INFORMATION ON THE PROCESSING OF PERSONAL DATA – EU DATA PROTECTION REGULATION 679/2016.
IPE business school Foundation, the data controller, in compliance with legislative decree 196/2003 as amended by legislative decree 101/2018 (hereinafter ‘privacy code’) and regulation (eu) 2016/679 (hereinafter ‘gdpr’), provides the due information regarding the processing of personal data acquired through the consultation of the website. The information is to be considered valid only for this website and not for other websites that may be consulted by the user via links. The owner is not to be considered in any way responsible for the websites of third parties.
The information is also based on recommendation no. 2/2001 that the european authorities for the protection of personal data, brought together in the group established by art. 29 of directive no. 95/46/ec, adopted on 17 may 2001 to identify certain minimum requirements for the collection of personal data online, and, in particular, the methods, timing and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purposes of the connection.
The information is also based on the provisions of directive 2002/58/ec, as updated by directive 2009/136/ec, on the subject of cookies, and on the provision of the guarantor for the protection of personal data ‘identification of the simplified procedures for information and acquisition of consent for the use of cookies’ of 8 may 2014.
This information notice is intended as a disclosure pursuant to articles 13 and 14 of the gdpr
IPE business school Foundation, offers users the opportunity to interact with its website in order to consult or use its services, accessible through the address www.ipebs.it corresponding to the home page of the official website of the owner.
TYPE OF DATA PROCESSED
– Navigation Data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the uri (uniform resource identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) And other parameters relating to the user’s operating system and its environment. This data is used for the only purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation, and is deleted immediately after processing.
The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site: apart from this eventuality, the data on web contacts do not persist for more than seven days.
– Data Provided Voluntarily By The User
The optional, explicit and voluntary sending of electronic mail to the addresses indicated in the various channels of access to the site and the completion of the formats (masks) entail the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data included in the message.
In this case, the data acquired will be processed exclusively for the purpose of responding to the user’s requests, for example, on the use of a service, on problems in connecting to the site, on problems in navigating the site, on problems in accessing the site’s services, or on problems in accessing the user’s account.
– Obligation Or Faculty To Provide Data
Apart from that specified for navigation data, the user is free to provide the personal data indicated in the request forms or in any case indicated in contacts with IPE business school Foundation for the purpose of sending communications or any documentation.
Failure to provide the data (e.g. Personal details, e-mail address, telephone number) necessary to provide the service may make it impossible to obtain what has been requested.
Interested parties are in any case reserved the right to request cancellation from the e-mail communication services at any time.
Purposes of the processing and legal basis
Purpose
To provide the goods and/or services requested by the user, manage the contracts performed by the user, execute the related administrative, accounting, tax and legal fulfillments, as well as process requests forwarded by the user
Take over your experience of using our platforms, products and services that we offer and ensure the correct functioning of the web pages and their contents.
To associate the personal data that you provide to IPE business school Foundation or to third parties in the context of other initiatives with the personal data that IPE business school Foundation acquires as a result of your registration on this site or its use.
Informing you of commercial initiatives, using tools, including automated ones, relating to promotions and/or offers for which you may be entitled to benefit, in the interest of the owner
Communicating your data for commercial and/or promotional purposes to third-party companies and/or with which IPE business school Foundation may enter into partnership agreements: social networking and interactive platforms, as well as telecommunications platforms
Carry out profiling activities, i.e. the analysis and processing of information relating to the user, his/her preferences, habits, consumption choices and/or browsing experiences. This activity is also carried out through the use of technologies such as cookies (for more information see the ‘cookie policy’ section of this policy).
Legal Basis
Processing operations carried out for these purposes are necessary for the performance of contractual obligations and do not require the specific consent of the data subject.
The processing operations put in place for these purposes are based on a legitimate interest of the controller
The processing operations put in place for these purposes are based on a legitimate interest of the controller
The processing operations put in place for these purposes are carried out with the specific consent provided by the user, with the exception of commercial communications relating to products and/or services similar to those already purchased and/or subscribed to by the user, for which the processing is based on a legitimate interest of the data controller, in respect of which the user may, however, always exercise his/her right to object
Processing for these purposes is carried out with the specific consent provided by the user.
The processing operations carried out for these purposes are carried out with the specific consent provided by the user, with the exception of an activity of analysis of elementary information relating to the user’s consumption preferences.
- Place And Methods Of Data Processing
The processing of data connected to the web services of the site takes place mainly at the offices of the IPE business school foundation and, if necessary, with the collaboration of other subjects specifically designated as data processors. The data processing is carried out for the time strictly necessary to achieve the purposes, also through the use of automated tools observing the security measures aimed at preventing the loss of data, illegal or incorrect use and unauthorised access.
The data are processed exclusively by staff, mainly technical, authorised to process the data or by any persons authorised for occasional maintenance operations, in accordance with the principles of correctness, lawfulness, transparency, relevance and not excessive in relation to the purposes of collection and subsequent processing.
The personal data of users requesting documents or information material (newsletters, answers to queries, deeds and measures, etc.) Are used only to perform the service or provision requested and are communicated to third parties only if necessary for that purpose (dispatch services and the like).
Personal data will therefore also be processed using automated procedures in the manner and to the extent necessary to pursue the aforementioned purposes, guaranteeing the security and confidentiality of the data.
Storage period
The data will be retained for a period of time not exceeding the achievement of the purposes, (‘principle of limitation of retention’, art.5, of eu regulation 679/2016) or in accordance with the deadlines provided for by legal regulations, provided that it is not necessary to retain the data further in order to defend or enforce a right or to comply with any further legal obligations or orders of the authorities.
Data Recipients
Within the scope of the purposes indicated above, your data may be communicated to:
– IPE business school Foundation, which carries out part of the processing activities and/or activities connected and instrumental to the same on behalf of the data controller, and which will be appointed for this purpose as data processors pursuant to article 28 of the gdpr;
– other third parties who carry out part of the processing activities and/or activities connected and instrumental to the same on behalf of the data controller. These parties will also be appointed as data processors pursuant to article 28 of the gdpr;
– individuals, employees and/or collaborators of the controller, who have been entrusted with specific and/or multiple processing activities on your personal data. Such individuals have been given specific instructions on the security and proper use of personal data and are defined as the persons authorised to process personal data under the direct authority of the controller or the processor.
Transfer of data abroad
IPE business school foundation, may transfer your personal data to third parties located in countries outside the european union or the european economic area. In this circumstance, such third parties will be appointed as data processors pursuant to and for the purposes of article 28 of the gdpr and the transfer of your personal data to such parties, limited to the performance of specific processing activities, will be regulated in accordance with the provisions of chapter v of the gdpr.
Rights of the data subject
According to art. 15 et seq. Of the EU regulation, data subjects (natural persons to whom the data refer), may exercise their rights at any time and in particular the right to access their personal data, to ask for their rectification or restriction, their updating if incomplete or erroneous and their deletion if collected in breach of the law, as well as to object to their processing, subject to the existence of legitimate reasons on the part of the data controller.
You may exercise your rights at any time by sending
– a registered letter with return receipt to fondazione ipe business school – via riviera di chiaia n° 264, 80121 – napoli (na)
– an email to privacy@ipeistituto.it
Please address all communications to the attention of the legal office rerpresented by attorney Lucio Spina.
Contact details of the data controller
The data controller of the processing of personal data carried out through the website is IPE business school foundation, located in via riviera di chiaia, 264, 80121 Naples (na).
