Privacy policy


Data Protection Officer (DPO)

Privacy policy of this web site

Contact details of Data Protection Officer

Marco Marchetti:
telephone: +39 050500082

Information sheet regarding the processing of personal data pursuant to Art. 13 EU Reg. 679/2016

Pursuant to EU Regulation UE 2016/679 of the European Parliament and of the Council of 27th April 2016, the statement herein is intended exclusively for the institutional web sites of the Scuola Normale Superiore.

Data controller

The Scuola  Normale Superiore, in the person of its pro tempore Director, and situated in Pisa, dei Cavalieri 7, tel +39.050.509111, pec:, is the data controller regarding personal data disclosed freely or acquired automatically from the institutional web sites.

Purposes of data processing and legal basis

In compliance with the principles of lawfulness, correctness, transparency, adequacy, pertinence and necessity pursuant to Art. 5, paragraph 1 EU Reg. 679/2016, the Data Controller undertakes to process any personal data, collected automatically via browsing in the SNS web sites or provided freely, for the following purposes:

browsing data, that is, information including Internet Protocol addresses and domain names of computers utilised by the user connecting to the web site; Uniform Resource Identifiers of the resources requested, time of the request, the method utilised to submit the request to the server, the size of the file obtained in reply from the server, and the numerical code indicating the state of the reply given by the server (confirmation, error); other parameters relating to the operating system and the computing environment of the user are collected for the sole purpose of gathering anonymous statistical information about the use of the web site and for verification of correct functioning. Such data, albeit never collected for the purposes of association with identified interested parties, may in any case enable user identification through processes and associations with data retained by third parties. The said data can also be utilised for verifying responsibility in cases of computer crimes against the web sites.
Any data provided freely by the user - that is, any information or personal or identifying data collected to enable the user to access certain services he or she has requested, such as non-institutional e-mail address, personal phone numbers, any particular or judicial personal data inserted freely by the user during the use of online services or via the submission of requests to the e-mail addresses published - are processed for the sole purpose of carrying out institutional activities and in the interest of the subject requesting the service.
Data collection and retention times differ for each online service and are described in detail in the specific information contained in the pages to be signed.

Categories of data recipients and possible data transfer

Data processed for the above mentioned purposes will be communicated to, or in any case accessible to, all employees and collaborators assigned to the competent offices of the Data Controller, who, as referents for data protection and/or systems administrators and/or responsible for data processing, will be adequately instructed for the purpose by the Data Controller.

The Scuola Normale Superiore may convey the personal data it controls to other public administrations should the latter need to process the same for any proceedings regarding their own institutional competence, as well as to all those public subjects to whom, in the presence of the related requirements, the communication is rendered mandatory by any EU instructions, or by any other laws or regulations.

Management and retention of personal data collected by the Scuola Normale Superiore is via servers placed within it.

Period of data retention

Automatically collected browsing data are retained for the 24 hours necessary to obtain the anonymous statistical information as to the use of the web site and to verify its correct functioning; they are cancelled immediately after processing.  For retention times of other data freely provided by the interested party, please see the specific information sheets published by the relevant offices.

Rights of interested parties

Pursuant to Articles 15, 16, 17, 18, 19 and 21 of EU Reg. 679/2016, interested parties have the right to request from the Data Controller the following: access to their personal data and to all other information; the correction of incorrectly inserted personal date and the integration of incomplete data; the cancellation of their data, with the exception of those contained in documents that must obligatorily be retained by the Scuola Normale Superiore and if there is no prevailing legitimate reason for proceeding to the processing of the data; the limitation of the processing in the presence of one of the hypotheses referred to in Art.18 of the above mentioned Regulations.
Interested parties also have the right to object to the processing of their personal data, without prejudice to the necessity and obligatoriness of the processing for the purposes of establishing the relationship; to revoke their consent to non-obligatory processing of their data, without prejudice to the legality of the processing based on consent given  prior to the revocation.
Interested parties  may exercise any of the above mentioned rights by sending an e-mail to the Data Controller, e-mail address  
Interested parties have the right to lodge a complaint with the Data Protection Authority, pursuant to Art.77 of EU Reg. 679/2016.
For any further information, the Data Controller may be contacted at the following e-mail address:   

Obligatoriness or otherwise of the provision of data

Save for the specifications for browsing data, users are free to provide their personal data or not. The provision of such data may be needed in order for some online services to be used.


Cookies are text files that are sent to the computers of web users to enable safe and efficient browsing of the site and to monitor its use.
We guarantee that no personal data are acquired on purpose from the web site. This site uses only technical cookies to enable correct browsing, with the aim of continuous improvement of the service. The web site uses profile cookies managed by the centralised platform Web Analytics Italia (WAI) di AgID. WAI hosts the statistical data of the web sites of the Italian PAs participating in the project.

Technical cookies present on the web site

User session cookies: these are indispensable for managing the authentication to online services. These cookies are not memorised persistently on the user's computer and are eliminated when the browser is closed down; their use is strictly limited to the  transmission of session identifiers necessary to enable safe and efficient browsing of the site;
Configuration cookies for consent to the use of cookies. These terminate after 180 days.
Other cookies may be installed on the user's terminal if he or she accesses the links  present on the web site for visualisation, such as of videos or of other information present on the social networks (YouTube, Facebook etc.). The information sheets regarding the processing and consent to use are the responsibility of the providers of the said services. These cookies may be refused by the user with no consequence for browsing the web sites of the Scuola Normale Superiore.
The portal utilises the technical cookies of Web analytics Italia (WAI), the national platform for the collection and analysis of statistical data relating to traffic of the sites and  digital services of the Italian Public Administration (there is available the specific information sheet of WAI)  The user can choose whether or not to accept the cookies directly, using the settings of his or her browser, and can prevent, for example, third parties from installing them. With the browser preferences, cookies installed in the past can be eliminated, including those for which consent to their installation on the part of this web site is saved.
It should be borne in mind that, by disabling all cookies, the use of some services, and in particular online services, may be compromised.
Users can find information as to how to manage cookies directly on the browser in use.