Information for other persons that have dealings with the University, temporarily or otherwise

Privacy policy applicable to third parties in relation to their relationship with the University

Privacy policy applicable to third parties in relation to their relationship with the University (in Italian)

Privacy policy applicable to coordinators of agencies and companies that intend to collaborate on job placements and internships

Privacy policy applicable to coordinators of agencies and companies that intend to collaborate on job placements and internships (in Italian)

Processing for the purposes of conducting competitive exams/selection procedures

Purposes of processing personal dataSpecific processing purposes and methods

The personal data and special categories of data (where the candidate declares to have a disability or SLD) and criminal records data (for exclusion procedures) are processed in order to manage the competition and selection procedures announced by the University. The data are processed, inter alia, for the purposes of:

  • ascertaining that the requirements for performing the selection activities are met;
  • conducting the procedures, including in relation to identifying compensatory and/or dispensatory measures for candidates with disabilities or SLD (if provided for in the call for applications);
  • managing the candidate ranking, if provided for in the call for applications, identifying the successful and/or eligible candidates, approving the documentation, and defining and assigning the role by the competent bodies and/or manager/director;
  • publishing, for transparency purposes, the ranking and/or eligibility lists in line with that indicated in the call for applications.

The data may be processed by the Examination board and by the bodies and organisational divisions concerned.

The ranked list of candidates who are successful in an open competition of the University or the list of eligible candidates (for example, for specific professional appointments) may be published in the Official Bulletin and/or the “Transparent Administration” section of the University website, where provided for by law.

Legal basisLegal basis of the processing and nature of the provision of data


The legal basis for the data processing is found in:

  • articles 6, paragraph 1, letters c) (processing in order to comply with a legal obligation) and e) (processing carried out in the public interest) and 9, paragraph 2, letter g) (processing for reasons of substantial public interest) of Regulation (EU) 2016/679;
  • the sources of law: Presidential Decree no. 497 of 9 May 1994 “Regulation laying down provisions on access to public sector employment and on the conduct of competitions and other forms of hiring in the public sector”; Directive no. 3 of 24 April 2018 “Guidelines on competition procedures”; Law no. 240 of 30 December 2010 “Provisions on the organisation of universities, academic staff and recruitment and delegation of powers to the Government to incentivise quality and efficiency in the university system”; Legislative Decree no. 165 of 30 March 2001 “General provisions on employment in the public sector”; University Regulations.

The provision of personal data is compulsory. Candidates who refuse to provide the data will not be admitted to the selection procedure and/or may not benefit from any assistance.

Recipients of personal dataRecipients

In addition to the potential recipients already indicated in the general privacy policy, the data will also be shared with the Ministry of Universities and Research as required under the laws governing mandatory disclosures regarding teachers and researchers.

The data may also be shared with other Public Administrations in the event it is necessary to obtain specific authorisation for the appointments envisaged in the call for applications.

Data retention periodData retention period

Data pertaining to successful and eligible candidates are retained indefinitely in compliance with the laws in force and for historical and archival purposes.

Privacy policy applicable to the newsletter service of the Professional Unit for Research and Third Mission Quality and Academic Rankings

Privacy policy applicable to the newsletter service of the Professional Unit for Research and Third Mission Quality and Academic Rankings

Privacy policy applicable to businesses and goods and service providers

Privacy policy applicable to businesses and goods and service providers (in Italian)

Processing of personal data in relation to technological transfer activities

Purposes of processing personal dataSpecific processing purposes and methods

Personal data and any special categories of data (that may relate to the patient in cases of biotechnological inventions) are processed in relation to the protection, promotion and valorisation of research results, as well as in relation to agreements for the transfer of the University's intellectual property rights.

With regard to data relating to patent applications, the author’s details (name, surname, and organisation to which he/she belongs) are made public following submission of said applications:

  • by the Authorities responsible;
  • on the University website.

The data may also be processed for monitoring, assessment and third mission purposes.

Legal basisLegal basis of the processing and nature of the provision of data

The legal basis for the above data processing is found in:

  • article 6, paragraph 1, letter b) (processing necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract) and letter e) (processing necessary for the performance of a task carried out in the public interest) and article 9, paragraph 2, letter a) (processing based on the consent of the data subject), letter g) (processing necessary for reasons of substantial public interest) and letter j) (processing necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes) of Regulation (EU) 2016/679;
  • articles 17, 23, 37, 54, 56, 151 of the intellectual property code (Legislative Decree no. 30 of 10 February 2005, as amended);
  • international agreements on patents and trademarks, in particular: the European Patent Convention of 5 October 1973 and the Act revising the EPC of 1991; the Patent Cooperation Treaty concluded in Washington on 19 June 1970 and last amended on 3 October 2001;
  • Legislative Decree no. 175 of 19 August 2016, Consolidated Act on public companies;
  • Ministerial Decree no. 168 of 10 August 2011, “Regulation on the definition of criteria for the investment by university professors and researchers in spin-off or start-up companies in implementation of the provisions of article 6, paragraph 9 of Law no. 240 of 30 December 2010”;
  • the Regulations of the Alma Mater Studiorum - University of Bologna concerning industrial and intellectual property R.D. 269/2014, as amended.

The provision of personal data is mandatory. Any refusal to provide the data will make it impossible to achieve the aforementioned purposes.

Recipients of personal dataRecipients

In addition to the recipients mentioned in the general privacy policy, the data may also be sent to:

  • public and private persons who are joint data controllers, licensors and licensees of the University’s intellectual property rights;                                                                                                     
  • government bodies responsible for the protection of intellectual property (for example: Wipo, Epo, Uibm);
  • investors;

collaborators and external organisations to which work is outsourced, appointed as Data Processors pursuant to art. 28 of Regulation (EU) 2016/679, that support the University in performing the activities relating to which the data is processed

Transfer abroad of personal dataTransfer of data outside of the EU and the conditions applicable to the transfer

If the above recipients operate outside of the European Union, the data may occasionally be transferred abroad:

  • based on an adequacy decision of the European Commission pursuant to art. 45 of Regulation (EU) 2016/679;
  • by adopting one of the safeguards indicated in art. 46 of Regulation (EU) 2016/679 (for example, the clauses adopted by the European Commission on the type of data protection);
  • in the absence of the above, by adopting the conditions referred to in art. 49 of Regulation (EU) 2016/679 (for example, where the transfer is necessary for the establishment, exercise or defence of legal claims).

Data retention periodData retention period

All documents containing personal data are kept indefinitely, also for historical and archival purposes. Data processed during the accreditation of spin-off and start-up companies are kept only for the period during which the relationship is active.