Privacy Policy – UniBA
Information about the processing of personal data within the UniBA application.
This Privacy Policy describes how the UniBA application processes users’ personal data.
1. Data Controller
The Data Controller is:
Francesco Santoro
Email:
For any request concerning privacy or the processing of personal data, users may contact the email address indicated above.
2. Purpose of the App
UniBA is an application designed for the authenticated management of access-related functions, including the opening of authorised access points.
The app may also use push notifications for service-related communications.
3. Data Processed
Depending on the features used, the app may process the following categories of data:
- name;
- email address;
- telephone number, where associated with the account;
- user identifier;
- technical device or installation identifiers;
- tokens required to receive push notifications;
- technical and diagnostic information relating to the operation of the app;
- data relating to the use of the app’s features;
- approximate location information that may be derived from technical services used by the app, for example from the IP address.
The app does not use this information for behavioural advertising or commercial profiling.
4. Authentication
Access may take place through authentication systems supported by the app, including services provided by Apple or Google.
When such services are used, certain information required for authentication may be processed by the relevant providers in accordance with their respective privacy policies.
5. Biometric Authentication
UniBA may use Face ID or Touch ID through the authentication mechanisms provided by iOS.
The app does not receive, store or transmit fingerprints, facial images or other biometric data.
Biometric data remains exclusively under the control of the Apple device. The app receives only the successful or unsuccessful result of the verification performed by the operating system.
6. Push Notifications
With the user’s permission, UniBA may use push notifications.
For this purpose, technical device identifiers and notification tokens may be processed through Apple Push Notification Service and Firebase Cloud Messaging.
Users may disable notifications at any time through their device settings.
7. Third-Party Services
For certain technical functions, the app uses services provided by third parties, including:
- Apple;
- Google;
- Firebase.
These services may process technical identifiers, diagnostic information, device information and other data required for operation, security and authentication.
8. Purposes of Processing
Personal data is processed exclusively for purposes connected with:
- user authentication;
- account management;
- verification of authorisations;
- execution of operations requested by the user;
- opening of authorised access points;
- delivery of service notifications;
- prevention of fraudulent or unauthorised use;
- application security;
- diagnosis and resolution of technical problems;
- improvement of service reliability.
9. Legal Basis
Depending on the circumstances, personal data is processed on the basis of:
- performance of the service requested by the user;
- the user’s consent, where required;
- legitimate interests relating to security, prevention of abuse and proper operation of the service;
- compliance with applicable legal obligations.
10. Data Retention
Personal data is retained for as long as necessary to provide the service and maintain the user’s account, as well as for any additional period required for security purposes, protection of legal rights or compliance with legal obligations.
Technical and diagnostic data is retained only for the period necessary for the relevant purposes.
11. Disclosure of Data
Personal data is not sold.
It may be disclosed only:
- to technical service providers necessary for the operation of the app;
- to parties responsible for managing the IT infrastructure;
- to competent authorities where required by law.
12. Tracking and Advertising
UniBA does not use personal data to track users for advertising purposes across third-party apps or websites.
The app does not use personal data for personalised advertising.
13. User Rights
Where provided for under Regulation (EU) 2016/679 (GDPR), users may request:
- access to their personal data;
- rectification of inaccurate data;
- erasure of personal data;
- restriction of processing;
- objection to processing;
- data portability, where applicable;
- withdrawal of consent where processing is based on consent.
Requests may be submitted to:
Users also have the right to lodge a complaint with the competent supervisory authority, including the Italian Data Protection Authority (Garante per la protezione dei dati personali).
14. Security
Technical and organisational measures are adopted to protect personal data against unauthorised access, loss, alteration or improper disclosure.
Communications between the app and remote services take place through protected connections.
15. Changes to this Privacy Policy
This Privacy Policy may be updated following changes to the app, the services used or applicable legislation.
The updated version will be made available through this same web page.