Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”)
Information when personal data are collected from the data subject

According to Regulation (EU) 2016/679 (General Data Protection Regulation) we provide you with the due information concerning the processing of the collected personal data. This privacy policy is given pursuant to art. 13 Regulation UE 2016/679 ( General Data Protection Regulation).
Data controller, pursuant to art. 4 and 24 of the Reg. (EU) 2016/679, is LUMSA Libera Università Maria Ss. Assunta, registered office in Via della Traspontina, 21 – Roma, representend by the Board Chairman.
The company has appointed the Data Protection Officer (DPO) pursuant to art.37-39 of the Reg. UE 2016/679 whose contact is: e-mail

Processing purposes

Lawfulness  Data retention

A)  Allow you to create a registration account, also valid for logging in to the University APP, with which you can access a range of services including registering for admission tests, assessment tests, etc.

Art. 6 par. 1 lett. b) as legal basis of the processing

Execution of pre-contractual measure

Until your request to cancel your account
B) Send you service communications (e.g. deadline for university enrolment) Art. 6 par. 1 lett. b) as legal basis of the processing
execution of pre-contractual measures
One year

C)  Check of qualifications and study requirements at the institutions of origin (i.e. school, university

Art. 6 par. 1 lett. a) as legal basis of the processing


The certification of possession of the requirements will be kept together with the documentation relating to the enrollemt
D) Send you communications about training events, orientation, degree courses (subrscription to the LUMSA newsletter)

Art. 6 par. 1 lett. a) as legal basis of the processing


 Opt – out


Nature Of Underwriting And Refusal
The provision of personal data for A), B) purposes is necessary to fulfill the above mentioned purposes.
The provision of personal data for C) purpose is optional and the non submittal of personal data will not prevent you from receive the services of A) and B) purposes. The provision of personal data for D) purpose is optional and the non submittal of personal data will not prevent you from receive the services of A) and B) purposes.

Recipients or Categories of Recipients of Personal Data
Personal data provided by you may be communicated to recipients, which shall process your data as Processors (art. 28 of the Reg. EU 2016/679) and/or persons acting under the authority of the Controller and the Processor (art.29 of the Reg. UE 2016/679) for the purposes above. Precisely, your data may be communicated to recipients part of the following categories:  internal staff of the Data Controller; - subjects providing services for the management of the information system and communication networks (including e-mail and web sites); - studies or companies in the context of assistance and consultancy relationships; - Competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request.
The subjects belonging to the aforesaid categories act as data Processors or act in complete autonomy as separate data Controllers.

Data Transfer to a Third Country and/or International Organisation
Personal data won’t be transferred within or outside the European Union.

Data Subject’s Rights
You may exercise your rights as indicated in the Regulation EU 2016/679, by contacting the data Controller, sending an e-mail to or by phone: 06 684 221. In particular, you have the right to: obtain confirmation that a  processing is underway and if so, to request the data Controller to access of this Data and obtain other information like: kind of Personal Data; recipients or categories of recipients of personal data; data retention period or relevant criteria; the right to ask to rectification, cancellation of your personal data or the limitation of the processing of them; the right to object the processing of your data; the right to lodge a complaint with the Data Protection Authority; if the Personal Data has not been collected by the Data Subject, all the information concerning the origin.

To stop receiving automated direct marketing communications (e-mails), simply write an e-mail at any time to the address with the subject "cancellation by automated" or use our automatic cancellation systems provided for e-mails only.

Without prejudice to any other administrative and jurisdictional appeal, if you believe that the processing of data concerning you, violates the provisions of EU Reg. 2016/679, pursuant to art. 15 letter f) of the aforementioned EU Reg. 2016/679, you have the right to lodge a complaint with the Guarantor for the protection of personal data. In the cases provided for, you have the right to the portability of your data and in this case the Data Controller will provide you with your personal data in a structured format, commonly used and readable, by automatic device.

Modification of the privacy policy
The Data Controller reserves the right to modify, update, add or remove portions of this privacy policy at its sole discretion and at any time. In order to facilitate such verification, the policy will contain an indication of the date of updating.


Upgrade date: 22th July 2019

Altri Corsi di formazione

Altri Corsi di formazione

Corsi di Laurea Master e Post Laurea

Ateneo partner o membro di