Information on the processing of personal data (Article 13, EU Regulation 2016/679)
Download the original version in .pdf of Information on the processing of personal data (Article 13, EU Regulation 2016/679)
The personal data of the data subject is used by Istituto Santa Chiara S.r.l., which is the data controller for the processing, in compliance with the principles of personal data protection established by GDPR Regulation 2016/679.
1. Methods and purposes of data processing
We inform you that data will be processed with the support of the following means:
- Information technology (management software, accounting, etc.)
for the following purposes:
- Pre-contractual and contract management to which the data subject is a party
- Administrative and accounting purposes related to service contracts
- Remarketing and control of conversions
Any refusal to allow data processing makes it impossible to implement the contract.
Information about the services of Google Inc.
2. Legal basis
Data provision is mandatory for all that is required by legal and contractual obligations.
3. Categories of recipients
Without prejudice to communications made in compliance with legal and contractual
obligations, all data collected and processed may be communicated exclusively for the purposes specified above to the following categories of subjects:
- Employees and collaborators of the data controller in their capacity as authorised persons and/or system administrators
- Credit institutions, professionals/consultants/collaborators (e.g.: accountants, lawyers, agents, IT services, shipments, auditing firms, etc.) – for legal obligations or for exclusive functional reasons in the context of executing the contract – that perform outsourcing activities on behalf of the data controller, in the capacity of independent external data controllers or managers, appointed by the data controller itself
4. Retention period
The mandatory data for contractual and accounting purposes is kept for the time necessary
to carry out the business and accounting relationship, in any case no longer than 10 years after the termination of the relationship.
5. Rights of the data subject
In accordance with European Regulation 679/2016 (GDPR) and national legislation, data subjects may, in the manner and within the limits provided for by current legislation, exercise the following rights:
- Confirm whether or not personal data concerning them is being processed and, if so,
access (Article 15 of (EC) Regulation no. 2016/679)
- Correction (Article 16, EU Regulation no. 2016/679)
- Cancellation (Article 17, EU Regulation no. 2016/679)
- Limitation (Article 18, EU Regulation no. 2016/679)
- Portability, understood as the right to obtain the data from the data controller in a structured format of common use and legible by an automatic device, to send it to another data controller without impediment (Article 20, EU Regulation no. 2016/679)
- Opposition to processing (Article 21, EU Regulation no. 2016/679)
- Revocation of consent to processing, without prejudice to the lawfulness of processing based on consent obtained before revocation (Article 7, par. 3, EU Regulation no. 2016/679)
- Complaints to the data protection authority (Article 51 EU Regulation no. 2016/679)
The exercise of these rights can be exercised by written notice to be sent to the data protection officer by PEC at email@example.com or by registered letter with return receipt at Via Campania, 5, 73100 Lecce LE.
6. Further purposes of data processing, legal basis, recipients, consequences of failure to provide data and storage periods
The company may handle audio recordings of the data subject for the management of educational and teaching activities and communication notices (sending information and advertising material, presentation of new products/services, etc). The retention period shall be until consent is revoked. The data subject may, however, request the cancellation of their data in relation to this specific purpose.
The data subject may at any time exercise the rights referred to in paragraph 5 above.
7. Automated processes
Personal data for the above purposes is not subject to automated decision-making processes.