Privacy policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA (PRIVACY)

Pursuant to art. 13 and 14 of Regulation (EU) 2016/679, General Data Protection Regulation (hereinafter "GDPR"), in relation to the personal data that you will come into possession of as Data Controller, Orafa NordEst Snc provides the following information :

  1. Personal data
    Personal data, as per art. 4 n. 1) of the GDPR, provided by the Customer will be treated in accordance with this information and in any case in compliance with current legislation on the protection of personal data.
  2. Purpose.
    The data will be processed for institutional purposes, connected or instrumental to the activity and in particular: 

     

    TO. For purposes strictly related to the management of the contractual relationship whose processing is necessary for the execution of the Contract of which the interested party is a party (Article 6 letter b) of the GDPR) and to the persecution of a legitimate interest of the Data Controller (Article 6 letter f) of the GDPR).

    B. For the fulfillment of the obligations established by laws or regulations to which the Data Controller is subject (Article 6 letter c) of the GDPR) (legal obligations), for example the issue and registration of certifications of acquired skills;

    C. To communicate and / or send, even with automated methods, advertising, information and commercial information through telephone channels, SMS, e-mail, fax, whose legal basis lies in the explicit consent of the interested party (Article 6 letter a) of the GDPR) (direct marketing purposes);

    D. To communicate data to commercial partners for the sending, also with automated methods, of advertising material via telephone channels, SMS, e-mail, fax, whose legal basis lies in the explicit consent of the interested party (Article 6 letter a ) of the GDPR) (marketing purposes for commercial partners);

  3. Data communication.
    The data will be communicated to the subjects in charge of the activities related to the services offered and communicated to third parties (by way of example banks, consultancy companies, technical partners, commercial partners, public bodies) for the purpose of protecting credit risk, information, commercial communications. to guarantee the provision of services and provide the necessary technical and operational support. This communication is necessary for the conclusion of the contract and the services and for the fulfillment of the same. The scope of data communication will be that strictly necessary for the execution of the assignment given by us to the third parties indicated above within the scope of the purposes of letters 2.a) and 2.b) and, in the case of lett. 2.c), 2.d), with the express consent of the Customer. In the case of the purposes of lett. 2.a) and 2.b) the provision of data is mandatory based on law, regulation, community legislation and your refusal to respond will make it impossible for us to fulfill the contractual obligations assumed. The data will not be transferred to countries outside the European Community.
  4. Nature of the provision of data.
    The consent to the processing of data for the purposes referred to in the previous letter. 2.a) and 2.b) it is not necessary pursuant to art. 6 of the GDPR. The consent to the processing of data for the purposes referred to in lett. 2.c), 2.d), on the other hand, is optional and any refusal will prevent Salvamento Academy srl from sending commercial communications, or communication to its partners for third party commercial purposes.
  5. Processing methods.
    The data will be processed both on paper and electronically and / or automatically, directly and / or through the third parties indicated above. The data may be processed and organized in databases, processed for the time strictly necessary for the provision of the services covered by the Contract and to provide technical and operational assistance.
  6. Retention period.
    The retention period of the processing for contractual purposes coincides with the duration of the contractual relationship while the one linked to the fulfillment of legal obligations is prescribed by law in order to guarantee control over the acquisition of skills in the case of a training course ( certification / patent). In relation to the direct marketing purposes of the Business Partners, the retention period of the processing coincides with the duration of the contractual relationship and, in any case, the interested party has the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on on the consent given before the revocation.
  7. Data Controller and Data Protection Officer:
    An email box is available for any communication regarding the protection of personal data. The deadline for replying to the interested party is, for all rights: 30 days from the request, even in the event of denial.
  8. Rights of the interested party.
    At any time, the Customer can exercise his rights towards the Data Controller, pursuant to art. 11 and 12 of EU regulation 2016/679 (GDPR) in addition to the information contained in this statement, you have the right: to have confirmation, in an intelligible and free way, of the existence or otherwise of your data with us; to obtain updating, rectification or integration of data or their blocking / cancellation due to violation of the law or ceased need for conservation; to oppose the processing for legitimate reasons or the processing for the purpose of sending advertising material, direct sales, market research, commercial communications. in addition to the right to data portability. The Customer also has the right to lodge a complaint with the Personal Data Protection Authority.


This legislation complies with EU regulation 2016/679 (GDPR). The Orafa Nord-EST Snc, although not obliged, makes use of the Privacy Impact Assessment (PIA) "Privacy Impact Assessment" (Art. 35 of EU regulation 2016/679) to guarantee and prepare suitable measures to deal with risks related to the processing of data of the interested parties.