INFORMATION NOTE ON THE PROCESSING OF PERSONAL DATA

Pursuant to art. 13 of the EU Regulation 679/2016-GDPR (hereinafter Regulation)

Dear Madam/Dear Sir,

On this page you will find information about the methods used to manage personal data directly collected by us.

IDENTITY AND CONTACT INFORMATION OF DATA CONTROLLER:

The Data Controller is: LINGUA IDEALE S.R.L.

Registered offices: via G.da Montefeltro, 43 - 61029 URBINO (PU)

Business Address: via G.da Montefeltro, 42 - 61029 URBINO (PU)

For any requirement regarding the processing of personal data you may contact the data controller by email at the following address: This email address is being protected from spambots. You need JavaScript enabled to view it. or at the telephone number: +39 0722 305554

PROCESSING PURPOSES:

Your personal data will be processed for the following purposes:

1. Enrolment in Italian language courses for foreigners, foreign language courses and specifically student training, registration of personal details at enrolments and contact and/or information material requests, in addition to the provision of connected services and the carrying out of instrumental and administrative activities, for legal obligations connected with civil, fiscal and accounting law, administrative management and generally for fulfilment of contractual obligations.
2. Carrying out of educational-training activities included in the programme (events, shows, meetings, educational trips, guided tours, trips outside the area, participation in competitions, laboratories, awards ceremonies etc)
3. Publications of student images (for trips, travel, guided tours...) on Lingua Ideale S.r.l.’s Facebook page.

Should there be an intention to process your personal data for purposes other than and in addition to the ones for which they have been

collected, you will be informed of the different purposes beforehand, also for the purpose of obtaining the necessary consent.

LEGAL BASIS OF PROCESSING

Processing your personal data for the purposes set out in letter a) is mandatory and essential by law and necessary for completing enrolment and using the services provided by the company (pre-contractual/contractual and legal obligations).

Processing your personal data for the purposes as set out in letter b) and c) is based on the consent that you have freely provided.

RECIPIENT CATEGORIES OF PERSONAL DATA

• Individuals authorised by the data controller of personal data ex article 29 of the Regulation and art. 2-Quaterdecies of Legislative Decree 196/2003 as amended and added to (e.g. employees and similar, collaborators, etc);
• external subjects, formally appointed as data processors, who can carry out processing operations on our behalf. A list of the latter is available on request;
• subjects, bodies, authorities to which it is mandatory to communicate your personal data as stated by legal provisions and authority orders.

The data, either in electronic or hard copy format, can therefore be communicated to the following categories of recipients:

- E.R.D.I.S., Regional Body for Urbino University Studies;

- “Carlo Bo” University of Urbino;

- company accounting and tax consultant;

- banks, building societies and insurance companies;

- Public bodies and organisations;

- competent private bodies (also following inspections and checks);

- judicial or administrative authorities;

- company that manages the company’s website;
- IT system development and maintenance company;

- travel agencies, hotels/accommodation, and/or providers of access to museums, galleries and/or monuments during events/guided tours/trips/educational trips, any internet providers, Facebook/Instagram page etc.

In all cases, your data will be communicated solely to responsible subjects and duly appointed for carrying out the services required for correct management of the relationship, with a guarantee of protecting the data subject’s rights.

DATA TO BE PROCESSED:

Processing may concern:

• the identification data, such as, for example, name, surname, home address, place and date of birth, tax code, ID document details, passport, telephone, email, bank details and payment details or other personal identification elements.

Lingua Ideale S.r.l. does not require the data subject to provide any “particular” data, according to the contents of the GDPR (art. 9), personal data that reveals racial or ethnic origin, political, religious or philosophical beliefs, memberships in trade unions, and any genetic or biometric data intended to uniquely identify an individual, data on health or sexual life, or a person’s sexual orientation.  In the event that service requested from Lingua Ideale S.r.l. requires the processing of said data, the data subject will receive a specific information sheet beforehand and will be asked to provide specific consent.  

Given the type of data processed and the size of the company, a Data Protection Officer - DPO) has not been appointed. For any information or request, contact the data controller.

DATA PROCESSING METHOD

Your personal data will be processed in observance of the principles of correctness, lawfulness and transparency provided for in the Regulation, in digital and hard copy/manual modes.

Processing will be carried out by internal staff who have been expressly authorised and appointed pursuant to article 29 of the Regulation and by external subjects, formally appointed as data processors who will carry out personal data processing operations on our behalf. A list of the latter may be requested.

STORAGE PERIOD OF DATA

Data processed for the purpose stated in letter a) will be stored for the entire duration of the relations established and also subsequently for completing all legal obligations (fiscal and accounting) that also remain after the contract has been terminated or expired; for these purposes, the data controller will only store the data required for relative pursuit. Cases are excepted wherein the rights deriving from the contracts and/or registration of personal details should prevail in court, in which case the data subject’s personal data, limited to the data required for said purpose, will be processed for the necessary time for their pursuit.  

Data processed for the purposes stated in letter b) and c) will be stored until any withdrawal of consent.

CONSEQUENCES IN THE EVENT OF REFUSING TO PROVIDE DATA

Providing the data for the purposes stated in letter a) is mandatory and if not provided or provided incompletely, this will result in it being impossible to complete enrolment and to provide the student with all the services required to guarantee access to all services resulting from enrolment.

Providing data for the purposes stated in letters b) and c) is discretionary and in the event of refusal to provide data, the consequence will be that it will not be possible to process them.  In all cases, as the data subject you have the right to revoke consent at any time without prejudicing the lawfulness of processing based on the consent provided before being revoked.

THE DATA SUBJECTS’ RIGHTS

As the data subject, you can exercise the rights contained in article 15 (right of access), 16 (right to rectification), 17 (right to erasure “right to be forgotten”), 18 (right to restriction of processing), 19 (notification obligation regarding rectification or erasure of personal data or restriction of processing), 20 (right to data portability) , 21 (right to object) of the Regulation. Specifically, you can ask the data controller for the document entitled “Procedure for exercising the data subject’s rights”.

As the data subject, you also have the right to lodge a complaint with a control authority, pursuant to article 77 of the Regulation, if your rights as stated have not been acknowledged.

To exercise the above rights, you can contact the data controller via the contact addresses provided above.

TRANSFERRING PERSONAL DATA TO A THIRD COUNTRY/INTERNATIONAL ORGANISATION

The realm of communication of personal data is national, and there is no intention to transfer them to a third country or international organisation.

AUTOMATED DECISION-MAKING PROCESS AND PROFILING

Automated decision-making processes, including profiling, are not used.