Information released pursuant to Articles 13-14 of the GDPR 2016/679 (General Data Protection Regulation)
Dear Sir/Madam, pursuant to Art. 13 of the EU Regulation 2016/679 and in relation to the information that we will acquire, in order to protect private parties and other subjects in the processing of personal data, we inform you of the following:
1. Requested information:
We ask you to provide us with your following data: personal details (name, surname, date and place of birth), address, e-mail and telephone number. These data are mandatory, without them we will not be able to proceed with enrolment.
In addition, we ask you to give your consent (optional) to take promotional photos and videos of you.
2. Purposes of the processing:
The data supplied by you will be used for the purpose of proceeding with the registration at our school in order to organize courses and for promotional activities.
In particular, your personal data will be processed:
3. Method of processing:
A) without your express consent (Art. 24(a, b, c) Privacy Code and Art. 6(b, e) GDPR), for the following purposes: - conclude contracts for the Controller services; - fulfil the obligations of contract, contractual and tax issues related from the relationship that has been entered into with you; - fulfil the obligations set by the law, a regulation, the Community legislation or an order of the Authority (such as anti-money laundering rules); - exercise the Controller rights, such as the right of defence in legal proceedings;
B) only with your prior consent (Articles 23 and 130 Privacy Code and Art. 7 GDPR), for the following marketing purposes: - send you via e-mail, post and/or SMS and/or telephone numbers newsletters, commercial communications and/or advertising material on the services offered by the Controller.
The methods by which personal data will be processed include both paper and electronic formats.
4. Duration of processing:
Your personal data, processed for the purposes mentioned above, will be archived for the whole duration of the contract and, afterwards for the period of time during which the school is subject to obligations of retention for tax purposes or other purposes provided by law or regulation.
5. Communication and disclosure of personal data
The data provided will not be disclosed to third parties.
6. Controller of the processing:
7. Subject’s right:
Pursuant to Articles 15 to 22 of the EU Regulation nr. 2016/679, in any time you can exercise the right:
a) to demand confirmation of the presence of your personal data;
b) to obtain instructions on the purposes of the processing, the categories of the personal data, the receivers or the receivers’ categories the personal data have been or will be communicated to and, if possible, the retention period;
c) to obtain the rectification or erasure of the data;
d) to restrict the processing of the data;
e) to obtain the data portability, i.e. to receive them from a processing controller in a structured and commonly used format, readable by an automatic device, and to transmit them to another processing controller without restrictions;
f) to object to the processing at any time and also in case of processing for direct marketing purposes;
g) to object to an automated decision process regarding natural persons, included profiling.
h) to ask the Controller of the processing for the access, rectification and erasure of the personal data or the processing limitation or to object to the treatment and to the right of the data portability;
i) to withdraw consent at any time without prejudicing the lawfulness of the processing based on the consent before its withdrawal;