PRIVACY INFORMATION NOTICE

Dear User,
In compliance with Art. 13 of EU Regulation no. 679/2016, we would like to provide you with a simple and clear information notice on how we will process the personal data that you provide to us directly or which reach us through your browsing on our website.
To read the information notice on the processing of cookies, click here.

Data controller
The data controller is SMILING SERVICE SRL
Registered Office Corso Porta Mare n. 117, Ferrara

Contact point for information
privacy@smilingservice.it

1. WHAT IS THE LIFE CYCLE OF THE PERSONAL DATA?

Personal data subject to processing, processing aims and lawful conditions

Contacts and information
Which personal data do we process? Why do we process them (aims and lawful basis)?
What happens if we cannot process the data?

First & last name

Email

Telephone number

Consent of the data subject constitutes the grounds for processing in order to respond to his/her requests for information and clarifications on the services of the Data Controller Failure to provide data makes it impossible to fulfil the requests and respond to the data subjects
Who is made aware of my personal data? The personal data shall not be disclosed or communicated to third parties

Newsletter
Which personal data do we process? Why do we process them (aims and lawful basis)?
What happens if we cannot process the data?
Biographical data of the parent and email address The consent of the data subject constitutes the grounds for processing.
The data subject can subscribe to the newsletter service to be kept up to date on the Data Controller’s activities.
Provision of data is optional but failure to provide data prevents subscription to the newsletter.
Who is made aware of my personal data? The personal data shall not be disclosed or communicated to third parties without the consent of the data subject.

Information on future enrolments and Open days
Which personal data do we process? Why do we process them (aims and lawful basis)? What happens if we cannot process the data?

Biographical data of minors

Biographical data of the parent/guardian

Contact details

The grounds for processing are based on the consent of the data subject, in order to inform him/her and keep him/her up to date on the activities of the Data Controller and to inform him/her as to the opening period for enrolments of the Data Controller. Any refusal to respond, at the time of collecting information, or any denial of consent for processing data, implies that the Controller is objectively unable to fulfil the request of the data subject.
Who is made aware of my personal data? The personal data shall not be disclosed or communicated to third parties without the consent of the data subject.

An Extra Smile Service
Which personal data do we process? Why do we process them (aims and lawful basis)? What happens if we cannot process the data?
Biographical data of the parent and email address The consent of the data subject constitutes the grounds for processing.
The data subject can subscribe to the “An Extra Smile” newsletter to be kept up to date on events and places of interest in the city of Ferrara.
Provision of data is optional but failure to do so prevents subscribing to the “An Extra Smile” service.
Who is made aware of my personal data? The personal data shall not be disclosed or communicated to third parties without the consent of the data subject.

2. HOW ARE PERSONAL DATA PROCESSED?

The data are prevalently collected using electronic tools. Suitable security measures are observed in order to prevent the loss of data, illicit use or incorrect use and unauthorized access.

The Data Controller collects the personal data through relevant contact forms or they are sent to the Data Controller by email.

The Data Controller sends emails to users who have given their consent through a newsletter management service.
The personal data are processed prevalently within the territory of the European Union. We make use of the G Suite for Education service whose registered office is in the USA. Google Inc. has signed the Privacy Shield agreement that guarantees that the transfer of data to the USA and the processing thereof takes place with the same guarantees as provided by relevant European legislation.

3.WHO PROCESSES PERSONAL DATA?

The personal data are processed by internal subjects authorized to process data who have been trained for the purpose and are obliged to comply with professional secrecy and maximum confidentiality in relation thereto.
The personal data are processed by companies and professionals appointed to update and maintain the website, or who provide other services to the Data Controller, formally nominated as personal data processors and obliged to comply with technical and organizational security measures to guarantee the protection of the personal data of the data subjects.

4. THE DATA SUBJECT HAS THE RIGHT TO ASK THE DATA CONTROLLER FOR:

Access to his/per personal data
The data subject can obtain confirmation that the personal data concerning him/her are being processed and obtain more information on processing and a copy of the personal data.
Rectification of personal data
The data subject can request rectification in order to guarantee the correctness of the personal data processed.
Erasure of personal data

The data subject may obtain the erasure of personal data in the cases envisaged by Article 17 GDPR.

The data subject has the right to obtain transformation to anonymous format or the blocking of any data processed against the law according to Art. 7 of Italian Legislative Decree 196/2003.

Restriction of processing concerning him/her
The data subject may request the restriction of processing by objecting to erasure as they may be necessary for exercising or defending a right in legal proceedings.
With reference to personal data processed using automated methods, the right to the portability of data The data subject has the right to receive the personal data in a structured and commonly used format.

When consent constitutes the grounds for processing, the data subject has the right to revoke his/her consent at any time.

The data subject may object to the processing of personal data The data subject has the right to object at any time to direct marketing.

The data subject may request more information or exercise his/her rights envisaged by Articles 12-22 of EU Regulation no. 679/2016 by contacting the contact point of the Data Controller: email: privacy@smilingservice.it

The data subject has the right to make a complaint to the Supervisory Authority for the protection of personal data.
For further information on the right to make a complaint, please visit the following web page: https://goo.gl/GLbTN9