Privacy notice

Economics Network is a student network that is being formalised and currently has no tax code of its own. For the general features of this website (account and personal area, applications to Economics Network events and to campaigns to join the team, reviews, statistics and updates on initiatives), data is processed jointly, as joint controllers, by the five promoters of the steering group acting within the Economics Network initiative: Dylan Fontana, David Padovan, Francesco Vena, Lorenzo Zanella, Sofia Gastaldi.

Shared contact: segreteria@economicsnetwork.it, read by all five joint controllers. Postal address: Via Ugo Bassi, 1, 35131 Padova (PD), Italy. Dylan Fontana, president, is the coordination contact; you may still contact any of the joint controllers. No data protection officer (DPO) has been designated.

Allocation of responsibilities between the joint controllers: decisions on purposes, means, providers and retention periods are taken jointly; the shared contact is the point of contact for all requests, which are recorded and assigned to one of the joint controllers to answer; each joint controller complies with this notice and with the security measures.

The NMUN project is run by Economics Network Ambassadors, an association separate from Economics Network (unrecognised association (non-registered association under italian law), tax code 92337220286, registered tax address Via Ugo Bassi, 1, 35131 Padova (PD), Italy, legal representative Dylan Fontana). Some of the people involved are the same as in Economics Network, but the two remain separate.

For NMUN project events, shown in the application form before submission, application data (personal and contact details, university affiliation, answers, attachments, declarations and consents) is processed by Economics Network Ambassadors as controller for selection, project organisation and related service messages. For these events the legal bases, retention periods and rights described in this notice apply.

The website platform, the account and the personal area remain managed by the Economics Network joint controllers: the application is collected through the website and made available, in the dashboard, to the people organising the project. The website does not collect passports, payments or travel data. Contacts for NMUN applications: ambassadors@economicsnetwork.it or segreteria@economicsnetwork.it. Data from other events is not processed by Economics Network Ambassadors.

We process data for the following purposes, each with its own legal basis:

• Managing applications and selection: form data (name, email, phone, university, department, degree programme, answers, attachments such as a CV, university email and its verification if the event or campaign requires it), the declaration of being of age and acknowledgement of this notice. Basis: steps taken at your request to take part in the event or, for campaigns to join the team, to assess your request to join (Art. 6(1)(b) GDPR). Administrators record the status, internal notes and the history of decisions.
• Campaigns to join the team (for example “Join Economics Network”): the same data, together with the answers requested by the campaign form, is used to assess your request to join the team and the community and to inform you of the outcome. An application is not an automatic enrolment and does not confer any formal membership status. The same rules of this notice on recipients, retention and rights apply.
• Organising events and service messages (receipt, outcome, link to online events, review invitation, verification codes, account notices). Basis: performing what you requested (Art. 6(1)(b)).
• History to certify participation (name, email, phone, event and outcome). Basis: legitimate interest in being able to confirm participation and answer requests about past editions (Art. 6(1)(f)), limited to the periods below.
• Internal statistics and presenting our activity: only totals by university, department and degree programme, without names, contact details, answers or outcomes. Basis: legitimate interest in reporting on our activity (Art. 6(1)(f)). Counts are exact even for very small groups, so a number may refer to one or a few people.
• Account and personal area (optional): email, password stored in a non-readable form by the authentication service, profile. Basis: service you requested (Art. 6(1)(b)).
• Email updates about new initiatives: only with your separate, optional consent (Art. 6(1)(a)), which you can withdraw at any time. We only use email, never the phone.
• Photos and recordings during events: only with the optional consent given in the form, when the event provides for it (Art. 6(1)(a)).
• Publishing reviews and, separately, your name: only with your consent (Art. 6(1)(a)). Internally the review stays linked to your account and application, even when published as “Anonymous”, to check that you can review and to let you edit or withdraw it.
• Passing your CV to participating companies: only if the event provides for it and only with your specific consent (Art. 6(1)(a)), for the companies listed in the form and for the selection for that project, never for separate job offers.
• Security and abuse prevention: temporary counters linked to an encrypted fingerprint of the IP address, email or account (pseudonymised, not anonymous data) and providers' technical logs. Basis: legitimate interest in the security of the service (Art. 6(1)(f)).
• Handling requests about personal data: legal obligation (Art. 6(1)(c)).

Required data: fields marked as required and the declaration of being of age are needed to apply; without them the application cannot be submitted. Account, updates, consent to photos, reviews and passing the CV are optional and declining has no effect on selection.

Applications are assessed by people from the organising group: there are no decisions based solely on automated processing and no profiling.

Applications are only open to students who are of age: the declaration is a self-declaration; we do not collect dates of birth or documents.

CVs are assessed internally. When an event provides for it, the form lists the participating companies that may receive it for the selection for that project: the box is optional and not pre-ticked. We record the text, language, date and list of companies shown at that moment; a company added later is not covered by the consent.

Companies have no access to the website or the files: any transfer is made manually by the organisers, only to a listed company, through a secure channel, and is recorded. You can withdraw consent by writing to segreteria@economicsnetwork.it: withdrawal prevents further transfers but does not undo those already made. On request we inform companies that have already received your CV of the withdrawal; deletion in their systems depends on them, and you can also contact them directly.

Applications, attachments, notes and history are only accessible to website administrators with personal accounts, who may download CVs and a list of an event's applications for selection. Downloaded copies follow the same retention rules. We do not sell or hand over data; we only disclose it to authorities where required by law.

Providers that process data on our behalf, under their own data processing agreements:

• Supabase (database, authentication and file storage): project in the London region (United Kingdom), a country covered by a European Commission adequacy decision renewed on 19 December 2025. The provider states that some categories of data (for example our account data, support and telemetry) may also be processed outside that region, with the safeguards of its agreement (standard contractual clauses).
• Resend (website emails and sign-in emails): data stored in the United States; the provider participates in the EU-US Data Privacy Framework and applies standard contractual clauses.
• Aruba (domain and mailboxes, including the shared contact): services run in data centres in Italy.
• Vercel (website hosting): requests may also be processed in the United States, under the standard contractual clauses in its agreement.

We do not use artificial intelligence services on personal data: applications, CVs and reviews are not sent to such services.

Periods are set by the organisation according to the purposes (they are not periods imposed by law) and apply to all applicants, selected or not. They run from the end of the event or, if it was cancelled, from the cancellation date; for campaigns to join the team, from the end of the selection as recorded by the organisers:

• name, email, phone, event and outcome: 36 months;
• detailed answers, internal notes and assessments: 12 months;
• CVs and other attachments: 6 months;
• history of emails sent: 12 months from sending;
• updates on initiatives: at most 36 months from consent, unless withdrawn; proof of consent and withdrawal is kept 12 months after closure;
• proof of application consents: together with the application they refer to;
• account: while you use it; after 24 months without sign-ins we notify you by email and, without a new sign-in within 30 days of the notice, the account is deleted (applications follow their own periods);
• incomplete university email verifications: 7 days; completed ones stay in the profile and in the application;
• abuse-prevention counters: 2 days; requests about personal data: as long as needed to show how they were answered, at most 24 months;
• providers' technical logs and copies: under their own rules (for example 30 days for the email log); any database backup copies, encrypted and kept outside the website, at most 3 months.

A new application does not extend earlier ones. Statistics already published remain as totals without personal data. In case of disputes we may keep only the strictly necessary data longer, until the matter is closed.

You can delete your account from your personal area. The account and sessions, the profile, the university email and verification codes, your reviews and your subscription to updates are deleted; queued automatic emails are cancelled.

Applications already submitted remain with the organisers, unlinked from the account, for the periods above, together with attachments, consents, notes, history and email history. A new account created with the same address does not link them again and does not reactivate consents or messages: to recover them or ask for their deletion write to segreteria@economicsnetwork.it.

You can request access to your data, rectification, erasure, restriction, portability (for data processed at your request or with consent) and object to processing based on legitimate interest. You can withdraw your consents (updates, photos, reviews, passing your CV) at any time, without affecting what happened before.

From your personal area you can correct your profile, manage updates, withdraw reviews and delete your account; every update email contains a link to unsubscribe without signing in. For other requests write to segreteria@economicsnetwork.it (for the NMUN project also to ambassadors@economicsnetwork.it), preferably from the address used for your application: we reply within one month, which may be extended in the cases provided for by the GDPR. To check that the request comes from you we may ask for additional information, without documents unless necessary.

You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

For cookies see the cookie notice. If this notice changes significantly, we update the version and date shown on the page.