ESN Italy is now GDPR-friendly!

 

INFORMATION NOTICE ON PERSONAL DATA PROCESSING

Erasmus Student Network Italy (hereinafter "ESN Italia"), based at ESN - A.S.S.I. Parma ℅ International Teaching Exchange Service, via Università, 12 43100 Parma (info@esn.it), as data controller, informs you that, pursuant to art. 13 and following of the Regulation (EU) n. 2016/679 (hereinafter, "GDPR") your data will be processed in the manner and for the following purposes:

 

Object of the Treatment

The data you may provide (name and surname, postal address and mobile phone) are taken into account with regard to the activities, associated companies and external subjects (listed here): ESN Alumni Italia and Erasmus Student AISBL Network and our commercial and  institutional partners ( henceforth classified as "the partners").

 

Method of treatment

The processing of your personal data is carried out by means of the operations indicated in art. 4 of the Privacy Code and art. 4 n. 2) GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic and / or automated processing.
 

The treatment will be handled in paper form or by electronic means and will be carried out in such a way as to guarantee the security and confidentiality of the data in accordance with the legislation in force, in compliance with the principles of correctness, lawfulness of dats processing.

The information will not be distributed and/or disclosed to third parties and will be recorded on a single physical server located in Italy. The data will be kept until you are registered or will use the services of our Association and for a period of one year.

 

Communication of data

Without the necessity of an expressed consent (art. 6 lett. b) and c) GDPR), ESN Italy might communicate its data for the purposes referred to in art. 2.A) to Supervisory Bodies, Judicial Authorities, insurance societies for the purpose of performing insurance services, as well as those persons to whom the communication is legally mandatory in order to fulfil such purposes. Those persons should process data as autonomous holders of data processing.

Data transfer

Personal data are kept on one single server situated on the Italian soil.

Rights of the person involved

As such, the person involved has the rights exposed in articles 15-22 GDPR. In particular, the rights of:

  1. obtaining the confirmation of the existence or not of personal data regarding your person, even if they have not been registered yet, and their communication in an intelligible form;
  2. obtaining the indication of a) the origin of personal data; b) purposes and modes of data processing; c) the logic applied in case of data processing realized with the help of electronic means; d) the identity of the owner, the responsible persons and the representative designated according to art. 3, paragraph 1, GDPR; e) the persons or the categories to whom personal data might be communicated or might become aware of them as designated representative within the State, as responsibles or as individual in charge;
  3. obtain: a) the update, rectification or, when there is interest, integration of data; b) the cancellation, transformation into anonymous form or the blockage of the data processed in the breach of law, including those which do not need to be preserved in relation to the purposes for which they had been collected or processed; c) the attestation that the operations described in a) and b) are known, also for what concerns their content, by those to whom data had been communicated or spread, except the case in which such fulfillment is impossible or involves a manifestly excessive use of means if compared to the protected right;

Where applicable, the person has also the rights exposed in articles 16-21 GDPR (Right of reply, right to be forgotten, right to treatment limitation, right to data portability, right to object), as well as the right to complain to Competition Authority.

 

Operating rights procedure

At any time you might ask by post or email to the owner of data treatment the modification or cancellation of your data. Your request should be fulfilled within 15 days. Any cause of insatisfaction or protest might be reported to the Competition Authority of the protection of personal data Piazza di Monte Citorio n. 121 00186 Roma tel. 06.696771. E-mail: garante@gpdp.it