Introduction

Luiss, the Libera Università Internazionale degli Studi Sociali Guido Carli (hereinafter Luiss), is an autonomous university that offers an advanced educational model.

This notice describes how Luiss processes the personal data provided by individuals who intend to apply for competitive procedures pursuant to Articles 22-23 of Law 240/2010, highlighting the rights that the law guarantees to the data subject.

The policy is updated periodically to align with current legislation or new methods of processing personal data.

What personal data do we collect?

The Data Controller collects and processes the following personal data:

• the data subject’s identifying information (first name, last name, place and date of birth, tax code, citizenship);
• contact details (home address, email, phone number);
• data regarding knowledge of foreign languages;
• data related to education and employment history;
• resume.

For what purposes do we collect your data, and why is the processing lawful?

The Data Controller collects and processes the data subject’s personal information for the following purposes:  

• to allow the data subject to submit their application and thereby participate in the selection process for the desired position (the legal basis for the processing lies in the pre-contractual phase between the School and the candidate);
• to manage, from an administrative standpoint, the selection of candidates based on an assessment of their merits and resumes (the legal basis for the processing lies in the pre-contractual phase between the School and the candidate).

How does the Data Controller process your personal data, and for how long does it retain it?

The data subject’s personal data is processed electronically (servers, cloud databases, application software, etc.).

The Data Controller retains the data subject’s information for a period determined in accordance with the statute of limitations under civil law and in compliance with specific sector-specific laws, as well as for the time necessary to properly pursue the purposes identified above.

Who do we share your personal data with?

internal communication scope

Only University employees and collaborators who need access to a member’s personal data in order to provide the requested services may access it, and only the information that is instrumental and related to that purpose. Specifically:

• administrative staff;
• faculty members
• collaborators.

Our employees and collaborators have been informed and trained on the importance of complying with the principles and rules regarding the processing of personal data.

external communication

The Data Controller shares the personal information of data subjects with certain suppliers who assist in providing the requested services and who are specifically appointed as external Data Processors for this purpose. In particular:

• when necessary for reasons of national security;
• for reasons of general interest;
• in response to a request from public authorities.

Member data is not transferred abroad.

Member data is not transferred abroad.

What are your rights as a data subject, and how can you exercise them?

The European General Data Protection Regulation (2016/679) guarantees specific rights to data subjects. Specifically, these include the rights to access, rectify, object to processing for commercial purposes or exclusively automated processing, erase, restrict, and port the data, as well as the right to contact the Data Protection Authority.

If the data subject wishes to exercise their rights as recognized by law, they can simply send an email to privacy@luiss.it or write to the Data Controller, Luiss 

Guido Carli, at Viale Pola no. 12 – 00198 – Rome, outlining your request and providing the necessary information to identify the applicant.

The DPO's contact details can be found on the institutional website under the “Contact Us” link.

The Data Controller will respond to you within one month. If the Data Controller is unable to respond within the specified timeframe, they will provide a detailed explanation of the reasons why your request cannot be fulfilled.