NOTICE ON THE PROCESSING OF PERSONAL DATA pursuant to Articles 13–14 of EU Regulation 679/2016

INTRODUCTION

This privacy notice has been drawn up in accordance with Articles 13 and 14 of European Regulation 679/2016 (hereinafter “GDPR”) on the protection of natural persons with regard to the processing of personal data.

PRIVACY POLICY

This page describes how the website www.cscinovara.it is managed with regard to the processing of personal data belonging to users who visit the site and to those who interact with the web services accessible online via the aforementioned web address, which corresponds to the home page of the Consorzio Scuola Comunità Impresa website.
This privacy policy applies to the website www.cscinovara.it, and not to any other websites that the user may access via that address.
As a result of visiting this website, personal data relating to identified or identifiable individuals may be processed.

DEFINITIONS

To aid understanding of this document, the following definitions are provided (pursuant to Article 4 of the GDPR): – “treatment”: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
– “personal data": any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
– the so-called special categories of personal data, as referred to in Articles 9 and 10 of the GDPR (so-called sensitive data): personal data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, and data concerning a person’s health, sex life or sexual orientation. Specifically:
* “genetic data”: personal data relating to the inherited or acquired genetic characteristics of a natural person which provide unique information about that person’s physiology or health, and which result in particular from the analysis of a biological sample from the natural person in question;
* “biometric data”: personal data obtained through specific technical processing relating to the physical, physiological or behavioural characteristics of a natural person that enable or confirm their unique identification, such as facial images or dactyloscopic data;
* “health data”: personal data relating to the physical or mental health of a natural person, including the provision of healthcare services, which reveal information about their state of health.
– “Data controller”: a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;
– “Data controller”: a natural or legal person, public authority, agency or other body that processes personal data on behalf of the data controller;

DATA CONTROLLER

The data controller for users’ personal data is the Consorzio Scuola Comunità Impresa whose registered office is at Via Ricci, 14 – 28100 Novara (NO) and
Head office at Via F. Sesalli 7 – 28100 Novara (NO) –
Tax registration number/VAT number: 01720360039 – Telephone: 0321 399666 –
Email: info@cscinovara.it – PEC: csi.consorzio@pec.it.s

In accordance with Article 37 of the GDPR, the Data Controller has appointed a Data Protection Officer, who can be contacted at the following details:
E-mail: info@studionicolazzo.it – gdpr@viformiamo.it.
N.B.: The Data Controller uses the technical support services of Leonardo Web Srl, with registered office at Via Duccio Galimberti, 50 – 12030 Manta, and can be contacted by email at: contatti@leonardoweb.eu.

PLACE OF PROCESSING

Data processing in connection with the web services on this site takes place at the Data Controller’s premises mentioned above and is carried out solely by internal staff authorised to process data (in accordance with Article 29 of the GDPR).

PURPOSE

Any personal data provided by the user is used for purposes related to the provision of the service or the requested provision.
No data is disclosed or disseminated except for the purposes or public duties being carried out.

METHODS OF PROCESSING AND DATA RETENTION PERIOD

The data is processed using manual and automated methods for the period strictly necessary to achieve the purposes for which it was collected.

SAFETY MEASURES

Specific security measures are in place to prevent data loss, unlawful or improper use, and unauthorised access, including but not limited to:

• We monitor access to the website to check for any instances of password theft.
• We block IP addresses that make too many failed login attempts.
• We use antivirus and anti-malware software on the computers used for data processing.

LIST OF DATA PROCESSING ACTIVITIES CARRIED OUT BY THIS WEBSITE

“DATA PROVIDED BY THE USER VIA EMAIL” The optional, explicit and voluntary submission of personal data – including via email – to the addresses indicated on this website entails the subsequent and necessary collection of the sender’s email address – as well as any other data included in the message – in order to respond to enquiries. N.B.: Failure to provide such data may make it impossible to fulfil the request. Please check with the website administrator whether this is acceptable or if further processing is required “DATA PROVIDED BY THE USER VIA WEB FORMS”. The user is free to provide the data requested in the forms, and failure to provide such data may make it impossible to obtain what has been requested. The data contained in the forms is stored in the website’s database and made available for consultation in the website’s administration area to the staff responsible for processing for the time necessary to fulfil the requested service.

COOKIE POLICY

Cookie policy: This notice regarding the use of cookies on the website www.cscinovara.it This notice is provided to the user in accordance with the provisions of Directive 2002/58/EC (the so-called ePrivacy Directive) and subsequent amendments, as transposed by Article 122 of Legislative Decree 196/03, and EU Regulation 2016/679 (hereinafter the GDPR), specifically concerning the concept of consent referred to in Articles 4(11) and 7 and Recital 32, as most recently interpreted by the Guidelines 05/2020 on consent under Regulation 2016/679 adopted on 4 May 2020.

This privacy policy is drawn up and updated by Consorzio Scuola Comunità Impresa, the website operator and data controller for the personal data processed in connection with it, with its registered office at Consorzio Scuola Comunità Impresa
Registered office: Via Ricci, 14, 28100 Novara
Administrative offices and secretariat: Via F. Sesalli 7, 28100 Novara

Any enquiries regarding the use of cookies on this website may be sent to the following email address info@cscinovara.it
You may use the same contact details at any time to exercise the rights granted to you under the GDPR as a data subject (Articles 15 et seq. of the GDPR: for example, access to your data, erasure, updating, rectification, supplementation, etc.). Where the conditions are met, you may also lodge a complaint with the supervisory authority (the Data Protection Authority).

WHAT ARE COOKIES?

Cookies are small text files that the website you are visiting, or third parties, place and store on your device (whether it be a PC, smartphone, tablet, IoT device, etc.).

The browser you use to browse the web may store cookies and then send them back to the website that created them when you visit it again, thereby retaining a record of your previous interaction. The information encoded in cookies may include personal data, such as your IP address, username, unique identifier or email address, but may also contain non-personal data, such as language settings or information about the type of device you are using.

Cookies can be divided into two broad categories based on their purpose:

• Technical cookies. Technical cookies are necessary for the website to function properly and to enable navigation; without them, some pages may not display correctly, or it may be impossible to use certain services on the site. For example, a technical cookie is essential for keeping the user logged in throughout their visit to a website (so-called navigation or session cookies), or for storing language and display settings, and so on. These cookies are installed automatically when you access the website, and the user’s consent is NOT required for this to happen.
• Analytical cookies. Analytical cookies are used to assess the effectiveness of the website or to help measure its “traffic”, i.e. the number of visitors broken down by geographical area, time of day or other characteristics. For first-party or anonymised third-party analytics cookies, the user’s consent is NOT required. Non-anonymised third-party analytics cookies do not fall into this category, and for these it is always necessary to obtain the user’s consent.
• Profiling cookies. Profiling cookies are used to deliver advertising tailored to the preferences expressed by the user whilst browsing the website and may only be used with the user’s prior consent.

We can also categorise cookies according to the parties involved as follows:

• First-party cookies. These are cookies sent directly by the operator of the website you are visiting.
• Third-party cookies. These are cookies placed on your device by a website other than the one you are currently visiting.

Cookie settings

Name	Domain	Deadline	Type (Part 1/Part 3)	Category
YSC	youtube.com	Sessione	This cookie is set by YouTube to track views of embedded videos.	Third Parties
_pk_id	www.matomo.org	13 months	Used to store certain details about the user, such as the unique visitor ID	Third Parties
_pk_ref	www.matomo.org	6 months	Used to store referral information, specifically the referrer initially used to visit the website	Third Parties
_pk_ses	www.matomo.org	30 minutes	Short-term cookies used to temporarily store data relating to your visit	Third Parties

WHEN AND HOW IS THE USER'S CONSENT REQUIRED?

The user’s consent is not required for the installation of technical cookies.
There are no profiling or non-anonymised analytics cookies.
However, prior consent is required for the installation of non-anonymised profiling and analytics cookies.
For this reason, when you first visit the homepage (or any other page) of our website, a dedicated banner appears, allowing you to give your consent.

ENABLING AND DISABLING COOKIES

You can access the dedicated section at any time to change your cookie preferences, or to block or delete cookies from your device. To block or delete cookies from your device, please refer to the instructions provided by your web browser.
The links below explain how to disable cookies in the most popular browsers.
Internet Explorer™
Safari™
Chrome™
Firefox™
Opera™

For further information on the use of cookies, please visit the website www.allaboutcookies.org

RIGHTS OF DATA SUBJECTS

The data subject may exercise the rights set out in Articles 15–21 of the GDPR, namely: the right of access to data, the right to rectification and the right to erasure (‘right to be forgotten’) of such data, the right to restrict processing, the right to data portability, and the right to object to processing. Requests must be sent by email to info@cscinovara.it or to the certified email address csi.consorzio@pec.it.
The data subject may also contact the Data Protection Officer (DPO).

COMPLAINT TO THE DATA PROTECTION AUTHORITY

Where applicable, the data subject may lodge a complaint with the Data Protection Authority, which can be contacted via the website www.garanteprivacy.it