Pursuant to art. 13 of the European Regulation (EU) 2016/679 (hereinafter GDPR), and in relation to the personal data that the Data Controller will make available, we inform you of the following:

Data controller and person responsible for the protection of personal data

The data controller is the company +39 ITA ACADEMY S.R.L., with headquarters in Via Bruno Tosarelli, 25/B 40055 Castenaso (BO) – VAT number: 03561391206.

Purpose of data processing

The processing is aimed at carrying out pre-contractual measures requested by you or at the correct and complete execution of the contractual relationship finalized with you. Your data will also be processed for the purpose of:

fulfill legal obligations in the tax and accounting fields;

The personal data being processed have the nature of common personal data and may be processed by means of both paper and computer archives (including portable devices) and processed in ways strictly necessary to meet the purposes indicated above.

Legal basis of the processing

The owner processes your personal data lawfully, where the processing:

is necessary for the execution of a contract of which you are a party or for the execution of pre-contractual measures adopted upon request;
is necessary to fulfill a legal obligation incumbent on the Data Controller (obligations to keep tax and accounting documentation).

Consequences of failure to provide personal data

With regard to personal data relating to the execution of the contract of which you are a party or relating to the fulfillment of a regulatory obligation, failure to communicate personal data prevents the completion of the contractual relationship itself.

Data retention

Your personal data, subject to processing for the purposes indicated above, will be kept for the duration of the negotiations and, if stipulated, of the contract and, subsequently, for the time necessary for the limitation period to expire, as well as for the period in which the Data Controller is subject to conservation obligations for tax purposes or for other purposes established by law or regulation. In the event of a dispute, the data will be retained until the end of the dispute.

Data communication

Your personal data may be communicated to:

consultants, accountants or lawyers who provide functional services for the purposes indicated above;
banking or insurance institutions that provide functional services for the purposes indicated above;
subjects who process data in compliance with specific legal obligations;
IT and storage service providers (cloud and backup provider)
Judicial or administrative authorities, for the fulfillment of legal obligations (for example Revenue Agency).

Profiling and Dissemination of data

Your personal data is not subject to dissemination or any fully automated decision-making process, including profiling.

Rights of the interested party

The rights recognized to you by the GDPR include those of:

ask the Data Controller for access to your personal data and information relating to them; the rectification of inaccurate data or the integration of incomplete data; the deletion of personal data concerning you (upon the occurrence of one of the conditions indicated in art. 17, paragraph 1 of the GDPR and in compliance with the exceptions provided in paragraph 3 of the same article); the limitation of the processing of your personal data (in the event of one of the hypotheses indicated in art. 18, paragraph 1 of the GDPR);
request and obtain from the Data Controller – in the cases in which the legal basis of the processing is the contract or consent, and the same is carried out by automated means – your personal data in a structured and machine-readable format, also for the purpose of communicating such data to another data controller (so-called right to portability of personal data);
object at any time to the processing of your personal data in the event of particular situations concerning you;
revoke consent at any time, limited to cases in which the processing is based on your consent for one or more specific purposes and concerns common personal data (for example date and place of birth or place of residence), or particular categories of data ( for example data revealing your racial origin, your political opinions, your religious beliefs, your health or sexual life). The processing based on consent and carried out prior to the revocation of the same, however, retains its lawfulness;
propose a complaint to a supervisory authority (Authority for the protection of personal data – www.garanteprivacy.it).