Information to the public as of art. 13 of Law Decree 30 June 2003 no. 196
Law Decree no 196 of 30 June 2003 (hereafter abbreviated as "Privacy Law"), with subsequent amendments, provides for the protection of all legal entities with regard to the processing of their personal data.
The Privacy Law states that such processing shall be based on principles of necessity, correctness, lawfulness, exactness and relevance, and that personal data shall be processed for specific, explicit and legitimate purposes.
In compliance with article 13 of the Privacy Code, we provide the following information concerning the personal data which you provide when you use the contact form available on our website.
1) Purposes of processing
The personal data provided when you fill in the contact form available on our site are intended to enable us to respond to the request sent by the user. In particular, inserting your personal data on the form and sending the contact request automatically creates on our website an e-mail addressed to us, containing the personal data shown on the form.
2) Methods of processing
- Processing takes place by means of the operations or combinations of operations listed under art. 4 paragraph 1 letter a) of the Privacy Law; the data may therefore be subject to: collection, registration, organization, retention, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication and destruction.
- The above operations may be performed on paper or with the support of electronic or other automatic tools. Manual processing will be made by keeping suitable registers and/or sheets, which will be conserved traditionally in appropriate containers.
- Processing will be made for the time necessary to respond to the user’s request.
- Processing will be made by the persons listed under point 5) below and by persons designated for the processing.
3) Nature of the provision of data
Provision of personal data for the purposes as of paragraph 1) is necessary and indispensable to enable us to respond to the user’s request and in this sense it is compulsory. If you refuse to provide the data, or refuse consent for its processing, we will not be able to respond to your request.
4) What happens to the data you provide?
The personal data relating to the processing in question may be communicated to the persons who handle our company’s information systems. The data will be communicated solely insofar as it is necessary to enable these persons to perform the duties conferred on them.
5) The data controller and the data processor
The controller of the personal data is: International School of Europe S.r.l., in the person of its legal representative, with registered offices in Milan (Postal Code 20123), Via Manfredo Camperio no. 14, VAT no. 12932001006, REA [Economic and Administrative Register] no MI 2046718, phone +39 02 872581, e-mail firstname.lastname@example.org.
The processor of the personal data is Francesco Ghidoni, domiciled with International School of Europe S.r.l., administrative offices in Baranzate (Postal Code 20121), Via I Maggio 20, phone +39 02 872581, e-mail email@example.com.
6) Your rights
You may exercise your rights at any time, making request to the data controller or the data processor, as of point 5) above, to the effects of article 7 of the Privacy Law, which for convenience we reproduce in its entirety:
Law Decree no.196/2003- Art. 7 - (Right to Access Personal Data and Other Rights)
1. A data subject shall have the right to obtain confirmation as to the existence or not of personal data concerning him/her, regardless of whether it is already recorded or not, and communication of such data in intelligible form.
2. A data subject shall have the right to be informed
- of the source of the personal data;
- of the purposes and methods of the processing;
- of the logic applied to the processing, if this is carried out with the support of electronic tools;
- of the identification details of the data controller, the data processors and the representative designated as of article 5, paragraph 2;
- e) of the entities or categories of entity to whom or to which the personal data may be communicated and who or which may become aware of the said data in their capacity as designated representative in the State territory, data processors or persons in charge of the processing.
3. A data subject shall be entitled to obtain
- updating, rectification or, if necessary, integration of the data;
- erasure, transformation into anonymous form or blocking of unlawfully processed data, including data the retention of which is unnecessary for the purposes for which it was collected or subsequently processed;
- certification that the operations as of a) and b) have been notified, having regard also to their content, to the entities to whom or to which the data were communicated or disseminated, unless such implementation proves impossible or requires means that are manifestly disproportionate to the right to be protected.
4. A data subject shall be entitled to object, in whole or in part,
- on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
- to the processing of personal data concerning him/her, where it is carried out for the purpose of sending materials for advertising or direct sale or for the performance of market or commercial communication surveys.