Privacy Policy

1. Introduction

Bocconi Students for Value Investing (“BSVI”, “we”, “our”, “us”) is a student association at Bocconi University. We are committed to protecting the privacy of our members, alumni, applicants and website visitors.

This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR). BSVI is the data controller. It covers this website and the members area (members.bsvi.it).

If you have any questions about this policy or how we handle your data, you can contact us at as.bs4valueinvesting@unibocconi.it.

2. Data We Collect

We only collect the personal data you (or the board, on your behalf) provide to us:

• Members and alumni: full name, Bocconi email address, Bocconi student ID, phone number, the semester you joined (and left) BSVI, your role, division and track in the association and, if you choose to add them, a personal email address, LinkedIn profile, degrees and main career interest. For alumni we may also keep current and previous employers, roles and locations.
• Members area account: your login email and password. Passwords are stored only in hashed form by our authentication provider: nobody at BSVI can see them. We keep a record of administrative actions (for example who approved a payment) for security and accountability.
• Association fee: for each semester, the payment method, date and amount, and the proof of payment you upload (a receipt or screenshot, which may show your name and bank or PayPal details).
• Applicants: the details you submit in our application form.

We do not collect sensitive data (such as health, political opinions, or religious beliefs).

3. How We Use Your Data

We use your personal data for the following purposes:

• Membership management: keeping the member register, roles and teams, and recording the association fee each semester.
• Members area: letting you sign in, update your profile, pay the fee and use the members directory.
• Member Communication: sending updates, event information, and internal announcements, and the emails needed to set or reset your password.
• Alumni Network Management: keeping track of current and past members to maintain our alumni relations.
• Internal Statistics: analyzing membership and participation for organizational purposes.

We do not sell or share your data with third parties for commercial purposes.

4. The Members Directory

Signed-in members can see a directory of current members and alumni showing name, role, when they joined, main career interest, Bocconi email and LinkedIn profile. Your phone number is shown only if you choose to share it. You can remove yourself from the directory at any time from your profile. The directory is for BSVI members only, and members must not share its contents outside the association.

5. Legal Basis for Processing

We process your personal data based on:

• Your membership (Art. 6(1)(b) GDPR): managing your membership, your members area account and the association fee.
• Legitimate Interest (Art. 6(1)(f) GDPR): running the association, the members directory and the alumni network, internal statistics, and keeping our systems secure.
• Consent (Art. 6(1)(a) GDPR): showing your phone number in the directory, and the optional details you choose to add. You can withdraw consent at any time from your profile.
• Legal obligations (Art. 6(1)(c) GDPR): keeping records of fee payments where the law requires it.

6. Where Your Data Is Stored and Who Processes It

We use a small number of service providers, who process data only on our behalf:

• Supabase: our database, sign-in system and storage for proofs of payment, hosted in the European Union (Frankfurt, Germany).
• Vercel: hosting of this website and the members area.
• Resend: sending the emails that let you set or reset your password.
• Google (Google Drive and Google Forms): application forms and internal documents.

Some of these providers are based in, or use infrastructure in, the United States. Where data leaves the EU, the transfer is covered by the EU-U.S. Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.

7. Data Retention

• We keep your member record while you are a member. When you leave, we keep an alumni record for our alumni network, unless you ask us to delete it.
• Your members area account is removed when you leave the association or ask us to delete it.
• Rejected proofs of payment are deleted 90 days after they are reviewed. Approved proofs and payment records are kept for as long as needed for the association’s accounts.
• Application data is kept for the recruiting process it was submitted for.

8. Your Rights

As a data subject under GDPR, you have the right to:

• Access your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion (“right to be forgotten”).
• Restrict or object to processing.
• Data portability (request transfer of your data to another controller).
• Withdraw consent at any time, without affecting earlier processing.

Members can see and update most of their details themselves in the members area. For anything else, contact us at as.bs4valueinvesting@unibocconi.it. We will respond within the legally required timeframe. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).

9. Cookies

What are cookies? Cookies are small text files stored on your device when you visit a website.

This public website does not use analytics, advertising or tracking cookies. The members area uses only strictly necessary cookies that keep you signed in; they are set when you sign in and removed when you sign out.

Managing cookies: You can disable cookies through your browser settings, but you will then not be able to sign in to the members area.

10. Security

We take appropriate technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction. Data is encrypted in transit, only authorized board members can manage member records, proofs of payment are stored privately and shown only through short-lived links, and administrative actions are logged.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website with a revised “last updated” date.

Contact Us

For any privacy-related inquiries or requests, you can reach us at as.bs4valueinvesting@unibocconi.it.