PRIVACY POLICY (EN) | Test EDUNEXT

pursuant to Article 13 of EU Regulation 2016/679 (hereinafter, “GDPR”)

As a Data Subject, we provide you with the following information regarding the processing of your personal data in the context of using the Edunext Platform (hereinafter, the “Platform”).

1. Categories of Personal Data Processed, Purposes, and Legal Basis for Processing

For the purposes set out below, the following ordinary personal data will be processed:

first name (givenName) and last name (sn),
tax code (schacPersonalUniqueID),
standard email address (mail),
home institution (schacHomeOrganization),
course enrollments,
unique user identifier (eduPersonPrincipalName),
platform usage logs.

Technical note: Data are obtained via IDEM-GARR federated authentication; if the main attributes (sn, givenName) are unavailable, the alternative attribute (displayName) may be used to ensure user access and identification.

2. Purposes and Legal Basis of Processing

These data will be collected at registration and during use of the Platform for the following purposes:

Provide and improve educational services (e.g., SceneSnap).
Issue certificates of participation and badges (e.g., OpenBadgeFactory).
Support research, statistics, and legal compliance.
Manage authentication via IDEM-GARR.
Send informational updates.
Ensure security and respond to legal requests.

Such processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in each Controller (pursuant to Art. 6(1)(e) GDPR). This public-interest task consists of pursuing the University’s institutional purposes (teaching, research, third-mission activities).

3. Nature of Provision

Providing the personal data referred to in Section 1 is optional. However, failure to complete the mandatory fields will make it impossible to register on the Platform, whereas failure to complete optional fields will not entail any limitation.

4. Methods of Processing and Data Retention

The data referred to in Section 1 will be processed in compliance with current legislation and the principles of fairness, lawfulness, transparency, and confidentiality.
Data will be retained for the time strictly necessary to achieve the purposes described above and, in any case, for as long as the account remains active.

5. Communication and Disclosure of Personal Data

The personal data collected will not be publicly disclosed. They may be processed by third parties acting as external processors, for better management and operation of the Platform, including:
OpenBadgeFactory Oy (Finland, EU), SceneSnap S.r.l. (Italy, EU; may use non-EU services via SCCs), IDEM-GARR (EU), Cloudflare, Inc. (non-EU, DPF), OpenAI (ChatGPT, non-EU, SCCs; only voluntarily provided data), Vimeo, Inc. (non-EU, DPF), VideotimePro (local), ClickMeeting sp. z o.o. (Poland, EU; non-EU sub-processors via SCCs).
The updated list of external processors is available from the Controller.

6. Data Transfers Outside the EU

Personal data are processed predominantly within the European Economic Area (EEA). However, the use of specific technical service providers of the Platform, in particular services related to security, protection and traffic routing (e.g. Cloudflare, Inc.), may involve the transfer of personal data to countries located outside the EEA.

Transfers of personal data to countries outside the European Economic Area (“EEA”, i.e. the EU plus Norway, Liechtenstein and Iceland) or to an international organization will take place in compliance with the conditions and appropriate safeguards provided for by Articles 44 et seq. of the GDPR.

Note on OpenAI (ChatGPT): users are not required to use it at any time.
Only data voluntarily entered by the user in the forms or interfaces dedicated to the AI service (e.g., “Generate text” or “Summarize” prompts) are transmitted to OpenAI via the official API. Personal or identifying data (name, email, etc.) are never sent unless explicitly typed by the user.

7. User Rights

As a Data Subject, you may exercise—under the conditions provided by law—the rights recognized by Articles 15 et seq. GDPR. In particular, you have the right to: request from the Controller, at any time, access to the personal data being processed and obtain a copy of such data (Art. 15 GDPR); request the rectification of inaccurate personal data or the completion of incomplete personal data (Art. 16 GDPR); request, for the reasons and in the cases provided by law, the erasure of your personal data (Art. 17 GDPR); request, in the cases provided by law, restriction of processing and to be informed before the restriction is lifted (Art. 18 GDPR); receive the data in a structured, commonly used, machine-readable format (Art. 20 GDPR); object to processing and to automated decision-making (Arts. 21 and 22 GDPR).

To exercise these rights, contact the Data Controller or the Data Protection Officer indicated below.

If you believe that the processing of your personal data violates the GDPR, you also have the right to lodge a complaint with the Italian Data Protection Authority pursuant to Art. 77 GDPR, or to seek judicial remedy as provided by Art. 79 GDPR. For the conditions and procedures for exercising these rights, please refer to the full text of the GDPR available at www.garanteprivacy.it.

8. Cookies & Analytics

Edunext uses essential cookies and analytics tools to improve functionality and, periodically, to optimize the Platform; cookies are managed in accordance with EU regulations.

9. Data Controller and Data Protection Officer (DPO)

Data Controller: University of Modena and Reggio Emilia, acting through the Interuniversity Center Edunova, Viale Timavo 93, 42121 Reggio Emilia, Italy, represented by the acting Director.
You may contact the Controller by writing to the above address or by emailing urp@unimore.it, indicating in the subject line the word “PRIVACY” followed by the name of the Platform.
The Controller, in compliance with the law, has appointed a Data Protection Officer (DPO), reachable at: dpo@unimore.it.

Technical manager: Edunext / Edunova (University of Modena and Reggio Emilia).
Contacts: info@edunext.eu • tech.support@edunext.eu

Platform Terms and Notes

A. Intellectual Property & Licenses

Important: all educational materials—videos, documents, and resources—are the intellectual property of the individual instructors or partner universities, unless otherwise indicated. Each course specifies the applicable license terms. Use, sharing, modification, or reproduction of these materials is permitted only within those terms and/or with express authorization. Commercial or non-compliant use is strictly prohibited.

B. Changes to the Terms

Edunext reserves the right to modify these Terms or the Privacy Policy at any time. Changes take effect upon publication. Continued use of the Platform constitutes acceptance.

C. Edunext’s Mission & Model

“Edunext” is the name chosen for our Digital Education Hub, created through participation in the public call for projects under Italy’s National Recovery and Resilience Plan (PNRR), Mission 4 “Education and Research,” Component 1 “Strengthening the provision of education services: from nursery schools to university,” Investment 3.4 “Advanced University Teaching and Skills,” Sub-investment 3, funded by the European Union – Next Generation EU.
The Platform promotes high-quality learning, micro-credentials (Open Badges), and digital teaching experimentation across a network of 35 universities and 5 AFAM institutions.