Privacy Policy

Who is responsible for your data

BSEIF — Bocconi Students Energy & Infrastructure Finance, a student-led association at Università Bocconi in Milan, is the data controller for the personal data described in this notice.

For any question about this policy, or to exercise any of the rights set out below, write to as.bseif@unibocconi.it. Requests are handled by the association itself.

What we collect and why

We collect data in only the four situations below. We never buy contact data, and we never sell or rent yours.

• Newsletter subscription — your email address, when you submit it through a sign-up form on this site. We use it solely to send BSEIF announcements, event invitations and research notes. Legal basis: your consent (Art. 6(1)(a) GDPR).
• Messages you send us — if you write to our inbox we process whatever you choose to include, in order to reply. Legal basis: our legitimate interest in responding to you (Art. 6(1)(f) GDPR).
• Aggregated usage statistics — anonymous, cookieless measurements of which pages are viewed, described under "Analytics" below. Legal basis: our legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR).
• Technical server logs — our hosting provider processes technical data such as IP address, browser type and time of request in order to serve the site and protect it from abuse. Legal basis: our legitimate interest in operating a secure site (Art. 6(1)(f) GDPR).

Cookies

This site uses a single cookie, and it is strictly necessary to provide the service you asked for. Cookies of this kind do not require consent under EU and Italian rules, which is why you are not shown a cookie banner.

• bseif-lang — records whether you are reading the site in English or Italian, so your choice is remembered between visits. First-party, expires after one year, and contains nothing but the value "en" or "it".

We set no advertising, profiling or cross-site tracking cookies, and no third party sets cookies through this site. You can delete this cookie at any time in your browser settings — the site will simply go back to detecting your language from your browser.

Analytics

We measure traffic with Vercel Web Analytics, which is deliberately privacy-preserving: it sets no cookies, stores no identifier on your device and does not follow you across other websites. It reports only aggregated figures — how many people viewed a page, which site they arrived from, and broadly which country and device type they used.

We cannot identify you from these statistics, and we do not attempt to.

Who else processes your data

We rely on two service providers. Each processes data only on our instructions, under a data processing agreement:

• beehiiv, Inc. — operates our newsletter. It stores your email address and delivery statistics such as whether a message was opened.
• Vercel, Inc. — hosts this website and provides the aggregated analytics described above.

Both are established in the United States, so your data may be transferred outside the European Economic Area. Those transfers rely on the safeguards permitted by Chapter V of the GDPR, such as the European Commission's Standard Contractual Clauses. Apart from these providers, we disclose personal data only where the law requires it.

How long we keep it

• Newsletter — until you unsubscribe. Every email carries an unsubscribe link, and you can also ask us to remove you by writing to us. After you unsubscribe we keep only the minimum record needed to ensure we do not contact you again.
• Messages — for as long as it takes to deal with what you wrote about, and then for a reasonable period in our own records.
• Analytics — kept by our provider in aggregated form only; no personal record of your visit is retained.

Your rights

Under the GDPR you can ask us for a copy of your data, have it corrected or deleted, restrict or object to how we use it, or have it sent to another provider. Where we rely on your consent — as we do for the newsletter — you may withdraw it at any time, and withdrawing it does not affect anything done before.

Write to as.bseif@unibocconi.it and we will respond within one month. If you believe we have handled your data improperly, you may also lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

Changes to this notice

If we change how we handle personal data we will update this page and revise the date at the top. Where a change is significant and affects people on our newsletter, we will say so by email rather than relying on you to re-read this page.