (PEC)
• The Data Protection Officer (DPO) is Avv. Antonio Perrini, to contact him: dpo@uniupo.it.

In addition to the statements in the single privacy policy declaration, it is guaranteed that all processing will be based on the principles established by the GDPR, with particular regard to the lawfulness, fairness and transparency of processing, purpose limitation, respecting the principles of data minimisation, accuracy, storage limitation, integrity and confidentiality (security), and accountability (Article 5 of the regulation).
In addition to to the statements in the single privacy policy declaration, the subjects to whom the personal data refer (in their capacity as interested parties) have the right at any time to obtain confirmation of the existence or otherwise of the same data and to know its content and origin , also enjoying the rights referred to in section 2, 3 and 4 of chapter III of the GDPR (EU) 2016/679 (e.g. asking the Data Controller for: access to personal data and the correction or cancellation of the same; restrictions on processing of data that concern him/her; to deny the right to use of data, in addition to the right to data portability data).
The individual concerned also has the right to:

• • withdraw consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on the consent provided prior to withdrawal by the interested party. In this case, no further data concerning him/her will be collected, without affecting the use of data possibly already collected to determine, without altering them, the results of the research or of those which, originally or following processing, are not attributable to an identified or identifiable person.
• • Make a complaint to the relevant authority.

With regard to the exercise of these rights, the interested party can contact the Data Controller.