Privacy Policy

Privacy Policy

Last updated: june 2026

This website is managed by the Centro Studi Rossana Bossaglia, acting as the data controller of personal data pursuant to Regulation (EU) 2016/679 (“GDPR”).

For any request concerning the processing of personal data, you may contact the data controller at the following address: stefania.cretella@univr.it

1. Categories of data processed

Through this website, the following categories of data may be processed:

  • browsing data, such as IP address, date and time of the request, requested URL, server response, browser, operating system, and technical information transmitted by users’ devices;
  • data collected through technical cookies and similar tools;
  • statistical data collected through web traffic analysis tools;
  • data related to the use of third-party content and services integrated into the website, such as external fonts, external libraries, and maps;
  • any data voluntarily provided by the user via email or other contact details published on the website.

2. Purposes of processing

Data are processed for the following purposes:

  • to enable the proper technical functioning of the website;
  • to ensure website security, prevent abuse, unauthorized access, and fraudulent activities;
  • to monitor the functioning of the website and derive aggregated or pseudonymized statistics on its use;
  • to allow the proper display of content, maps, fonts, and external resources;
  • to respond to any requests voluntarily sent by users.

3. Legal basis for processing

The processing is based on the following legal grounds:

performance of pre-contractual measures or a request by the data subject, when the user contacts the controller;
the controller’s legitimate interest in ensuring the security, operation, maintenance, and improvement of the website;
compliance with legal obligations, where applicable;
the user’s consent, where required for specific categories of cookies or tracking tools.

4. Methods of processing

Data are processed by means of IT and telematic tools, using methods strictly related to the purposes indicated above and adopting appropriate security measures to protect them against unauthorized access, loss, disclosure, or unlawful use.

5. Nature of data provision

The provision of browsing and technical data is necessary for the use of the website. Failure to provide such data may make it impossible to correctly display pages or use certain features.

The provision of data voluntarily sent by email or through other contact details is optional, but necessary in order to receive a reply.

6. Recipients of the data

Data may be processed by parties acting on behalf of the controller, as data processors or authorized persons, including, by way of example:

hosting and server infrastructure providers;
website technical maintenance providers;
traffic analysis and statistical service providers;
providers of external libraries, fonts, or resources used by the website;
providers of mapping services or geolocation-based content.
Data are not disclosed to the public.

7. Transfer of data to third countries

Some third-party services that may be used by the website could involve the transfer of data to countries outside the European Economic Area. In such cases, the transfer shall take place in compliance with the safeguards provided for by applicable law, including, where necessary, standard contractual clauses or other appropriate legal bases.

8. Data retention period

Data are retained for the time strictly necessary to achieve the purposes for which they are collected and, in any case:

technical and browsing data for the time necessary for the functioning and security of the website;
statistical data according to the retention periods established by the tools used;
data voluntarily transmitted by the user for the time necessary to handle the request and any subsequent obligations;
data that must be retained by law for the period required by applicable legislation.

9. Cookies and similar technologies

The website uses technical cookies and may use analytics cookies and third-party tools. For detailed information, please consult the Cookie Policy.

10. Rights of the data subject

The data subject may exercise the rights provided for in Articles 15 et seq. of the GDPR, including the right to:

obtain confirmation as to whether or not personal data concerning them exist;
request access to such data;
request rectification or updating of such data;
request erasure in the cases provided for by law;
request restriction of processing;
object to processing, where applicable;
request data portability, where applicable;
withdraw any consent previously given, without affecting the lawfulness of processing based on consent before its withdrawal;
lodge a complaint with the competent Data Protection Authority.
Requests may be sent to: stefania.cretella@univr.it.

11. Changes to this notice

The controller reserves the right to update this Privacy Policy at any time. Users are encouraged to consult this page periodically.