INFORMATION ON THE PROTECTION OF PERSONAL DATA

Information pursuant to Art. 13 and Art. 14 GDPR 2016/679


Identity and contact details of the Data Controller. The Data Controller is the single shareholder company Studium srl (hereinafter Studium) - Registered office Via Matera 18, 00182 Rome - Tax code and VAT no. 13343471002 – privacy@studiumeducation.it.

  1. Contact details of the data protection officer (RDP or DPO. The Data Protection Officer can be contacted at the following address: dpo@studiumeducation.it

  2. Purpose of the processing (Art. 6 paragraph 1 GDPR
    1. for the purposes of complying with legal requirements; in order to comply with obligations laid down by law, regulation, or EU legislation, or with the instructions of authorities or supervisory bodies; for the purposes of consulting this domain;
      for the purpose of managing the contractual and/or pre-contractual relationship with Studium: specifically, for the purpose of planning and providing personalised assistance services in the context of the preparation of university, school and vocational training examinations; purposes strictly connected and instrumental to the management of the aforementioned relationship (e.g. for the acquisition of pre-contractual information and to execute services and operations, as contractually agreed) for the pursuit of a legitimate interest of Studium: to carry out preliminary verifications related to the completion of the contract, to execute a request of the customer and/or potential customer; for quality control, research and development in order to improve products and services for communications of commercial information and advertising/information material regarding goods and services similar to those object of the contract, also by automated and conventional means, electronic mail and related web applications
    2. for the communication of commercial information and the sending of advertising/information material regarding goods and services, including those of subsidiary, parent, associated and co-partners companies, considered to be of your interest, both by automated and conventional means, electronic mail and related web applications, on the basis of your express consent;

  3. Categories of personal data. Your personal data provided at the time of filling in the forms at the collection points in the domain, directly or indirectly related to your relationship with Studium and necessary for the fulfilment of legal and contractual obligations, constitute the object of processing. The provision of data is not mandatory. Failure to provide the data, which are indispensable for registration, makes it impossible for the Data Controller, the Data Processors and the persons in charge of processing to carry out the processing operations and provide the relative services. Also subject to processing are the IP number and the type of browser used by you to connect to this domain (non-identifying data), which are automatically recorded by logical protection and control devices used solely for the purpose of verifying network traffic.
    Cookies
    Cookies are text files containing minimal information sent to your browser and stored on your computer each time you visit a website. At each link, the cookies send the information back to the referring site.
    No cookies are used for profiling the User.
    The site uses technical and 'third party' cookies.
    1. Technical cookies.
      According to the characteristics and use of cookies, two categories are distinguished.
      1. Strictly necessary cookies (session). These are cookies that are indispensable for the site to function correctly. Their deactivation could compromise the use of the site.
      2. . Analysis and performance cookies (analytics). These are cookies used to collect and analyse, in an anonymous way, the traffic and use of the site, making it possible, for example, to detect if the same user connects to the site at different times. They also make it possible to monitor the system and improve its performance and usage. These cookies can be deactivated without any loss of functionality.
    2. Third-party cookies.
      When visiting a website you may receive cookies managed by parties other ("third parties") than the owner of the site you are visiting. The management of information collected by "third parties" is governed by the relevant policies.
      Third-party cookies allow the third parties who use them to obtain more comprehensive surveys and statistics on users' browsing habits. Deactivation of such cookies can be done without any loss of functionality.
      Users may choose to enable or disable cookies by adjusting the settings on their browsers according to the instructions made available by the relevant providers.

  4. Recipients of personal data. Within the scope of the purposes indicated above, your data will or may be communicated to:
    banks and/or credit institutions in charge of settling payments in accordance with the agreed terms;
    insurance institutions for the settlement of any claims for damages;
    authorised bodies or organisations for the fulfilment of the relative obligations within the limits of the law;
    subsidiaries, parent companies, affiliates, co-processors and data processors in their capacity as natural or legal persons who, also under contract with Studium, provide specific processing services or carry out activities that are connected, instrumental or in support of those of Studium.
    The names of the External Data Processors and of the Joint Data Processors, if any, may be obtained from the Data Controller or may be requested by means of a communication to be sent to the addresses indicated in the paragraph referred to in point a) above.
    The information is provided for Studium domains and not for other websites that may be consulted by the user through links. The presence of the information notice assures the user that he/she is within a Studium domain or of the persons in charge.

  5. Transfer of data outside the European Union. Pursuant to Article 45 GDPR, the transfer of personal data may take place to a third country or international organisation if the Commission has decided that the third country or international organisation in question ensures an adequate level of protection or other appropriate safeguards provided by the GDPR.

  6. Modalities of processing. In relation to the above-mentioned purposes, your personal data will be processed using paper, computer or telematic means for storing, transmitting and sharing the data. Studium informs you that the data you provide will be processed by persons in charge of the processing, using manual, paper and computerised means, by means of their inclusion in both archives and databases. The Data Controller and the Processors implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in compliance with current legislation, so as to guarantee the security and confidentiality of your data.

  7. Storage period of personal data. Within the scope of the purposes indicated above, your personal data will be retained for the duration of the contract and for ten years following the period in which the Controller is subject to retention obligations for tax, contractual, or other purposes provided for by law or regulation or for the purposes already indicated, after which period, unless expressly confirmed by the data subject, they will be deleted.
    By way of example (but not limited to):
    for commercial purposes, taking into account the legitimate interest of the Data Controller to retain the personal data collected in order to offer goods and services deemed to be of interest to you, the personal data shall be retained in a form that allows the identification of the data subjects for a period of time necessary to achieve said interest and precisely until the completion of the contract;
    in order to fulfil legal or contractual obligations for up to ten years following the expiry of the contract and in any case for the period required by law or arising from the contract;
    in the case of disputes, for the period necessary for the judicial and/or extrajudicial defence and in any case for a period of at least ten years after the expiry of the contract and/or for the period necessary for the defence in court.

Rights of the data subject

You may at any time exercise the rights set forth in Articles 15 to 22 of the GDPR (e.g. request verification of the existence of your personal data; access to, rectification, deletion of or restriction of the processing of your personal data; portability of your personal data in a commonly used structured format; and request transfer to another Data Controller) by writing a registered letter to the following address: Studium srl a socio unico - Sede legale Via Matera 18, 00182 Roma - C.F. e P.Iva 13343471002 - or an e-mail to privacy@studiumeducation.it.
Pursuant to Article 8 GDPR, the processing of personal data of minors under 16 years of age is lawful. If the minor is under 16 years of age, such processing will only be carried out if consent is given or authorised by the Holder of parental responsibility.
The Data Controller shall make every reasonable effort to verify in such cases that consent is given or authorised by the Holder of parental responsibility over the minor, taking into account the available technologies.
You may lodge any complaints (Art. 77 GDPR) with the Privacy Guarantor and/or opposition to their processing (Art. 21 GDPR).