PRIVACY POLICY ON THE PROCESSING OF PERSONAL DATA

pursuant to Article 13 of Regulation (EU) 2016/679 (“Privacy Policy”)

This information is provided in accordance with Regulation (EU) 2016/679 (hereinafter “Regulation” or “GDPR”) and describes the methods of processing personal data of users who consult and use this website, accessible at https://www.iscom-modena.it/ (hereinafter also “Site”). According to the current European Regulation on personal data protection No. 679/2016 (“GDPR”), collection and processing will always follow principles of legality, correctness, and transparency.

Following the consultation of the Site, data related to the user accessing the site (referred to as “Interested Party” as a natural person identified or identifiable) may be processed.

A. DATA CONTROLLER / CO-CONTROLLERS OF THE PROCESSING

ISCOM FORMAZIONE MODENA, represented by the current legal representative, Tax Code 00829580364, with registered office in Modena (MO), Via Piave 125, postal code 41121, contactable at info@iscom-modena.it (hereinafter the “Controller”)

B. TYPES OF DATA COLLECTED, PURPOSES, LEGAL BASIS, AND STORAGE PERIODS.

1. Navigation Data

Personal Data may be collected independently by the Controller or through third parties.

In this case, the IT systems and software procedures responsible for the operation of this Site acquire some Personal Data of Users, of a technical-informatic nature (e.g., IP address, browser type used, operating system, domain name, and web addresses from which access or exit was made, etc.), the transmission of which is inherent to the normal functioning of the internet.

Purpose: such Data may be processed solely to obtain anonymous statistical information about the use of the site and/or to monitor its proper functioning.

Storage: These Data will be deleted immediately after processing.

Legal Basis: the processing is carried out based on the legitimate interest of the Controller to make the Site accessible and ensure safe navigation (art. 6, par. 1 lett.f). Exclusively for the specific profiling activity, the explicit consent of the interested party (art. 6, par. 1 lett.a) is required.

2. User contacts via email, contact form completion, and telephone contact.

The optional, explicit, and voluntary sending of communications via email, contact form, or telephone to the addresses indicated on this site or through the completion of the appropriate form involves the subsequent acquisition of the data communicated by the user, including their email address, and consent to receive responses to their requests.

In this case, providing the email address and other data indicated is optional but necessary to use the service and receive a response to your request; without it, processing cannot proceed.

Purpose: The personal data provided are used solely to fulfill or respond to transmitted requests and are communicated to third parties only if necessary for this purpose.

Storage: Data are stored for the period necessary to fulfill the request and in accordance with current regulations.

Legal Basis: the processing is carried out for the performance of a contractual and pre-contractual obligation undertaken by the Controller with the service (art. 6, par. 1 lett.b).

3. Newsletter and promotional/commercial communications.

If explicitly requested by the user, it is possible to provide contact details to receive commercial and/or informational communications regarding the Controller’s activities.

The provision of such data for these purposes is entirely optional but necessary to proceed with the promotional information service described above.

We use MailUp to send newsletters.

Purpose: the personal data provided (Name, Surname, and email address) are used solely to fulfill or respond to transmitted requests and are communicated to third parties only if necessary for this purpose and only after explicit consent from the interested party.

Storage: data are stored for the period necessary to carry out the activity for which they were provided and, specifically for the purposes described above, no longer than two years as expressly provided by law (unless renewed consent for other purposes as per current regulations).

Legal Basis: the processing is based on the explicit consent of the interested party (art. 6, par. 1 lett.a).

4. Integration of Social Media plugins

We have integrated social media plugins (LinkedIn, Facebook, Instagram, YouTube, Pinterest, Twitter) on the site. This means that when you click or tap one of the buttons (for example, the “Like” button on Facebook), some information is shared with the social media service providers.

If you are logged into your social media account when clicking or tapping one of these buttons, the social media provider can link this information to your social media account. Depending on your settings, these actions may also be displayed on your social media profile, making them visible to other users in your network.

5. This site uses cookies as better specified in the Cookie Policy.

C. DATA RECIPIENTS

The personal data collected are processed by the personnel of the Controller, who act with proper authorization, based on specific instructions regarding the purposes and methods of processing.

Additionally, the subjects designated as data processors pursuant to art. 28 of the GDPR or sub-processors, whom the Controller uses for service provision and activities within their competence, may be recipients of the data collected following site consultation or service use within the limits of their respective assignments.

The relevant list can be requested from the Controller using the contact details in section A.

If a data processor or sub-processor is appointed through the services offered by the site, data will be communicated to the data controller and/or data processor.

D. DATA TRANSFER

No transfer of personal data abroad is foreseen.

E. RIGHTS OF THE INTERESTED PARTIES

The interested parties – the natural persons identified or identifiable to whom the data refer – can exercise specific rights regarding data protection, listed below:

a) right of access: the right to obtain from the Controller confirmation as to whether or not personal data are being processed and, if so, to access the personal data and detailed information regarding their origin, purposes, categories of data processed, recipients of communication and/or transfer, and more;

b) right to rectification: the right to obtain from the Controller the rectification of inaccurate personal data without undue delay, as well as the integration of incomplete personal data, including by providing an additional declaration;

c) right to erasure (“right to be forgotten”): the right to obtain from the Controller the erasure of personal data without undue delay when: i. the data are no longer necessary for the purposes for which they were collected; ii. the consent on which the processing is based is revoked and no other legal basis exists; iii. the personal data have been processed unlawfully; iv. the data must be erased to comply with a legal obligation;

d) right to object to processing: the right to oppose at any time the processing of personal data based on a legitimate interest of the Controller;

e) right to restriction: the right to obtain from the Controller the restriction of processing when the accuracy of personal data is contested (for the period necessary for the Controller to verify the accuracy), when the processing is unlawful, or when the data subject has objected to processing;

f) right to data portability: the right to receive in a structured, commonly used, and machine-readable format the personal data and to transmit such data to another data controller, where technically feasible, only for cases where the processing is based on consent or a contract and only for data processed electronically;

g) right to lodge a complaint with the supervisory authority: without prejudice to any other administrative or judicial remedy, the data subject who considers that the processing concerning them violates the Regulation has the right to lodge a complaint with the supervisory authority of the Member State where they reside or usually work, or where the alleged violation occurred. Rights can be exercised by contacting the Controller using the contact details provided in sections A and B:

• Data Controller: privacy info@iscom-modena.it

This information is updated as of 20/02/2025