INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA

Erasmus Student Network Milano Bocconi - ETS, (hereinafter “ESN Bocconi”), and Erasmus Student Network Italy, headquartered in Rome, Via Anastasio II, 80, as data controllers, inform you pursuant to Article 13 of EU Regulation no. 2016/679 (hereinafter, “GDPR”) that your personal data will be processed according to the methods and for the purposes indicated in this notice.

Subject and Purpose of Processing

The data processed are those you have provided (personal, residence, and contact data), in any form. These are collected for the purpose of becoming a member of ESN Bocconi and to send you information regarding the activities of both ESN Bocconi and ESN Italy, those of other associated entities (listed herein), and those of Erasmus Student Network AISBL. You may also receive further communications from ESN Bocconi’s local and national institutional and commercial partners.

Methods of Processing

The processing of your personal data is carried out in reference to the operations indicated in Article 4, no. 2 of the GDPR, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, restriction, communication, erasure, and destruction of data.

Data processing will be conducted by electronic and non-electronic means to achieve the purposes mentioned above, in compliance with legal requirements and according to principles of fairness, applying standard security measures to minimize the risk of data disclosure.

Data will be retained for as long as you remain a member or use the services of our association and, subsequently, for a period in compliance with legal requirements.

Data Disclosure

Personal data may be shared with institutional and commercial partners of ESN Bocconi and Erasmus Student Network Italy, with Erasmus Student Network AISBL, and their respective institutional and commercial partners, in order to enhance the exchange project experience for ESN Bocconi members and members of other associations within the Erasmus Student Network.

Without the need for express consent (Art. 6, letters b) and c) of the GDPR), ESN Bocconi may communicate your data for the purposes outlined in Art. 2.A) to supervisory bodies, judicial authorities, insurance companies for the provision of insurance services, as well as to those entities for whom data disclosure is required by law. These entities will process the data in their capacity as independent data controllers.

ESN Milano Bocconi informs you that personal data may be shared with individuals or legal entities located within the European Union. Any transfer of data outside the EU will occur only with companies based in countries whose privacy regulations have been deemed adequate by the European Commission. Personal data may be shared with companies based in the United States that are certified under the EU-US Privacy Shield framework.

Data Subject Rights

As a data subject, you have the rights outlined in Articles 15–22 of the GDPR, specifically the rights to:

* Obtain confirmation as to whether or not personal data concerning you exist, even if not yet recorded, and to receive such data in an intelligible form;

* Be informed of:

a) the source of the personal data;

b) the purposes and methods of processing;

c) the logic applied in case of processing with the aid of electronic instruments;

d) the identification details of the data controller(s) and data processor(s);

e) the parties or categories of parties to whom the personal data may be communicated or who may become aware of them;

* Obtain:

a) the updating, rectification, or, when of interest, integration of the data;

b) the erasure, anonymization, or blocking of data processed unlawfully, including data that do not need to be retained for the purposes for which they were collected or subsequently processed;

c) certification that the operations under letters a) and b) have been communicated to those to whom the data were disclosed or disseminated, unless this proves impossible or involves a disproportionate effort compared to the right being protected.

Where applicable, you also have the rights under Articles 16–21 of the GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.

Exercising Your Rights

You may request at any time, by post or email, the modification or deletion of your data by contacting the Data Controller, at milano_bocconi@esn.it.

Your request will be fulfilled within 30 days.

Any dissatisfaction or complaint may be submitted to the Data Protection Authority

ESN Bocconi Spring 2026