PRIVACY 

Notification on the processing of your personal data according to Art. 13, 14 Privacy Regulation EU GDPR 2016/679: Customers personal development courses: LAHP.

Dear Customer, according to the new Regulation EU 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, we draft this to inform you that your personal data will be processed by EKIS S.r.l. as information owner and responsible for its handling in accordance with Art. 28 of the Regulation EU 2016/679. Any information or request for clarification may be sent to the information owner using the following CONTACT DETAILS: EKIS S.r.l. registered office in Reggio Emilia (Italy), post code 42123, Via Fausto Coppi No. 12, VAT Number and Tax ID Number 01882890351, Tel. +39 0522-337611 Fax +39 0522.334345, e- mail info@Ekis.it / ekis@pcert.postecert.it. Business Register No. 13363/2000 – CCIAA 231787 (RE) Italy.

In accordance with Regulation EU 2016/679, we inform you that your personal data and information will be processed by EKIS S.r.l. pursuant to honesty principles, lawfulness and transparency for the protection of privacy.

                    The SUBJECT of the data processing includes the following data and information:

A. Personal data relating to tax and accounting obligations.

B. Contact details as telephone and fax number and/or e-mail address

C. Instrumental data for communications from EKIS S.r.l. and/or related companies.

D. Monitoring data of business activity quality of goods and services, which may be considerable to detect the degree of satisfaction about the quality of services. Such data will be processed in digest mode and anonymously.

E. Photo images and/or Video acquired by EKIS S.r.l. in the performance of its services. As an example the video recording made in the courses and used as a teaching tool for updating the skills of the teaching staff, for the candidates and/or for promotional purpose.

F. Data for the customers management and for the activities planning.

G. Organizational and technical data relating to goods, services and more instrumental data of the company; incidental data relating to the execution of the contracts of the services.

H. Data for any contentious procedures between CUSTOMERS and EKIS S.r.l.

 EKIS S.r.l. indicate that the customer REFUSAL for the processing of the personal data and information may not authorize the company to activate the services.

Furthermore EKIS S.r.l. shall use the contact details of its customers for the purposes below, in order to promote its services and their renewal, always subject to the prior agreement of the person interested:

A. To send marketing information by e-mail or via text message.

B. To send marketing information of related companies, subsidiaries or trading partner by e-mail.

EKIS S.r.l. indicates that not consenting to receive marketing information will NOT affect the provision of the services.

DATA and INFORMATION collected to activate the services required will be processed by EKIS S.r.l for the following purposes:

A. To fulfill the obligations under the Law, the Regulations, the Italian, EU and International legislation.

B. To provide the required services and activities foreseen in the social objective of EKIS S.r.l. whether they are regulated by specific contracts or they are part of routine management activities provided by EKIS

S.r.l. also with the support of third parties and/or trading partners. The mentioned activities include commercial and educational activities; prior agreement of the person interested, EKIS S.r.l reserves the right to collect images/videos of the course in relation to these activities with the following purpose I) training and refreshment courses for the teaching staff of EKIS S.r.l. to improve the teaching, II) training and teaching using photo-audiovisual recordings to provide a real representation of the training course knowledge ; III) to promote the services; especially the photo images may be reproduced on information advertising (printed/ electronic) and used to promote EKIS S.r.l. activities.

C. To fulfill the rules for book-keeping, credit safeguarding and prevention of insolvencies.

D. To verify the quality of the services and the customers’ satisfaction.

           EKIS S.r.l. informs the customers about the procedures concerning the data processing: Data may be collected in whatever form and will not processed in a paper, informatic or telematic format, pursuant to the security measures of Art. 32 of Regulation EU 2016/679 and by organizational procedures strictly related to the obligations and the purposes mentioned above.

Data will have the duration agreed in the trade contract between the parties and in addition the statutory limitations and time-limits in compliance with the law for the retention of administrative, accounting and tax documents (10 years unless legal changes).

           Concerning the AREA OF DATA COMMUNICATION AND TRANSFER we inform you that they may be transmitted to third parties, who need your data in order to provide the activities for the purposes mentioned at point 2, to exercise the power and carry out the public order and security by public entities. Furthermore data may be transmitted to insurance companies, to lawyers in order to manage parties disputes, to single or affiliated practitioners and in order to manage the instrumental services for the operation of the Company, to agents or representatives of the owner, to services consultants or outsourcers, to sub-contractors or sub-suppliers.

Relating to the nature of the processing activity, the external stakeholders will become responsible for processing the data and adopt the correct security measures in accordance with the Regulation.

Prior agreement of the person interested, the personal data may be submitted to third parties, who will request for information relating the organization and the performance of the services of the contracts. The owner of the data processing may submit the personal data to third countries, in order to execute the contract; the owner must not transfer the data to international bodies.

In the event of a transfer toward third countries the adequacy decisions of the Commission may be evaluated for every single case. The data will be processed in the owner’s registered office by the employees trained and authorized to enter the Data and the processing procedures according to Art. 32 of the Regulation.

           With regard to the NATURE OF THE PROVISION OF THE DATA AND THE CONSEQUENCES OF REFUSAL, the Company EKIS S.r.l. indicates that the provision of personal data for the purposes mentioned in the points a),

b) e c) of the subsection “PURPOSES” it is mandatory to conclude a trade contract, for its performance and improvement. The principle of lawfulness of processing is constituted by the contract between the parties and the agreement of the person interested is not required.

The absence of the provision of Data by the person interested for the same purposes will not allow to carry out the contract performance and benefits, neither the complementary activities necessary for the development and the improvement of EKIS S.r.l. services.

The provision of Data for the purposes of the point D) would be optional and may be accompanied by the agreement of the person interested. The absence of the processing agreement will not allow the owner to develop the purposes of the point D).

In accordance with Regulation EU 2016/679 pursuant to Art. 15 and the following ones. EKIS S.r.l. inform that the PERSON INTERESTED RESERVES THE RIGHT to claim to the Italian Data Protection Authority and revoke his consent at any time; options for the person interested:

A. The right to obtain confirmation whether or not personal data concerning the subject exist and their communication in intelligible form with the possibility to submit the data to a different owner (“Right to Data Portability”);

B. The right to obtain the information about : (i) the purpose of processing and the mode applied in case of electronic tools are used; (ii) personal Data of the processing Controller, the processing responsible and the responsible for the data protection; (iii) the data may be submitted to subjects/categories of subjects otherwise subjects/categories of subjects may access the data in their quality of Representative of the state.

C. The right to obtain (i) the updating, the rectification and the integration of the Data concerning or in case of incorrect Data, the processing limitations for a specific time in order to verify (ii) the transformation into an anonymous mode or the blocking of data if processed in violation of the law, including the data for which the conservation is necessary (iii) the attestation that the operations of the points above have been notified to the interested person also for their content, except in the case when such fulfillment may result impossible or require the use of disproportionate means with respect of the rights of the person concerned.

D. The right to object, partially or completely to : (i) to the data processing, including data collection purposes (ii) data processing for marketing or direct sale purposes, in other words commercial information and market research.

E. The right to obtain the erasure of data without undue delay (“Right to be forgotten” ex Art. 17 Regulation EU 2016/679 in the event the data are not necessary for the purposes they were collected or processed or when they were processed unlawfully or in the case when the User will request or object totally or partially the data processing.

F. The right to obtain the limitations for data processing in the case the data (i) will be processed unlawfully, but the User will object their erasure, (ii) will be necessary for the User to determining, exercising or defending a right, (iii) there is an evaluation about the legitimate reasons of processing by the Owner.

To enforce your rights and to request any information please write to ekis@pcert.postecert.it.

Acknowledged the notice pursuant to Articles 13, 14 of Regulation EU 2016/679, agree my consent to allow the owner of the processing to collect the Data content of this document for the purposes described in Section d) - (Verify the quality of service and the customers’ satisfaction, even by profiling activities).

Acknowledged the notice pursuant to Articles 13, 14 of Regulation EU 2016/679, agree , my consent to allow the owner of the processing to collect and process Data and information required for the provision of the services agreed by this contract and following the SUBJECT and the PURPOSES of this notice.

Acknowledged the notice pursuant to Articles 13, 14 of Regulation EU 2016/679, to law No. 633/1941 and to Art. 10 of Civil Code; agree to allow the owner of the processing to obtain the data and to process them for the purposes described in the “b” of the Subsection “PURPOSES” of this notice about photo-audio-visual material during the educational and training activities. Furthermore, by signing this document to give my consent, I am committed to never take any personal information about course participants and teaching staff by using photo-audio-visual recordings and I am aware that EKIS S.r.l. will not be responsible for the appropriation of Data, which may result in damage to third parties, by natural persons during the training activities. I was informed that in the case above listed, the Company EKIS S.r.l. in accordance with Regulation EU 2016/679, will notify to the Supervisor such law violations reserving the right to protect itself in the competent civil and penal court.

Your consent may be withdrawn by the interested person at any time by writing an e-mail to ekis@pcert.postecert.it or by sending a registered letter.