Create an Account

Privacy Policy
This notice is provided pursuant to art. 13 of EU Regulation 2016/679 (hereafter GDPR) to those who interact with the web services of the Scuola Normale Superiore, electronically accessible via the address www.sns.it, which corresponds to the home page of the Scuola Normale Superiore’s official website.

Data Controller
Following consultation of this website, data on identified or identifiable persons may be processed, in compliance with current Italian and European legislation.
The Data Controller of such processing is the Scuola Normale Superiore, with its registered office in Piazza dei Cavalieri, 7 – 56126 Pisa (Italy), in the person of the Director, its pro tempore legal representative.

Categories of data collected, purposes and lawfulness of the data processing
Personal data provided by users shall be processed in accordance with the requirements for the lawfulness of data processing set forth by art. 6 letter b) of the GDPR for purposes related to the purchase of Edizioni della Scuola’s products and to the delivery of information (newsletters, answers to queries, estimates etc.) which are needed to perform the services requested. Personal data may be communicated to third parties only in the event that this is necessary to one of these ends (e.g., in the case of delivery service of publications).
More specifically, the personal data collected by this application essentially concern:
-identification data (name, surname, e-mail address, password);
-product delivery data (shipping and billing address, telephone number, tax ID number, VAT number).
These data shall be processed for the following purposes:
-to collect the information needed for the registration on the website and for the specific provisions related to e-commerce services (submission, payment and shipment of the orders);
-to send information on the activities of the Edizioni della Normale (newsletter);
-to develop statistical research and studies on aggregated data in relation to website access.
Apart from what is specified for the browsing data in the cookie information, the user is free to provide personal data contained in the request forms in order to request the sending of information material or other communications. The provision of personal data is voluntary. However, any missing and/or partial and/or inaccurate provision of such data shall entail the impossibility to obtain what has been requested pursuant to and for the purposes of art. 7 of the GDPR.

Processing methods
Personal data are processed using automated equipment for the time strictly necessary to achieve the purposes for which the data have been collected.
Specific security measures are taken to prevent the loss of data, their unlawful or improper use and any unauthorized access to them.
The personal data requested during the registration procedures on the edizioni.sns.it website will be stored and processed, with the aid of automated tools, in order to register on the website, to manage any purchase request and, unless the users express their dissent by e-mail, to keep them informed about the initiatives and activities of the Edizioni della Normale (new publications, book fairs and presentations, seminars etc.).
The processing operations connected to the web services of this site take place at the aforementioned location of the Scuola Normale Superiore, on servers located in Pisa, Italy. They are managed by properly trained, authorized technical personnel, as well as by any third party appointed as external processor for maintenance operations. No data deriving from the web service is communicated or disseminated to third parties, except when necessary for the transfer of the purchased products, in order to execute the contract with the interested party, and in cases expressly provided for by the law. External subjects (such as third-party suppliers of technical services, postal couriers, hosting providers, IT companies or receivers) may also be appointed Data Processors by the Data Controller, if needed. The updated list of Data Processors may be requested from the Data Controller at any time.

Types of data processed

Navigation data
The computer systems and software procedures in charge of the www.sns.it website automatically acquire, during their normal operation, some personal data, the transmission of which is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects; however, its nature, by means of processing and integration with data held by third parties, allows for users to be identified.
This category includes the IP addresses or domain names of the computers used by the users to connect to the website, URI (Uniform Resource Identifier) form addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply given by the server (done, error etc.) and other parameters concerning the user’s operating system and computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information concerning the use of the website and to check its correct functioning. They are immediately deleted after processing. These data can be used to carry out activities aimed at establishing liability in the case of hypothetical IT crimes to the detriment of the website. This eventuality aside, at present the data on web contacts do not persist for more than seven days.

Data supplied voluntarily by the user
The optional, explicit and voluntary dispatching of electronic mail to the addresses indicated in this website entails the subsequent acquisition of the sender’s address, necessary in order to reply to the requests, and also any other personal data contained in the message.
Specific concise information concerning personal data shall be cited or visualised in the web pages dedicated to particular services on request.

Rights of the Interested Party
At any time, the interested party has the right to ask the Data Controller for:
-confirmation of the existence of his/her personal data;
-access to his/her personal data as well as to any supplementary information relating to them; rectification of inaccurate personal data; integration of incomplete data; deletion of his/her personal data (in the cases and ways referred to in paragraph 1 in article 17 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article); limitation of processing (when one of the hypotheses governed by paragraph 1 of article 18 of the GDPR occurs); transformation of data into anonymous form or the blocking of data processed in violation of the law, including those for which conservation is not necessary in relation to the purposes for which the data were collected or subsequently processed.
The interested party has also the right, on legitimate grounds, to oppose, in whole or in part:
-the processing of his/her personal data, even if the data is relevant for the purpose of their collection;
-the processing of personal data concerning him/her for the purpose of sending advertising material about educational initiatives and cultural events at the Scuola Normale.
The aforementioned rights may be exercised by contacting the Data Controller and the authorized personnel at edizioni.orders@sns.it or by sending an e-mail to privacy@sns.it. Users may also contact the Data Protection Officer at dpo@sns.it for all matters relating to the processing of their personal data and the exercising of their rights.
If the Data Subject believes that his/her rights may have been violated by the Data Controller and/or by a third party, he/she is entitled to submit a complaint to the Personal Data Protection Authority and/or to any other competent supervisory authority under the GDPR.