PRIVACY POLICY pursuant to Art. 13 of the EU Regulation 2016/679
Pursuant to Article 13 of EU Reg. 679/2016 (GDPR), LegisLAB Academy informs you that the personal data you provide at the time of registration, during the course or subsequently, will be processed by LegisLAB Academy, with registered office in Milan, Piazza Armando Diaz no. 7, as the Data Controller, within electronic and/or paper database, in the manner and to the extent necessary to accomplish the purposes indicated below.
PURPOSE OF THE PROCESSING
- The processing of your personal data is aimed at and essential for the correct and complete execution of the contractual and/or pre-contractual relationships in place with LegisLAB Academy, your course registration, the attendance management, the production of certificates and/or documents, as well as to fulfill legal and tax obligations borne by our structure (pursuant to Art. 6, c. 1, lett. b) and c) of EU Reg. 2016/679). Where necessary and in full respect of your rights, your personal data may also be processed for statistical and scientific purposes, in order to facilitate the analysis and improvement of the teaching and research services offered by LegisLAB Academy (pursuant to art. 6, c. 1, lett. f) of EU Reg. 2016/679).
- Subject to your consent (Art. 6(1)(a) of EU Reg. 2016/679), your data may also be processed in order to send you newsletters updating you on the Academy’s activities and/or to produce and publish multimedia galleries (photos/videos) of the event on social networks and websites, as well as to send you promotional messages about further courses and initiatives organised by LegisLAB Academy. LegisLAB Academy will use, for these purposes, automated methods of contact (such as, for example, e-mail, SMS, instant messaging apps such as Whatsapp and Messenger, social networks) or traditional methods (such as, for example, telephone calls with operator and paper mail). In any event, where you give your consent, you may revoke it at any time, without affecting the legitimacy of the processing carried out up to that point.
METHODS OF PROCESSING
The processing of your personal data may take place, by both automated and non-automated methods, through the following operations: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. The aforementioned processing is carried out by the Data Controller and/or authorized persons in compliance with the security and confidentiality rules required by law.
MANDATORY DATA PROCESSING
The provision of your personal data is a necessary condition for the activities referred to in point 1, and your potential denial will lead to the impossibility of completing and/or managing your participation in the course.
Failure to provide data for the purpose referred to in point 1.2. will only result in the impossibility for LegisLAB Academy to send you promotional communications in relation to the courses organised and/or publish multimedia galleries of the event, while it will in no way prejudice your participation in the course you have chosen.
RECIPIENTS OF PERSONAL DATA
The communication of your data to third parties may take place only when strictly necessary for the achievement of the purposes referred to in point 1 and in compliance with the rules of law, regulations, EU legislation and in accordance with the principles of fairness, lawfulness, transparency and protection of your privacy. In particular, your data may be known by the Data Controller, authorized persons, competent Public Administrations and/or the Professionals and Service Companies charged with activities related to the one of LegisLAB Academy.
TRANSFER OF DATA ABROAD
Your personal data will not be transferred neither to EU countries nor to non-EU countries.
DATA RETENTION PERIOD
With reference to the purposes indicated in point 1.1., your personal data will be kept for the period necessary to fulfil each purpose and in any case – except for data whose retention is required by law – for a period not exceeding 24 months from the date of their acquisition.
With reference to the purposes indicated in point 1.2., in accordance with the provision of the Privacy Guarantor no. 181 of 15 October 2020, your data will be kept until the revocation of any consent you may have given and in any case for a period not exceeding 36 months from the date of its acquisition.
RIGHTS OF THE DATA SUBJECT
Please note that, as a data subject, you have the right:
- to get access to your personal data;
- to ask the Data Controller to rectify your personal data;
- to ask the Data Controller to delete your personal data;
- to obtain the restriction of processing of your personal data: in this case, such personal data will be processed, except for storage, only with the consent of the data subject;
- to receive, in a structured, commonly used and machine-readable format, your personal data;
- to object to your personal data processing;
- to file a complaint with the appropriate supervisory authorities.
DATA CONTROLLER, EXTERNAL DATA CONTROLLERS AND AUTHORIZED PERSONS FOR DATA PROCESSING
The Data Controller, to whom you may contact to enforce the aforementioned rights, is LegisLAB Academy, with registered office in Milan, Piazza Armando Diaz no. 7. You can contact LegisLAB Academy via registered letter to be sent to LegisLAB Academy in Milan, Piazza Diaz no. 7 and/or via PEC to the address legislabacademy@namirialpec.it.