1.1. We collect and use your personal data when you:
- use our social media;
- communicate with us by social media.
Who are we?
|Name||Ipolo Europeo della Conoscenza – Istituto Comprensivo Di Bosco Chiesanuova|
|Address||Località Carcaro 26A, Bosco Chiesanuova 37021, Italy.|
|Company number||+39 3482681898|
2.3. In certain circumstances, third parties may (also) be responsible for the processing of your personal data. For example, if you click on a link and leave our website or if you use our social media and have your own social media account. We have no control over the data social media providers collect about you. In that case, we recommend that you consult the privacy policies of these third parties.
Which personal data do we process and why?
We will only process your personal data for a specific purpose and to the extent permitted by law. We further explain below in which cases we collect and use your personal data. If we do not receive your personal data directly from you, we will also inform you of this below.
3.1. When you use our social media
3.1.1. When you use our social media and/or communicate with us via social media, we collect and use the following personal data.
|What personal data?||Why?||Legal basis?|
|Name, username, e-mail, and other contact details are collected when you interact with our social media. If you ask us questions or send us requests, the content of those questions or requests is collected, also the subject of your message, as well as possible additional information necessary in order to answer your question or deal with your request.||In order to carry out the project objectives and to answer your questions or respond to your requests.||We rely on our legitimate interest in helping you out with your request and on our legitimate interest to carry out the project activities.|
3.1.2. When you use social media accounts to interact with us you also necessarily interact with the social media service providers, i.e. Facebook, Twitter, or LinkedIn. In such cases, these third parties will also process your data under their own conditions. We do not have any influence on this processing. Please refer to the privacy policies of those third parties to have more information on how they process your personal data.
With whom do we share your personal data?
4.1. In principle, we do not share your personal data with anyone other than the persons who work for us, as well as with the suppliers who help us process your personal data and partners of the LET’S CARE consortium, in so far as this is needed to fulfil the purposes of the processing. Anyone who has access to your personal data will always be bound by strict obligations to keep your personal data safe and confidential.
4.2. We do not intent to transfer your personal data outside the European Economic Area (EEA) (the European Economic Area consists of the EU, Liechtenstein, Norway and Iceland). If a transfer were to take place, we will take sufficient safeguards to protect your personal data during the transfer (e.g. by entering into an agreement based on standard data protection clauses approved by the European Commission).
Hoe long do we keep your personal data?
5.1. Your personal data will only be processed for as long as necessary to achieve the purposes described above or when we have asked you for your consent until you withdraw your consent. In this article, we provide you with the information you need to evaluate how long we will keep your personal data identifiable. The LET’S CARE project has a legal obligation to keep your personal data until 5 years after the end of the project. The project ends in September 2025, which means that your data will at least be kept until September 2030.
5.2. As a general rule, we will de-identify your personal data when it is no longer needed for the purposes described above or when the retention period, as explained in this Article , has expired. However, we cannot delete your personal data if there is a legal or regulatory obligation or a court or administrative order preventing us from doing so.
5.3. We retain personal data collected through our social media as long as necessary to protect the legitimate interests stated in Article 3.3 and then thereafter until we no longer have legal obligations to keep the data.
5.4. All personal data we collect through our interactions with you through email or other digital communication channels will be retained for as long as necessary to communicate with you, but also to maintain a historical record of our communications. This allows us to return to previous communications when you come back to us with new questions, requests, comments, or other input. Thereafter we will keep the data until we no longer have legal obligations to keep the data.
How do we keep your personal data secure?
6.1. The security and confidentiality of the personal data we process is very important to us. That is why we have taken measures to ensure that all personal data processed is kept secure. These measures include technical and organizational measures to protect our infrastructure, systems, applications and processes.
Your rights regarding your personal data
7.1. When we collect and use your personal data, you will enjoy a number of rights that you can exercise in the manner described below. Please note that when you wish to exercise a right, we will ask you for proof of identity. We do this to prevent a personal data breach (e.g. because an unauthorized person is impersonating you and is exercising a right in your name).
7.2. You have the right to access your personal data, which means that you may ask us to provide you with information about the personal data we hold about you. You may also request a copy of your personal data. Please note, however, that you must indicate for which processing activities you wish to have access to your personal data.
7.3. You have the right to request that we correct your personal data if you can demonstrate that the personal data we process about you is inaccurate, incomplete, or out of date. Please indicate the context in which we use your personal information (e.g., to respond to a request), so that we can review your request quickly and accurately.
7.4. If we ask your consent to collect and use your personal data, you have the right to withdraw this previously given consent.
7.5. You may ask us to erase your personal data if these personal data are no longer necessary for the purposes for which we collected them, if their collection was unlawful or if you have successfully exercised your right to withdraw your consent or your right to object to the processing of your personal data. When either of these circumstances applies, we will erase your personal data immediately, unless legal obligations or administrative or judicial orders prohibit us from deleting your personal data.
7.6. You may ask us to restrict the processing of your personal data:
- during the time we review your request for correction of your personal data;
- during the time we review your objection to the processing of your personal data;
- when such processing was unlawful, but you prefer a restriction to erasure; and
- when we no longer need your personal data, but you need them for the establishment, exercise, or defense of any legal action.
7.7. When we process your personal data on the basis of our own legitimate interests, i.e. you have not given us consent and we do not need them for the performance of a contract, nor to comply with legal obligations, you have the right to object to our processing of your personal data. If our interest relates to direct marketing, we will grant your request immediately. For other interests, for example our security interests, we ask you to describe your specific circumstances that give rise to a request. Then we must balance your circumstances against our interests. If this balancing test results in your circumstances outweighing our interests, we will cease processing your personal data.
7.8. If we have collected your personal data on the basis of your consent or because they were necessary for the performance of a contract with you, you have the right to obtain a copy from us in a structured, widely used and machine-readable format. However, this right only applies to personal data that you have provided to us.
7.9. If you wish to exercise any of these rights, we ask you to send an email to europole(at)europole.org.
7.10. The above rights may be subject to certain legal conditions. A request must clearly indicate and specify which right you wish to exercise. Always indicate the context in which we have obtained your personal data so that we can handle your request quickly and carefully. Your request must also be dated and signed. If we have any doubts about your identity, we may ask you to prove your identity, for example by providing a copy of the front of your valid identity card. You can rest assured that we will not interpret an e-mail from you, indicating that you wish to exercise a right, as your consent to the processing of your personal data that goes beyond what is necessary for the processing of your request. We will immediately inform you of the receipt of this request. If the request turns out to be well-founded, we will inform you of this as soon as possible and no later than 30 days after receipt of the request.
7.11. If you make the same request repeatedly and clearly cause inconvenience, we may refuse these successive requests or charge you an administrative fee to cover the costs. We may also deny you the right of access to your personal data or grant your request only partly, if such access could cause disproportionate harm to the rights and freedoms of others, including ours.
7.12. If you have a complaint about the processing of your personal data by us, you can always contact us at the e-mail address mentioned in Article 7.10. If you are not satisfied with our response, you may lodge a complaint with the competent data protection authority, i.e. the Italian Data Protection Authority, or of the Member State of your habitual residence or the place of the alleged infringement.
Do you have any questions?
9.1 Should you have any further questions about the processing of your personal data, please do not hesitate to contact us by e-mail | europole (at) europole.org