Information for users of the Guidance Service

The following information is provided pursuant to art. 13 of Decree no. 196/03 (Privacy Code), which requires data subjects to be given information about the processing of their personal data.

The Alma Mater Studiorum – Università di Bologna is updating its privacy policies pursuant to the new EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data.

In the next few days this privacy policy will be brought up to date.

In the meantime, the current privacy policy is supplemented by the information published on the Privacy Policy Update pursuant to the EU General Data Protection Regulation (2016/679)" webpage (in Italian).


Purpose and methods of processing personal data

Your data will be processed in the context of managing/monitoring your individual path and providing orientative advice and support in planning your university study route.

For these reasons, the guidance paths and activities undertaken by each user are documented/stored/processed by the University on platforms such as Moodle (e.g. exercises completed, survey results, pages visited), and by matching these data with data from AlmaOrientati questionnaires (provided by Almalaurea). Your data will be processed specifically and individually for the purpose of: 

  • guaranteeing that constant attention is given to your guidance path outcomes and university career, with the provision of support in the “essential” stages;
  • activating direct channels of communication (e.g. individual interviews) in the event of specific needs or risk of university dropout.

The data, in aggregate form, will also be processed for the purpose of studying and disseminating models and practices within the university, exchanging information and experience and activating a process for monitoring and evaluating teaching quality. 

The guidance activities and related data processing will be managed by the AFORM Internship and Placement Guidance Office (AFORM – Settore Orientamento Tirocini e Placement). 

Your data will also be processed as specified in the Moodle platform user information.

Nature of data

The provision of personal data is compulsory. Failure to provide the data will make it impossible to use the guidance service.

Parties involved in processing

3.1  Data controller

The Controller of the data provided by you is the University of Bologna, with registered offices at via Zamboni 33 - 40126 Bologna, which you may contact in order to exercise your rights pursuant to art. 7 of Decree no. 196/03.

3.2 Data processors

3.2.1 AFORM - Academic Affairs Division

The Data Processor responsible for the processing of the data at both individual and aggregate level for the purposes described above is the Head of AFORM – Dr. Angela Negrini – Via Zamboni, 3 - Bologna (BO).

3.2.2 Information Systems and Applications

The Data Processor responsible for the management of the site technology and computer-based data storage is the Head of Information Systems and Applications (CeSIA) –  Enrico Lodolo - Viale Filopanti, 3 -  Bologna (BO).

3.2.3 Other Processors

The "Data processors" are the heads of the administrative, service, education and scientific Structures that process the data (the heads of each Structure are listed on the website, in relation to the mission of the relevant Structure.

Flow of data

Your personal data is processed by the University's Structure and employees exclusively for institutional purposes and in line with the related legislative and regulatory requirements. Solely for these purposes, your data may also be communicated to:

  • certifying administrations, for the checking of self-executed affidavits provided pursuant to Pres. Decree no. 445/2000;
  • judicial authorities (criminal code and criminal procedures code);
  • to University personnel for research or teaching activities designed to analyse possible improvements in the service, in a form that does not allow direct identification of the data subject;
  • to private parties, upon request from the data subject, to confirm the existence of qualifications/certificates;
  • public and private entities (Foundations, Associations, Firms etc.) for the management of the University's own institutional activities (pursuant to art. 4 of Rectoral Decree D.R. no. 271/2009, the University General Statute, the University regulations and other current regulations);
  • to the parties referred to in art. 16 e ss. del D.R. 271/2009

Rights of the interested party

Pursuant to art. 7 of D.Lgs. no. 196/2003, the party to whom the personal data refers has the right to:

  • obtain confirmation of the existence of their personal data, even if it has not yet been recorded, and its communication in an intelligible form;
  • obtain information concerning:
    a. the origin of his/her personal data;
    b. the purpose(s) of processing and the methods use;
    c. the logic applied  to the processing of his/her personal data using electronic equipment;
    d. the details of the data controller and data processors and the representative, where designated pursuant to article 5, para. 2;
    e. the parties or categories of parties to which the personal data may be disclosed, or the parties which may have access to the data in their capacity as designated representative or his appointed staff in the national territory.
  • obtain:
    a. the updating, correction and/or integration of your personal data;
    b. the deletion, transformation into an anonymous form or suspension of any data processed in breach of the law, including those for which storage is not required in relation to the purposes for which the data was collected or subsequently processed;
    c. the confirmation that the operations referred to in points a) and b) have been notified, also as far as the content is concerned, to those to whom the data was communicated or transmitted, except in those cases in which such notification is impossible or requires the use of means which are manifestly disproportionate to the protected right.
  • oppose, wholly or partly:
    d. the processing of his/her personal data wholly or partially for legitimate reasons even where this is pertinent to the purposes for which the data was collected;
    e. the processing of his/her personal data for the purposes of sending advertising or direct sales materials or for the execution of market research or marketing surveys.
    You may exercise these rights by writing to the Data Manager or to