PRIVACY POLICY ON THE PROCESSING OF PERSONAL DATA

(pursuant to Article 13 of the GDPR)

DATA CONTROLLER DETAILS

Name: Fondazione per la Scuola
Tax Code: 80071250015
Registered office: Piazza Bernini 5, 10138 Turin (TO), Italy

Fondazione per la Scuola (hereinafter also referred to as the “Controller” or the “Foundation”), in its capacity as Data Controller, hereby informs you, pursuant to Article 13 of Regulation (EU) No. 2016/679 (hereinafter, the “GDPR”), that your personal data will be processed in the manner and for the purposes set out below.

Subject of the Processing

The Controller processes identification data and usage data of the data subject generated during interaction with the Controller’s website (the “Website”), accessible at the following address: https://www.fondazionescuola.it/ (hereinafter, “Personal Data” or simply “Data”).

This Privacy Policy applies exclusively to this Website and does not apply to any other websites that may be accessed by the User via links available on the Website. With regard to the processing of data carried out by such external websites, users are invited to consult the respective privacy policies published on those websites.

The Website is also able to track certain information relating to the network used by the User (e.g. IP address).

Purposes and Legal Basis of the Processing

Your Personal Data are processed for the following purposes:

1. a) to enable the User to submit requests for information to the Controller via the dedicated contact form available on the Website or by sending an email (Data are not processed directly through interaction with the Website);
2. b) to allow the User to interact with the content available on the Website (e.g. consult the Foundation’s initiatives and/or project calls; download institutional documents; view multimedia content available on the Website, etc.);
3. c) to access external platforms via links available on the Website (e.g. the In-Recruiting web portal). The processing of personal data will take place in accordance with the privacy policies of the respective platforms;
4. d) to comply with obligations provided for by law, regulations, European legislation or orders of public authorities;
5. e) to collect statistics and metrics aimed at ensuring the proper functioning of the Website;
6. f) to exercise the rights of the Controller (for example, the right of defence in legal proceedings).

The legal bases for the above processing activities are as follows:

• with reference to purposes a), b) and c), processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures adopted at the request of the data subject;
• with reference to purpose d), processing is necessary to comply with a legal obligation to which the Controller is subject;
• with reference to purposes e) and f), the legal basis is the legitimate interest of the Controller, namely to monitor the proper functioning of the Website and to exercise its rights, such as defence in legal proceedings.

The provision of data for the above purposes is mandatory. Failure to provide the Data will prevent you from properly interacting with the Website.

By interacting with the Website, your Personal Data may be processed through the use of cookies. Full details on the cookies used are provided in the Cookie Policy.

Data Retention Period

Personal Data will be retained for the time necessary to fulfil the purposes indicated in this Privacypolicy.

The Controller will retain, for a period of ten years as required by the Italian Civil Code, copies of correspondence with legal or commercial relevance. Users’ Personal Data may also be retained for the time necessary to ensure defence in legal proceedings or to pursue any misuse of this Website.

Disclosure of Data

Users’ Data will not be disclosed, but may be made accessible, where necessary for the provision of services or as required by law, to:

• employees and collaborators of the Controller in Italy and abroad, in their capacity as authorised persons processing personal data and/or system administrators;
• third-party companies or other entities (by way of example, professional firms, IT consultants, etc.) that carry out outsourced activities on behalf of the Controller, in their capacity as external data processors.

For the purpose referred to under point d), the Controller may communicate your Data to supervisory bodies, judicial authorities and public entities to whom communication is mandatory by law, as well as to any other subjects to whom disclosure is required by law for the fulfilment of the aforementioned purposes.

Data Transfers

Personal Data are stored on servers located within the European Union and managed by third-party companies duly appointed as Data Processors.

The Controller may transfer certain categories of Users’ Data to countries outside the European Union. Such transfers will take place exclusively to countries deemed adequate by the European Commission or to companies providing appropriate safeguards pursuant to Articles 44–50 of the GDPR.

Rights of the Data Subject

You may exercise, in relation to the processing described above, the rights provided for by the GDPR (Articles 15–22), including the right to:

1. obtain confirmation as to whether or not Personal Data concerning you exist and access their content (right of access);
2. update, amend and/or rectify your Data (right to rectification);
3. request the erasure or restriction of processing of Data processed unlawfully, including Data that no longer need to be retained for the purposes for which they were collected or otherwise processed (right to erasure and right to restriction);
4. object to the processing (right to object);
5. lodge a complaint with the supervisory authority (Italian Data Protection Authority – Garante per la protezione dei dati personali – www.garanteprivacy.it) in the event of a violation of data protection legislation;
6. receive a copy of your Data in electronic format, where such Data have been provided in the context of a contract, and request that such Data be transmitted to another data controller (right to data portability).

Exercise of Rights and Contact Details of the Data Controller

The Data Controller is:

Fondazione per la Scuola
Registered office: Piazza Bernini 5, 10138 Turin (TO), Italy

You may exercise your rights at any time by sending a registered letter with return receipt to the above address or by email to: privacy@fondazionescuola.it.

Contact Details of the Data Protection Officer

The Data Controller has appointed a Data Protection Officer (DPO), who may be contacted at the following address: fondazionescuola@argobs.it.

Information Not Contained in This policy

Further information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact details provided above.

Amendments to This Privacy policy

This Privacy policy may be subject to changes. Users are therefore advised to check this Privacy policyregularly at the relevant link and to refer to the most up-to-date version.