NOTICE PURSUANT TO THE GENERAL DATA PROTECTION REGULATION
(EU REGULATION 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF APRIL 27, 2016)
In accordance with the General Data Protection Regulation (EU Regulation 2016/679, hereafter referred to as “GDPR”), the processing of personal data will be based by FORMIT Foundation (hereafter referred to as “FORMIT”) on the principles of fairness, lawfulness, transparency and protection of the confidentiality and rights of the data subject.
Pursuant to the GDPR, therefore, the following information is provided:
TYPE OF DATA PROCESSED
The data provided to FORMIT by the data subject may include:
personal and identification data (name, surname, gender, date and place of birth, citizenship, residence/domicile, tax code and e-mail and telephone contact details) related to the performance of activities and projects in the different areas of intervention of FORMIT’s competencies;
data connected with economic and social security treatment of staff and external collaborators;
data connected with economic treatment of suppliers of goods and services;
personal, economic and training path data related to trainees of training courses and masters provided by FORMIT.
The above-mentioned data can be requested and collected through special functions on the FORMIT Web Site or directly from the data subject.
PURPOSE OF PROCESSING
The processing of the data provided is aimed at enabling one or more of the following activities:
management of access credentials to FORMIT information systems, aimed at uniquely identifying the user in accordance with FORMIT security policies;
management of Employee Personnel and external collaborators; management of purchasing; accounting management; performance of activities and projects connected with FORMIT’s institutional purposes, possibly in partnership with entities outside FORMIT, including those belonging to countries outside Europe, carried out also with the support of IT platforms;
production of elaborates connected with the performance of activities and projects related to FORMIT’s institutional purposes; statistical processing, including of a forecasting and/or reporting nature, relating to activities and projects connected with FORMIT’s institutional purposes; invoicing within the scope of activities and projects connected with FORMIT’s institutional purposes; delivery of training courses and master’s courses both in-person and distance learning, the latter carried out with the support of e-learning computer systems equipped with access tracking functions, electronic curriculum management, planning and conduct of examinations, management of examination minutes, etc;
fulfillments related to legal obligations, regulations, both of national, European and international derivation; feedback – including by e-mail or telephone – of specific requests made by the data subject.
PROCESSING METHODS
The processing of the data provided is carried out in accordance with the relevant applicable legislation and in compliance with the principles of lawfulness and fairness dictated by the GDPR. In particular, the data provided: are collected and stored exclusively for the purposes indicated above, adequately and constantly updated;
are processed both manually and through the use of electronic means, in a lawful and fair manner, for the achievement of the purposes indicated above;
are protected by means of the adoption of appropriate security measures by the managers and officers appointed for this purpose.
AUTOMATED DECISION-MAKING PROCESSES
There are no automated decision-making processes based on the data provided.
RETENTION PERIOD
The data provided will be kept for a time interval not exceeding the purposes pursued in the collection.
MANDATORY NATURE OF PROVIDING DATA
The provision of the data provided is optional: however, any refusal on the part of the interested party will result in the impossibility of carrying out the requested service.
SCOPE OF DATA COMMUNICATION
The data provided, collected and processed exclusively for the purposes indicated above, may be communicated to public entities, in fulfillment of specific legal obligations, or to both public and private entities for the achievement of the same purposes.
RIGHTS OF THE DATA SUBJECT
At any time, the data subject may exercise the right to:
request confirmation of the existence or non-existence of his/her personal data;
Obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the period of storage;
obtain rectification and updating of data;
obtain the deletion of data or the restriction of processing (the exercise of this right may result in the impossibility of carrying out the requested service);
obtain portability of data, i.e., receive them in a structured, commonly used, machine-readable format and transmit them to another data controller without hindrance
revoke consent at any time without affecting the lawfulness of the processing based on the consent given prior to revocation (the exercise of this right may result in the impossibility of carrying out the service requested)
file a complaint with a supervisory authority.
REFERENCES
The interested party may exercise his/her rights by:
written request sent to FORMIT at the postal address of the registered office indicated below;
e-mail message sent to mail@formit.org.
The Data Controller is:
FORMIT Foundation (registered office): Via G. G. Careri 11, 00147 Rome.
