INFORMATION NOTE ON THE PROCESSING OF PERSONAL DATA
Pursuant to art. 13 of the EU Regulation 679/2016-GDPR (hereinafter Regulation)
Dear Madam/Dear Sir,
On this page you will find information about the methods used to manage personal data directly collected by us.
IDENTITY AND CONTACT INFORMATION OF DATA CONTROLLER:
The Data Controller is: LINGUA IDEALE S.R.L.
Registered offices: via G.da Montefeltro, 43 - 61029 URBINO (PU)
Business Address: via G.da Montefeltro, 42 - 61029 URBINO (PU)
Your personal data will be processed for the following purposes:
Should there be an intention to process your personal data for purposes other than and in addition to the ones for which they have been
collected, you will be informed of the different purposes beforehand, also for the purpose of obtaining the necessary consent.
LEGAL BASIS OF PROCESSING
Processing your personal data for the purposes set out in letter a) is mandatory and essential by law and necessary for completing enrolment and using the services provided by the company (pre-contractual/contractual and legal obligations).
Processing your personal data for the purposes as set out in letter b) and c) is based on the consent that you have freely provided.
RECIPIENT CATEGORIES OF PERSONAL DATA
The data, either in electronic or hard copy format, can therefore be communicated to the following categories of recipients:
- E.R.D.I.S., Regional Body for Urbino University Studies;
- “Carlo Bo” University of Urbino;
- company accounting and tax consultant;
- banks, building societies and insurance companies;
- Public bodies and organisations;
- competent private bodies (also following inspections and checks);
- judicial or administrative authorities;
- company that manages the company’s website;
- IT system development and maintenance company;
- travel agencies, hotels/accommodation, and/or providers of access to museums, galleries and/or monuments during events/guided tours/trips/educational trips, any internet providers, Facebook/Instagram page etc.
In all cases, your data will be communicated solely to responsible subjects and duly appointed for carrying out the services required for correct management of the relationship, with a guarantee of protecting the data subject’s rights.
DATA TO BE PROCESSED:
Processing may concern:
Lingua Ideale S.r.l. does not require the data subject to provide any “particular” data, according to the contents of the GDPR (art. 9), personal data that reveals racial or ethnic origin, political, religious or philosophical beliefs, memberships in trade unions, and any genetic or biometric data intended to uniquely identify an individual, data on health or sexual life, or a person’s sexual orientation. In the event that service requested from Lingua Ideale S.r.l. requires the processing of said data, the data subject will receive a specific information sheet beforehand and will be asked to provide specific consent.
Given the type of data processed and the size of the company, a Data Protection Officer - DPO) has not been appointed. For any information or request, contact the data controller.
DATA PROCESSING METHOD
Your personal data will be processed in observance of the principles of correctness, lawfulness and transparency provided for in the Regulation, in digital and hard copy/manual modes.
Processing will be carried out by internal staff who have been expressly authorised and appointed pursuant to article 29 of the Regulation and by external subjects, formally appointed as data processors who will carry out personal data processing operations on our behalf. A list of the latter may be requested.
STORAGE PERIOD OF DATA
Data processed for the purpose stated in letter a) will be stored for the entire duration of the relations established and also subsequently for completing all legal obligations (fiscal and accounting) that also remain after the contract has been terminated or expired; for these purposes, the data controller will only store the data required for relative pursuit. Cases are excepted wherein the rights deriving from the contracts and/or registration of personal details should prevail in court, in which case the data subject’s personal data, limited to the data required for said purpose, will be processed for the necessary time for their pursuit.
Data processed for the purposes stated in letter b) and c) will be stored until any withdrawal of consent.
CONSEQUENCES IN THE EVENT OF REFUSING TO PROVIDE DATA
Providing the data for the purposes stated in letter a) is mandatory and if not provided or provided incompletely, this will result in it being impossible to complete enrolment and to provide the student with all the services required to guarantee access to all services resulting from enrolment.
Providing data for the purposes stated in letters b) and c) is discretionary and in the event of refusal to provide data, the consequence will be that it will not be possible to process them. In all cases, as the data subject you have the right to revoke consent at any time without prejudicing the lawfulness of processing based on the consent provided before being revoked.
THE DATA SUBJECTS’ RIGHTS
As the data subject, you can exercise the rights contained in article 15 (right of access), 16 (right to rectification), 17 (right to erasure “right to be forgotten”), 18 (right to restriction of processing), 19 (notification obligation regarding rectification or erasure of personal data or restriction of processing), 20 (right to data portability) , 21 (right to object) of the Regulation. Specifically, you can ask the data controller for the document entitled “Procedure for exercising the data subject’s rights”.
As the data subject, you also have the right to lodge a complaint with a control authority, pursuant to article 77 of the Regulation, if your rights as stated have not been acknowledged.
To exercise the above rights, you can contact the data controller via the contact addresses provided above.
TRANSFERRING PERSONAL DATA TO A THIRD COUNTRY/INTERNATIONAL ORGANISATION
The realm of communication of personal data is national, and there is no intention to transfer them to a third country or international organisation.
AUTOMATED DECISION-MAKING PROCESS AND PROFILING
Automated decision-making processes, including profiling, are not used.