For us, data protection is a very serious matter, so we would like to inform you about the way in which your data is processed and the rights you can exercise under the relevant data protection regulations, EU Regulation 2016/679 (hereinafter also referred to as "GDPR").
1. Data controller
ITALIAN STYLE ACADEMY ®
Email info@italianstyleacademy.com
2. The categories of data that are processed
The data processed by the Owner are exclusively "personal data" (ex. Art. 4.1 of GDPR).
In particular, the categories of relevant personal data may be, by way of example only, but certainly not exhaustive:
o - Personal and identification data (name, date of birth, place of birth, nationality, gender, fiscal code).
o - Contact data (address, e-mail address, IP address, telephone number, and similar data)
o - Data concerning business and professional activities carried out.
3. Lawfulness and purpose of the processing
3.1 Purposes within the meaning of the fulfillment of a legal obligation (Art. 6, paragraph 1 (c) of the GDPR)
a. The fulfillment of obligations under laws, regulations, EU legislation, or provisions issued by Authorities and Supervisory and Control Bodies in relation to or otherwise related to the legal or contractual relationship in place and then the general conditions on the site: www.italianstyleacademy.com (registration and participation as a user and student at "Italian Style Academy")
3.2 Purposes within the meaning of protection for the performance of a contract to which the person concerned is a party (Art. 6, section 1 (b) of the GDPR)
1. a) Provision of services to the user-student in accordance with the regulations and general conditions of the site;
2. b) Management of administrative, accounting, fiscal and financial processes of the client (including internal control and payment purposes);
3. c) Protection of contractual rights.
4. d) Mailing list or newsletter (by registering the user's email address is automatically included in a list of contacts to which email messages containing information, including commercial and promotional information, relating to this website may be sent).
The interested party may revoke his/her consent at any time and the effects will take effect from the time of revocation, without prejudice to the terms provided by law. In general terms, the revocation of consent is effective only for the future. The processing that has been carried out before the revocation of consent is not affected by this and therefore remains lawful.
Failure to give or partial consent may not guarantee the complete provision of the services, limiting them to the purposes described above.
4. Recipients or categories of recipients of personal data (ex art. 13 paragraph 1(e) of GDPR) *
Within the above mentioned purposes, the Data Controller may communicate your data:
- Consultants for accounting management and accountants;
- Companies and professional operators providing IT services, including electronic data processing, software and platforms on which Italian Style Academy operates, and IT consulting;
- Law firms;
- Style Coach or Professors of the above mentioned Academy
- Monitoring and supervisory bodies;
- Inland Revenue;
- Other public administrations and public authorities;
- controller
5. Data retention period
5.1 With reference to Section 3.1
The period of treatment and storage of personal data, for legal obligations, corresponds to the duration of the contractual relationship.
For the purposes: a, 10 years, from the end of the contractual relationship.
Rights of the data subject (Art. 13 paragraph 2 (e) of GDPR)
Failure to collect personal data, even partial, due to opposition of the interested party makes it impossible to proceed with the implementation of the purposes set out in this section. On the other hand, when the data are no longer necessary to meet the obligations set out in section 3.1, they are regularly deleted, if their deletion proves impossible or only possible with a disproportionate effort due to a particular storage method, the data cannot be processed and must be stored in inaccessible areas.
5.2 With reference to Section 3.2
The period of processing and storage of personal data, for contractual obligations, corresponds to the duration of the contractual relationship.
For the purposes: a -c, 10 years from the end of the contractual relationship.
Rights of the data subject (Art. 13 paragraph 2 (e) of the GDPR)
Failure to collect personal data, even partial, due to opposition of the interested party makes it impossible to proceed with the implementation of the purposes set out in this section. On the other hand, when the data are no longer necessary to meet the obligations set out in section 3.2, they are regularly deleted, if their deletion proves impossible or only possible with a disproportionate effort due to a particular storage method, the data cannot be processed and must be stored in inaccessible areas.
6. Rights of the Interested Party (ex. Art. 13 paragraph 2 (b) of GDPR)
The person concerned may assert the following rights:
- right of access of the data subject (art. 15 of the EU Regulation) (the possibility to be informed about the processing of his/her Personal Data and possibly receive a copy);
- right of rectification of his/her Personal Data [art. 16 of the EU Regulation] (the data subject has the right to have inaccurate personal data concerning him/her rectified);
- right to the deletion of your Personal Data without undue delay ("right to be forgotten") [art. 17 of the EU Regulation] (you have, as you will have, the right to the deletion of your data);
- the right to limit the processing of his/her Personal Data in the cases provided for by art. 18 of the EU Regulation, including in the case of unlawful processing or contestation of the accuracy of the Personal Data by the data subject [art. 18 of the EU Regulation];
- right to data portability [art. 20 of the EU Regulation], the data subject may request in a structured format his or her Personal Data in order to transmit them to another data controller, in the cases provided for by the same article;
- right to object to the processing of his/her Personal Data [art. 21 of the EU Regulation] (the data subject has, as he/she will have, the right to object to the processing of his/her Personal Data);
- right not to be subject to automated decision-making processes, [art. 22 of the EU Regulation] (the data subject has, as well as will have, the right not to be subject to a decision based solely on automated processing). Further information about the rights of the data subject may be obtained by asking the Data Controller for a complete extract of the above mentioned articles.
The above rights may be exercised in accordance with the provisions of the Regulation by sending an email to info@italianstyleacademy.com (Data Controller) in accordance with Article 19 of the EU Regulation, proceeds to inform the recipients to whom the personal data have been communicated, any corrections, cancellations or limitations of processing required, where possible.
In order to allow a faster response to your requests made in the exercise of the above mentioned rights, the same may be addressed to the Data Controller by addressing them to the addresses indicated in point 1.
7. Right to lodge a complaint (art. 13 paragraph 2 (d) of GDPR)
The interested party, if he considers that his rights have been compromised, has the right to lodge a complaint with the Guarantor Authority for the protection of personal data, according to the modalities indicated by the same Authority at the following internet address
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524
or by sending written notice to the Guarantor Authority for the Protection of Personal Data, Piazza Monte Citorio n.121, 00186 Rome.
8. Possible consequence of failure to communicate data (art. 13 paragraph 2 (e) of GDPR)
Please note that where the processing purposes have a legal or contractual (or pre-contractual) obligation as a legal basis, the data subject must necessarily provide the requested data.
Otherwise it will be impossible for the Data Controller to pursue the specific processing purposes.
9. Existence of an automated decision-making process (including profiling)
The use of purely automated decision-making processes as detailed in Article 22 of the GDPR is currently excluded. Should it be decided in the future to establish such processes for individual cases, the person concerned will be notified separately if this is required by law or if this information is updated.
10. Methods of processing
The personal data will be processed in paper, computerized and telematic form and inserted in the relevant databases to which they can access, and therefore come to know, the employees expressly designated by the Owner as Responsible and Authorized for the processing of personal data, which may carry out consultation, use, comparison and any other appropriate operations, including automated, in compliance with the provisions of the law necessary to ensure, among other things, the confidentiality and security of data and the accuracy, updating and relevance of the data with respect to the stated purposes.