INFORMATION ON THE PROCESSING OF PERSONAL DATA
This page is intended to inform users of this site about the methods of management of the same with regard to the processing of their personal data, as required by art. 13 and 14 of European Regulation no. 679/2016
Therefore, interested parties are invited to carefully read, before accessing third-party services, their information on the processing of personal data.
1. Type of data collected, legal basis and purpose of processing
(i) Navigation data
Our computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes the IP addresses or domain names of the terminals of users who connect to the site, the MAC (Media Access Control) addresses, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment. These data are used for the following purposes:
- obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site. The legal basis that legitimises such processing is art. 6 par. 1, lett. b) of the Regulation, as it is necessary to allow the interested party to use the requested service.
- comply with legal obligations or requests from the judicial authority. The legal basis that legitimises such processing is art. 6 par. 1, lett. c) of the Regulation, as the processing is necessary to fulfil a legal obligation to which the data controller is subject.
(ii) Data provided voluntarily by the interested party
The Data Controller may process the user’s personal data for the following purposes:
- espond to requests made by the interested party or to the request for association. The legal basis that legitimises such processing is art. 6 par. 1, lett. b) of the Regulation, as it is necessary to provide the interested party with the requested service;
- creation of an account to carry out operations interconnected with the service offered by the site such as access to educational material, retrieval of other information material or documents reserved for members. The legal basis that legitimises this processing is art. 6 par. 1, letter b) of the Regulation, as it is necessary to provide the interested party with the requested service. To carry out this purpose, the Data Controller will process personal contact data;
- Sending newsletters relating to the Association’s activities. The legal basis for the processing is art. 6 par.1. letter a) of the Regulation, as the interested party has given free and informed consent. To carry out this purpose, the Data Controller will process personal contact data;
- Registration for a course. The legal basis that legitimises this processing is art. 6 par. 1, letter b) of the Regulation, as it is necessary to provide the interested party with the requested service. Personal data, contact data, and bank details are processed.
- fulfill legal obligations or requests from the judicial authorities. The legal basis that legitimises such processing is art. 6 par. 1, lett. c) of the Regulation, as the processing is necessary to fulfil a legal obligation to which the data controller is subject.
(iii) Cookies
The Site uses the following types of cookies:
- technical cookies (session and navigation), to guarantee normal navigation and use of the Site (allowing, for example, authentication to access reserved areas)
- third-party analytical cookies (with reduced identification potential), in order to monitor the use of the Site by the Interested Parties for the purpose of optimizing the web platform and statistics. For all information relating to the processing of Data carried out via cookies, please refer to the extended cookie policy, accessible at https://scuoladelmerkos.it/cookie-policy/
2. Data retention period
The Data collected and processed following navigation of the Site will be retained for the entire period of provision. The Data sent independently by the Interested Parties through the tools on the Site will be deleted after having provided the requested service (in the case of a simple request for information) or upon explicit request of the interested party with the exception of those necessary for compliance with tax, accounting and administrative regulations or to fulfill other legal obligations and to document the activities carried out.
3. Processing methods
The Data will be processed by internal staff of Scuola del Merkos expressly authorized to do so, with electronic tools, will be organized in databases and will be stored on any type of suitable support (including computer and paper). Specific security measures are observed to prevent the loss of Data, any illicit or incorrect use of the same and access by unauthorized third parties. The processing of Data carried out by Scuola del Merkos does not involve automated decision-making processes.
4. Provision of Data
The provision of Navigation Data is necessary for the provision of the requested service (browsing the site) and mandatory for this purpose; failure to provide it will make it impossible for Scuola del Merkos to allow navigation on the Site.
The provision of additional Data is optional; failure to provide it does not entail any consequences for the Data Subject.
5. Communication of Data
The Data may be communicated to companies, associations or professional firms that provide services and activities on behalf of Scuola del Merkos as Data Processors for the fulfillment of legal obligations, as well as for any organizational and administrative need necessary to provide the requested services (“Data Processors”). It is possible to request from Scuola del Merkos the complete list of names of external Data Processors involved in data processing.
The Data will not be disclosed.
6. Transfer of Data to Countries that are not part of the European Union or to international organizations
Scuola del Merkos does not transfer Data to Countries that are not part of the European Union or to international organizations.
7. Link to third-party sites or services
This information is provided only for the processing of personal data carried out through the Site or the tools provided by the same, and not for other websites that may be consulted by the Data Subject via a link, whose managers operate as independent data controllers. Data Subjects are therefore invited to carefully read their information on the processing of personal data before accessing third-party services.
8. Rights of the Data Subjects
Pursuant to articles 15 to 22 of EU Regulation no. 679/2016, you may exercise at any time the rights indicated in these articles and in particular the right to access the data, to rectify, to erase, to limit, to portability, to object, and to be informed about processing carried out through automated decision-making processes relating to natural persons, including profiling).
As an interested party, you can lodge a complaint with the supervisory authority of the Member State in which you habitually reside or work or where the alleged infringement occurred. The Italian Supervisory Authority can be reached at the contact details indicated on the website //WWW.GARANTEPRIVACY.IT/
9. Data Controller – Contact details
The Data Controller is Merkos l’Inyonei Chinuch, Via Cellini, 2, Milan. To exercise the rights listed above or to receive information regarding the privacy measures adopted, the Data Controller can be contacted at the following address: info@merkos.it