Privacy Policy

Information for the processing of personal data of users of the University of Florence websites

The General Regulation on the Protection of Personal Data (EU Regulation 2016/679 of the European Parliament and Council of 27 April 2016) from now on GDPR, provides for the protection of individuals with regard to the processing of personal data as a fundamental right.

This information is provided only for the institutional and related thematic sites (in Italian) of the University of Florence and has no value for other websites that may be reached through links on the pages visited by users, pursuant to article 13 of the GDPR.

Data Controller

The data controller of your personal data voluntarily disclosed or acquired automatically by the website of the University of Florence is the University itself, located in Florence, Piazza San Marco, 4 - phone 055 27571 - email urp(AT), pec: ateneo(AT)

Data Protection Officer

The Data Protection Officer (RPD) is Mr. Massimo Benedetti, Director of the General and Legal Affairs Department, Florence, via G. la Pira, 4 - phone. 055 2757667 - email: privacy(AT)

Purposes of the procession and legal basis

In compliance with the principles of lawfulness, fairness, transparency, adequacy, relevance and necessity as per art. 5, paragraph 1 of the GDPR the University of Florence, as Data Controller, will process the personal data automatically collected during your navigation on the websites of the University or voluntarily disclosed, for the following purposes:

Categories of data users and possible data discosure

The data processed for the purposes mentioned above will be communicated or will in any case be accessible to employees and collaborators assigned to the competent offices of the University of Florence, who, in their capacity as data protection officers and/or system administrators and/or persons in charge of processing, will be adequately trained for this purpose by the Controller.

The University can disclose the personal data under its control to other public administration offices if these must process the data for any proceedings falling under their own institutional competence as well as to all those public entities to which, in the presence of the relevant prerequisites, the communication is mandatory according to EU provisions, laws or regulations.

The management and conservation of personal data collected by the University of Florence takes place on servers located within the University and/or on external servers provided by of suppliers of a number of services necessary for the technical-administrative management of data. Such suppliers, for the sole purpose of the requested service, may have access of your personal data and in such cases they will be duly appointed as Data Processors pursuant to art. 28 of the GDPR.

An updated list of Data Protection Officers for data of which the University of Florence is Controller is available here (pdf in Italian). 
The data collected will not be transferred to countries outside the EU.

Data retention time

The automatically collected navigation data is kept only for the time necessary (24 hours) to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. 
For the retention times of the other data voluntarily given by the user, please refer to the specific information available here (in Italian).

Your rights

You have the right to request from the University of Florence, as the data controller, pursuant to articles 15, 16, 17, 18, 19 and 21 of the GDPR:

You also have the right to:

How to exercise your rights

You may exercise all the above rights by sending an e-mail to the Data Protection Officer at the following e-mail address privacy(AT)


You also have the right to lodge a complaint with the Guarantor Authority for personal data protection pursuant to art.77 of the GDPR. (

Compulsoriness of data disclosure

Besides what mentioned above concerning navigation data, disclosure of personal data is optional. Some data disclosure may be necessary in order to use certain online services.

More information on the protection of your personal data is available online (in Italian).