This information notice is provided in accordance with Article 13 of Italian Legislative Decree no. 196 of 2003, Code in relation to Personal Data Protection, to users of the website and services of the Information Systems and knowledge management Laboratory at the Department of Computer Science of the Università degli Studi di Milano (hereafter known as the “University”).

It is also applied to thematic websites and services belonging to the islab.di.unimi.it domain.

This information notice is limited to browsing on the aforementioned websites and does not apply to websites external to the University even if explored by following links contained on this website and related services.

1. Processing Controller

Exploring this website may involve data processing by identified or identifiable personnel.

The processing controller is the Università degli Studi di Milano with registered offices in Via Festa del Perdono, 7 – 20122 Milan.

2. Processing Managers

For this website, data processing is mainly performed at the University’s sites. It is performed by identified personnel especially appointed for the purposes of the requested and subscribed services.

For the considered processing, the University may rely on assistance from external companies, consultants, consortia, suppliers of software and operating services, by means of identified and appointed personnel, as part of the relevant purposes and in such a way to ensure the maximum data security and confidentiality.

3. Types of Data Processed
3.1. Website exploration: Browsing Data

During the normal operation, this website acquires browsing data whose transmission is implicit in the use of Internet communication protocols.

This data is used to obtain statistical information on the use of this website and to check its correct operation and it is not associated with identified users; however, by due to its nature and through the association with data held by third parties, it could be possible to enforce identification of the interested parties. This includes, for example, the IP address of the system used to connect to this website.

This data is removed from the system after that statistics are processed and it is stored offline exclusively to ascertain liability in the case of computer crimes and it may only be exploited upon request by the judicial authority.

3.2. Data provided voluntarily by the user when using the online services

In order to use the online services that involve authentication, registration or sending of e-mails, personal data freely provided by users is used according to different modalities:

3.2.1. Access to website areas reserved to specific user categories

On the website, access to restricted areas is reserved to login-based user categories. Access to reserved areas requires authentication through the University account.
The personal data of students and graduates, acquired upon enrolment and registration or by any subsequent collection methods, and personal data of staff and/or collaborators of the University that may be acquired through procedures and online services will be processed in order to perform the institutional activities of the University, within the limits established by the law and regulations, in compliance with the general principles of transparency, correctness and confidentiality as identified in the Regulation implementing the rules in relation to personal data protection.

3.2.2. Sending of e-mails to addresses identified on the website

The optional, explicit and voluntary sending of electronic mail to the addresses identified on the website involves the subsequent acquisition of the sender’s address, required to respond to the requests, along with any personal data included in the communication.

4. Optional Provision of Data

Some data required for registration is mandatory and any failure to provide it implies the impossibility to successfully complete the website registration.
Registration and subscription data are provided voluntarily.
Individuals making the registration freely give their approval to data processing, in the awareness that in the absence of that approval the registration and subscription of the services may not be completed successfully.

5. Processing Modality

The personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected.

Specific security measures are applied in order to prevent data loss, its unlawful or incorrect use, and any unauthorised access.

6. Use of Cookies

Cookies are text files that are stored on the web user devices to enable safe and efficient browsing and monitoring of this website.
This website uses two types of technical cookies: session cookies for authentication (online services and reserved areas) and tracking cookies (Google Analytics).
The website does not use profiling cookies.

6.1. Session cookies (essential for using the online services and accessing reserved areas of this website)

This website uses http session cookies to manage the authentication of online services and reserved areas. The use of session cookies (which are not stored permanently on the user's device and are removed when the browser is closed) is strictly limited to the transmission of session identifiers (constituted by random alphanumeric strings generated by the server) required to allow safe and efficient browsing of this website.

By disabling these cookies, online services cannot be used.

Session cookies:

NameOriginFunctionExpiration

PHPSESSID

this website

session tracking

till session end (when you close your browser)

JSESSIONID

this website

session tracking

till session end (when you close your browser)

fusion_user

this website

session tracking

till session end (when you close your browser)

Random 32-alphanumeric string

this website

session tracking

till session end (when you close your browser)

6.2. Tracking cookies

Tracking cookies can be disabled without any effect on browsing of this website: to disable them, please see the next section.

Tracking cookies:

NameOriginFunctionExpiration

jbcookies

this website

it stores the acceptance of cookie policy

12 months

fusion_visited

this website

it represents the fact that this site has been already visited

1 day

fusion_lastvisit

this website

it provides the timestamp of the last visit

1 day

Random 32-alphanumeric string

this website

it stores the selected language

12 months

6.3. Monitoring cookies

This website uses the Google Analytics services of the company Google, Inc. (hereafter "Google") to generate statistics on use of this website; Google Analytics uses cookies (not of third parties) which do not store personal data. The cookie information on the use of this website by the user (including the IP address) is transmitted from the user's browser to Google, based at 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, and stored on the servers of that company.

In accordance with the terms of the service in place and being an autonomous data processor, Google uses this information for tracking and examining the use of this website, for generating reports on the website activity to be used by the website masters and for providing other services related to the website activity, the connection method (mobile, PC, browser used, etc.), and the searching and accessing methods used for exploring the pages of this website. Google may also transfer this information to third parties where this is required by the law or where those third parties process the aforementioned information on Google's behalf.
Google will not associate the IP addresses with any other data stored by Google.

By using this website, you approve your data to be processed by Google using the methods and for the purposes described above.

Further information on the privacy information notice of the company Google, are available on the
Google Analytics service and on the Google's privacy policy.

Tracking cookies:

NameOriginFunctionExpiration

_ga

Google

it is used for collecting anonymous data on statistical website access

24 months (2 years): expiration is updated after each access

_gat

Google

it is used for collecting anonymous data on statistical website access

10 minutes

Monitoring cookies can be disabled without any effect on browsing of this website: to disable them, please see the next section.

6.5. How to disable cookies (opt-out)

It is possible to withhold the approval to the use of cookies by selecting the appropriate setting on your browser: in any case, unauthenticated browsing on this website will be available in all its functions. We set out below the links which explain how to disable cookies on the most popular browsers (for additional browsers, we suggest to search this option from the software help menu, which can usually be accessed by pressing the F1 key:


Alternatively, it is possible only to disable the Google Analytics cookies, using the additional opt-out component provided by Google for the main browsers. This way, it will also be possible to use the website services and to access the reserved areas of this website.

7. Rights of the Interested Parties

In accordance with Art. 7 of Italian Legislative Decree no. 196/2003, the interested party may exercise:

the right to know:

  1. the origin of the personal data,
  2. the purposes and methods of processing,
  3. the logic applied in the case of processing performed with the use of electronic tools,
  4. the identification details of the controller, managers, individuals or categories of individuals to whom the data may be communicated or who may come to know of it.

the right to obtain from the controller or manager, without delay:

  1. the update, rectification or, where applicable, addition to the data,
  2. the deletion, transformation into anonymous form or block on data processed in breach of the law, including data whose storage is unnecessary in relation to the purposes for which it was collected or subsequently processed,
  3. confirmation that the operations referred to in letters a-b above have been brought to the attention, also as regards their content, of those to whom the data has been communicated or disseminated, except in the case where that fulfilment is found to be impossible or involves the use of manifestly disproportionate means compared to the protected right.

the right to object in whole or in part:

  1. for legitimate reasons to the processing of personal data relating to them, even if relevant to the purpose of its collection,
  2. to the processing of personal data relating to them for the purposes of sending advertising material or direct sales or to complete market research or sales communication.

The rights may be exercised by sending a request to the Controller (Università degli Studi di Milano – Legal Activities Division – Legal Department, via Festa del Perdono n. 7 – 21022 Milan).