Privacy Policy Scuola della Sicurezza

Information on the processing of personal data made pursuant to Art. 13-14 of Reg. (EU) 2016/679 GDPR (General Data Protection Regulation) and Art. 13 of Legislative Decree No. 196 of June 30, 2003 (Privacy Code)

1. Introduction

At Mega Italia Media Srl we are aware of the importance of protecting personal data and respecting the privacy of our users. Therefore, we handle all information provided to us with extreme care and ensure security and confidentiality when processing the personal information of our users.

This Policy describes how we handle personal information that we acquire - independently or through third parties - through the SCHOOL OF SAFETY website (https://www.scuoladellasicurezza.it) and applies to visitors/users of this site. It does not apply to information collected through channels other than this website. The purpose of this privacy policy is to provide maximum transparency regarding what information the site collects and how it uses it.

2. General Information

Users (hereinafter "data subjects" as defined in the GDPR and the Privacy Code) are informed of the following general profiles, which apply to all areas of processing:

  • all data are processed lawfully, fairly and transparently towards the data subject, in accordance with the general principles set forth in the GDPR and the Privacy Code;
  • we collect and process your data only for the purposes set out in this Policy or for the specific purposes already shared with you and/or about which you have given consent;
  • we aim to collect, process and use as little personal data as possible;
  • when we need to collect your personal data, we ensure that it is as accurate and up-to-date as possible;
  • if the personal data we collect is no longer needed for any purpose and we are not required by law to retain it, we will make every effort to delete, destroy, or anonymize it;
  • specific security measures are observed to prevent data loss, unlawful, or incorrect use, and unauthorized access;
  • your personal data will not be shared, sold, made available, or disclosed to parties other than those listed in the Notice.
  • Full details on each type of data collected are provided in the dedicated sections of this Privacy Policy.

3. Data collected and purposes

We inform you that the data that are collected in the ways indicated below will be processed with the support of paper means (registration forms, order forms, etc.), computer (management software, accounting, etc.) and telematics with logics of organization and processing strictly related to the purposes themselves and in any case in such a way as to ensure the security, integrity and confidentiality of the data themselves in compliance with the organizational, physical and logical measures provided for by the provisions in force. Where the person giving the data is under 16 years of age, such processing is lawful only if and to the extent that such consent is given or authorized by the holder of parental responsibility for whom the identification data and copies of identification documents are acquired.

3.1 NAVIGATION DATA

The computer systems and software procedures responsible for the operation of the above websites acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could - through processing and association with data held by third parties - allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation. The data could also be used to ascertain responsibility in case of hypothetical computer crimes against the site (legitimate interests of the owner).
The data are processed exclusively by in-house personnel, duly authorized and trained in the processing. Only in case of investigation may they be made available to the competent authorities. The data are usually kept for short periods of time, except for possible extensions related to investigation activities. The data are not conferred by the data subject but acquired automatically by the technological systems of the site.

3.2 Cookies

Cookies are text files stored on your computer or mobile device that are used by the websites above to make the experience more efficient for the user. In order to comply with the European Regulation, which requires that the "site visitor/platform user" expresses consent to the processing of personal data concerning him or her by a direct, explicit, unambiguous and distinguishable act even for so-called "technical cookies," we have created a "GDPR Cookie" form that provides all the technical mechanisms for the management and possible revocation of the consent granted under the new Regulation and offers greater levels of security of the cloud service. By acting on the form, the data subject is independently able to view the consents granted and, if necessary, to withdraw consent to one or more areas of cookie activity. For specific information on how we handle cookies you can consult our cookie policy on this page.

3.3 DATA COLLECTED WITH USER CONSENT AND PURPOSE OF PROCESSING

The optional, explicit and voluntary sending of personal data within the forms on the above site, expressly accepting the privacy policy, involves the subsequent acquisition of the name and email address of the sender, necessary to respond to requests, as well as any other personal data entered. The data may be accessed, only for maintenance purposes, by the company that manages the technological infrastructure and its appointees. The data will not be disseminated or transferred to countries outside the EU. The data collected will be processed with the following purposes:

3.3.1. - Contacts

This page - if any - allows the request for quotes and information and the request for subscription to promotional newsletters. This form requests a series of personal data aimed at being able to provide the requested information. The data are kept for times compatible with the specific purpose of collection. The provision of data referring to the mandatory fields is necessary in order to obtain a response. Failure to provide the data indicated as mandatory or consent will result in the impossibility of being able to access the various services.

3.3.2 - Order Confirmation

This page - if any - can be reached during the purchase process and allows those interested in the products and services offered by the site to register as customers and make the online purchase. Customers already registered to the site and in possession of their own username and password can proceed to purchase by accessing from the Login box and retrieving all the data already previously entered. In the form proposed to new customers, a series of personal data are requested (Customer Category, Company Name, Sector, First Name, Last Name, Address, ZIP Code, Location, VAT or Tax Code, email, Telephone, Fax) and the interested party's choice of an individual and exclusive username and password. Registration is subject to acceptance of specific, free and informed consent and acceptance of the general conditions and terms of sale. Data are processed only by personnel duly authorized and trained in the processing. Data are kept for times compatible with current national administrative and fiscal regulations. The provision of data referring to mandatory fields is necessary in order to obtain a response. Failure to provide the data indicated as mandatory or consent will result in the impossibility of being able to make purchases, while the optional fields are aimed at providing the staff with additional elements useful to interpret the request.

3.3.3 - Course Demo Request

This service-if available-can be reached from a specific button on the presentation page of each online course. By clicking on the button "Try Course Demo," "Request Demo," or "Try Free Course Demo," the interested party is directed to a page where he/she can enter his/her personal data to request activation of a free demo of one or more courses. Registration is subject to acceptance of specific, free and informed consent. Data are kept for times compatible with current national administrative and fiscal regulations. The provision of data referring to mandatory fields is necessary in order to obtain a response. Failure to provide the data indicated as mandatory or consent will result in the impossibility of being able to make purchases, while the optional fields are aimed at providing the staff with additional elements useful to interpret the request.

3.3.4 - Entering Comments

If the service is active on the specific site, users can enter their own comments on the pages of the various courses/products/services presented by the site, either by using their personal data of username and password previously created (on the "Contact Us" page, or "Order Confirmation"), or by extemporaneously entering a nickname and an email for the sole purpose of receiving any responses exclusively aimed at entering comments. The inclusion of comments is subject to the acceptance of specific, free and informed consent. Data are processed exclusively by personnel duly authorized and trained in the processing. Depending on the type of user, data are kept for times compatible with the specific purpose of collection. Failure to provide the indicated data or consent will result in the impossibility of being able to enter a course commentary.

3.3.5 - Entry of data of the trainees

At the end of the successful purchase procedure, the customer who is making the purchase of the course(s) - and who has already logged in to the site with his or her own exclusive access credentials consisting of username and password - must enter the data of all those who are to carry out the course, or courses of which he or she has already directly acquired specific consent for use. Depending on the type of course purchased and used, the participant's data are kept for times compatible with the specific purpose of collection. Failure to provide the data means that the course(s) cannot be activated.

3.3.6 - Contact the Tutor

On this page - if available - the user can request assistance and information either through an immediate chat with a company operator in text mode, or by sending a communication. In the first case, personal data will be transferred verbally; in the second case, the user's identifying data (first name. Last name, email, phone) is requested in order to be able to respond in a timely manner to the requests forwarded by the interested party. The data are kept for times compatible with the purpose of collection.

4. Categories of recipients

Without prejudice to communications carried out in fulfillment of legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes specified above to the following categories of interested parties: Companies or professional firms that provide consulting or collaboration in accounting, tax, legal, commercial; Public administrations for the performance of institutional functions within the limits established by Law; to third party service providers to whom the communication is necessary for the fulfillment of the services covered by the contract.

5. Retention period

Mandatory data for contractual and accounting purposes are kept for the time necessary to carry out the business and accounting relationship. The data of those who do not purchase or use products/services, although they have had previous contact with representatives of the company, will be immediately deleted or processed anonymously, where their retention is not otherwise justified, unless the informed consent of the data subjects regarding a subsequent commercial promotion or market research activity has been validly acquired.

6. Legal basis

The provision of data is mandatory for all that is required by legal and contractual obligations, and therefore any refusal to provide it in whole or in part may result in the inability to provide the services requested.  The company processes the optional data of users on the basis of consent, i.e. through explicit approval of this privacy policy and in relation to the methods and purposes described above.

7. Rights of the data subject

Pursuant to European Regulation 679/2016 (GDPR) and national legislation, the data subject may, in the manner and within the limits provided by the current legislation, exercise the following rights:

  • request confirmation of the existence of personal data concerning him/her (right of access);
  • know its origin;
  • receive intelligible communication of it;
  • have information about the logic, methods and purposes of processing;
  • request the updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the purposes for which they were collected;
  • in cases of consent-based processing, to receive their data provided to the data controller, in a structured, machine-readable form and in a format commonly used by an electronic device;
  • the right to file a complaint with the Supervisory Authority.

The exercise of your rights may be done by sending a request by email to the Data Controller.

8. Transfer of Personal Data outside the EU area

The management and storage of Personal Data will take place on servers located within the European Union of the Data Controller and/or duly appointed third party companies. Data will not be transferred outside the European Union. It is in any case understood that the Data Controller, should it become necessary, will have the right to move the location of the servers to countries outside the EU. In this case, the Data Controller assures as of now that the transfer of data will take place in accordance with the applicable legal provisions by entering into agreements, if necessary, that guarantee an adequate level of protection.

9. Data controller and contacts

The Data Controller is the undersigned Company Mega Italia Media srl, in the person of its legal representative, who can be contacted at the following addresses: tel. 030/2650661 - email privacy@megaitaliamedia.it, which can be contacted to exercise all the rights provided by the GDPR and the Privacy Code (right of access, rectification, cancellation, restriction, portability, opposition), as well as to revoke a previously granted consent; in case of failure to respond to their requests, data subjects may lodge a complaint with the Data Protection Authority.
The Data Protection Officer or Data Protection Officer (DPO) is Eng, Alessandro Ronchi, who can be contacted at: dpo@megaitaliamedia.it.

10. Policy Update

This Policy was last updated on May 22, 2018, and may be subject to periodic revision, including in relation to relevant legislation and case law. In case of significant changes will be given, for a reasonable time, appropriate evidence on the homepage of the site. However, the interested party is invited to periodically consult this policy.