Information notice pursuant to art. 13 and art. 14 of GDPR 2016/679

Identity and contact details of the Data Controller. The Data Controller is eCampus University (hereinafter “eCampus”), with registered office at 10, Via Isimbardi, 22060 Novedrate (CO), Italy, VAT No./Tax Code 90027520130

  1. Contact details of the Data Protection Officer (DPO). The Data Protection Officer may be contacted at the following address:

  2. Purposes of the processing (art. 6 para. 1 of the GDPR).
    1. for the fulfilment of legal requirements; in order to comply with obligations set forth by law, regulations, or EU rules and regulations, or obligations deriving from the instructions of the authorities or supervisory bodies; for the purposes of querying this domain;
      for the purposes of managing the contractual and/or precontractual relationship with eCampus: specifically, for the aim of planning and providing the education activities that you have selected;
      purposes closely linked to and essential for the management of the aforementioned relationship (e.g. to obtain information regarding enrolment and registration in degree courses, to perform the operations and services requested);
    2. for communication of commercial information and for sending advertising/information material on products and services also of subsidiaries, parent companies, associated companies, joint controllers that may be of interest to you, by automatic or conventional methods, e-mail and linked Web applications, with your consent;

  3. Categories of personal data. We will process the personal data you provided when filling in the forms available at the collection points of this domain, which directly or indirectly pertain to your relationship with eCampus and which are necessary for the fulfilment of legal requirements. The provision of data is not mandatory. Should you choose not to provide data that are necessary for registration, the Data Controller, the Data Processors and the persons tasked with processing of the data will be unable to provide the related services. Furthermore, the IP number and the type of browser used by you to connect to the domain will also be processed (non-identifying information), automatically recorded by logic protection and control devices, solely for the purpose of controlling web traffic.

  4. Recipients of personal data. In the context of the aforementioned purposes, your data will or may be sent to: banks and/or credit institutions in charge of handling payments according to the agreed payment methods; insurance firms for settling any damage compensation procedures; authorised bodies or organisations for the fulfilment of the related obligations within the limits of the provisions of the law; subsidiaries, parent companies, associated companies, joint controllers and data processors in their capacity as natural or legal persons who, also pursuant to a contract with eCampus, provide specific processing services or perform activities that are related to, instrumental for or in support of the activities of eCampus.
    The names of any external Data Processors or Joint Controllers may be obtained from the Controller or may be obtained by sending as request to the addresses under point a) above.
    The information notice is provided for the eCampus domain and not for other websites that the user may visit via links. The presence of the information notice assures the user they are within the domain of eCampus or of the responsible Data Processors.

  5. Transfer of data outside the European UnionPursuant to art. 45 of the GDPR, the personal data may be transferred to a third country or to an international organisation if the Commission has decided that the third country or the international organisation in question assures an adequate level of protection or other adequate guarantees set forth by the GDPR.

  6. Processing methods. With regard to the aforementioned purposes, your personal data shall be processed in hard copy, by electronic or telecommunications means able to save, transmit and share said data. eCampus University would like to inform you that the data you provide shall be subject to processing by persons tasked for this purpose, either manually, in hard copy or IT, by entering the data in archives or databases. The Data Controller and the Data Processors implement adequate technical and organisational measures to assure a level of security that is appropriate to the risk, in compliance with the regulations in force, so as to guarantee the security and confidentiality of your data.

  7. Period of storage of personal data. In the context of the aforementioned purposes, your personal data shall be stored for the term of the contract and for the ten years following the period during which the Data Controller is obliged to store said data for fiscal, contractual or other requirements set forth by the law or regulations or for the purposes mentioned above; after said period, unless expressly confirmed by the data subject, the data shall be deleted.
    By way of a non-limiting example:
    for commercial purposes, taking into account the legitimate interest of the data controller to store the collected personal data to offer products and services deemed to be of interest for you; the personal data shall be stored in a format that allows the data subjects to be identified for the period of time required to pursue such legitimate interest and, specifically, until completion of enrolment, to include data collected by third parties and/or joint controllers, as per point b2;
    for compliance with legal or contractual obligations, for up to ten years following the expiry of the contract and, in any case, for the period set forth by the law or arising from the contract;
    in the event of dispute, for the period of time necessary for defence in and/or out of court and, in any case, for at least ten years following the expiry of the contract and/or for the period of time necessary for defence in court.

Rights of the data subject

You may at any time exercise the rights under articles 15-22 of the GDPR (e.g. request confirmation of the existence of your personal data; access the personal data, request their rectification, deletion or restriction of the processing that concerns you, their portability in a structured common-use format, and request them to be transferred to another data controller), by sending a registered letter to the following address: Università Telematica eCampus, 10, via Isimbardi, 22060 Novedrate (CO), Italy, VAT No./Tax Code 90027520130 or by sending an e-mail to


Pursuant to art. 8 of the GDPR, the processing of the personal data of minors under 16 years is lawful. Where minors are younger than 16, said processing shall be carried out only with the consent or authorisation of the holder of parental responsibility.

In such cases, the data controller shall take all reasonable measures to ensure that the holder of parental responsibility over the minor has granted or authorised consent, taking into consideration available technology.


You may lodge a complaint (art. 77 of the GDPR) with the Italian Data Protection Authority and/or object to the processing of your data (art. 21 of the GDPR).