INFORMATION ON THE PROTECTION OF PERSONAL DATA

Information pursuant to Articles 13 and 14 of GDPR 2016/679

Identity and contact details of the Data Controller. The Data Controller is the company Studium srl a socio unico (hereinafter Studium) – Registered office: Via Matera 18, 00182 Rome – Tax Code and VAT No. 13343471002 – privacy@studiumeducation.it.

1. Contact details of the Data Protection Officer (DPO). The Data Protection Officer can be contacted at the following address: dpo@studiumeducation.it


2. Purposes of processing (Art. 6 para. 1 GDPR).
   1. for the purposes of complying with legal obligations; to fulfill obligations imposed by law, regulations, or EU legislation, or obligations arising from instructions issued by authorities or supervisory bodies; for the purposes of consulting this domain;
      for the purposes of managing contractual and/or pre-contractual relationships with Studium: specifically, for the design and provision of personalized assistance services in the context of preparation for university and school examinations and professional training; purposes strictly connected and instrumental to the management of the aforementioned relationship (e.g., for acquiring pre-contractual information and for performing services and operations as contractually agreed);
      for the pursuit of a legitimate interest of Studium: for carrying out preliminary checks related to the conclusion of the contract, to comply with a request from the customer and/or potential customer; for quality control, research and development in order to improve products and services;
      for communications of commercial information and the sending of advertising/informational material relating to goods and services similar to those covered by the contract, including through automated and traditional means, email and related web applications;
   2. for communications of commercial information and the sending of advertising/informational material relating to goods and services, including those of subsidiaries, parent companies, affiliates, joint controllers, deemed to be of interest to you, through both automated and traditional means, email and related web applications, based on expressed consent;


3. Categories of personal data. The processing concerns your personal data provided when completing the forms available at the collection points within the domain, directly or indirectly related to your relationship with Studium and necessary for legal and contractual obligations. The provision of data is not mandatory. Failure to provide the data necessary for registration will make it impossible for the Data Controller, Data Processors and authorized personnel to carry out processing operations and provide the related services. The processing also concerns the IP address and browser type used to connect to this domain (non-identifying data), automatically recorded by logical protection and control systems used exclusively for network traffic verification purposes.
   Cookies
   Please refer to the Cookie Policy available at this address for more information about the cookies we use.
   


4. Recipients of personal data. Within the scope of the purposes indicated above, your data will or may be communicated to banks and/or credit institutions responsible for processing payments in accordance with agreed methods; insurance companies for handling any compensation claims; authorized entities or bodies for fulfilling related obligations within the limits of legal provisions; data processors acting as natural or legal persons who, also on the basis of contracts with Studium, provide specific processing services or carry out activities connected, instrumental or supportive to those of Studium. The names of any external Data Processors are available from the Data Controller or may be requested by sending a communication to the contact details indicated in paragraph a) above.
   With regard to the purposes described in point b.2., the data may also be communicated to the joint controllers listed below: ADLM S.r.l. a socio unico privacy@accademiadellusso.com, Scuola Radio Elettra S.r.l. privacy@scuolaradioelettra.it, Università Telematica eCampus privacy@uniecampus.it.
   This information notice is provided for Studium domains only and not for other websites that may be accessed by the user via links. The presence of this notice assures the user that they are within a Studium domain or that of authorized Data Processors.


5. Transfer of data outside the European Union. Pursuant to Art. 45 GDPR, personal data may be transferred to a third country or an international organization if the European Commission has decided that the third country or international organization ensures an adequate level of protection or provides other appropriate safeguards as provided by the GDPR.


6. Methods of processing. In relation to the purposes indicated above, the processing of your personal data will be carried out using paper-based, IT or telematic means suitable for storing, transmitting and sharing such data. Studium informs that the data provided are processed by authorized personnel using both manual and computerized methods, through their inclusion in archives and databases. The Data Controller and Data Processors implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in compliance with applicable legislation, in order to guarantee the security and confidentiality of your data.


7. Retention period of personal data. Within the scope of the purposes indicated above, your personal data will be retained for the duration of the contract and for the ten years following the period during which the Data Controller is subject to retention obligations for tax, contractual or other purposes imposed by law or regulation or for the purposes already indicated. After this period, unless expressly confirmed by the data subject, the data will be deleted.
   By way of example and not limited to:
   for commercial purposes, taking into account the legitimate interest of the Data Controller in retaining the collected personal data to offer goods and services deemed to be of interest to you, the personal data will be retained in a form allowing identification of data subjects for a period necessary to achieve such interest and specifically until the conclusion of the contract;
   for compliance with legal or contractual obligations, up to ten years after the expiration of the contract and in any case for the period required by law or arising from the contract;
   in the event of disputes, for the period necessary for judicial and/or extrajudicial defens