Subject: Information document regarding data protection laws and the protection of privacy.
The references to the “treatment” of personal data refer to:
Purpose: The purpose of these laws is to protect the personality and fundamental rights of the persons whose data are being processed.
Scope: data processing of natural and legal persons, in the context of the normal activities of an organization that provides training courses services;
Definitions and Meaning:
Personal data processing means any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, the storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction .
HRV.SWISS in its capacity as Data Controller, in the person of its pro tempore legal representative, pursuant to and for the purposes of Article 13 of EU Reg. No. 2016/679, hereby
the natural person who operates on behalf of the “Customer” (as defined in the Contract) and is expressly involved in the stipulation / execution of the Contract of which this information constitutes an inseparable attachment, later defined as Interested, which, in relation to the Contract for the performance to the Customer of services of HRV.SWISS or of subsidiaries / associates or of commercial partners of which this Information is an inseparable attachment, will need to process your data based on what is illustrated in the following articles:
1. DATA OBJECT OF PROCESSING AND PURPOSE OF DATA PROCESSING
The personal data processed are common personal data, collected in the manner and for the activities provided for in the Contract and / or through agents / employees / collaborators of HRV.SWISS and / or in any case provided by you voluntarily and in association with this information. The treatment will be based on the principles of correctness, lawfulness and transparency, protecting your privacy and your rights, in accordance with company regulations, as well as technical procedures on the use and access to data of company electronic tools, e-mail and the Internet.
The processing of personal data is aimed at fulfilling the obligations and exercising the customer’s specific rights for the purpose of fulfilling the obligations deriving from the law, the contract, uses or customs, and, by way of example, it will be carried out for the following purposes:
2. LEGAL BASIS OF THE PROCESSING, OBLIGATORY OR OPTIONAL NATURE OF THE PROVIDING OF DATA AND CONSEQUENCES OF ANY REFUSAL
The provision of your personal data is mandatory for the provision of the requested services as well as for the fulfillment of obligations under the applicable laws and for the protection of the legitimate interest of HRV.SWISS to defend its rights, pursuant to and for the purposes of art. 6, paragraph, 1, lett. b), c) and f) of the EU Regulation. As for the possible processing of so-called data details, it will be carried out, only where strictly necessary, in the cases provided for by art. 9, paragraph 2, lett. b), c) and g) of EU Regulation n.2016 / 679. Your refusal to provide data for the purposes identified above will make it impossible to enter into and subsequently manage the contractual relationship for the services requested.
You can instead choose optionally and additionally, with respect to the consents necessary for the provision of the requested services, pursuant to and for the effects of art. 6, paragraph 1, lett. a) and f) of the EU Regulation, whether to also authorize the processing for the purposes of commercial proposals and information by HRV.SWISS.
The lack of consent, where required, will make it impossible to process the data for the individual purposes for which it is not provided.
3. METHODS OF DATA PROCESSING
The processing of all acquired data will be carried out using paper and IT tools in compliance with the provisions on the protection of personal data and, in particular, with the security measures, pursuant to art.32 of the EU Regulation, with the compliance with any precautionary measure that guarantees its confidentiality and security.
4. DATA RETENTION PERIOD
All the data covered by this information will be processed and stored by the Data Controller and by the persons appointed as Data Processors, Internal Referrals and Authorized to the treatment, in compliance with the principle of proportionality, for the period of time strictly necessary for each identified purpose, assessed in 24 months from the last contact or from the termination of the reference contractual relationship, always without prejudice to the retention obligations for additional periods, foreseen by the penal, fiscal and financial legislation (which foresee a maximum time of 10 years from their acquisition and / or from the termination of the contract) and / or due to requests from the competent Authorities.
5. COMMUNICATION SCOPE AND SPREADING OF PERSONAL DATA
Your personal data may be communicated, in close relation to the purposes indicated above and the consents given, to the following subjects or categories of subjects, both in Switzerland, both in the European Union and outside of these contexts:
All treatments carried out by third parties with respect to the Data Controller will be duly authorized by the Data Controller in the forms of law, and will take place in compliance with the regulations on security and privacy. Your personal data will not be disclosed, unless required by a law or regulation or by community legislation.
6. SECURITY MEASURES
Your data are processed in a lawful and correct manner, by adopting the appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of data. HRV.SWISS, specifically, has implemented suitable measures to protect your personal data from accidental loss and from unauthorized access, use, modification and disclosure.
In the unlikely event that HRV.SWISS believes that the security of your personal data, in possession or under the control of the company, has been or may have been compromised, the same will inform you of the incident in the manner prescribed by current law, using the methods prescribed by it.
7. DATA CONTROLLER, DATA PROTECTION OFFICER AND DATA PROCESSING OFFICERS
The Data Controller is HRV.SWISS Sagl (hereinafter also referred to as “HRV SWISS”) with registered office in Lugano (Switzerland), Via al Nido 11, CH-6900 Lugano (Canton Ticino) – VAT number CHE-463.882.940 – VAT, registered in the Commercial Register of the Canton Ticino carrying CH-501.4.020.903-2.
The Data Protection Officer (DPO) to contact, for the exercise of your rights, is Alberto Ciardelli, who can be contacted via e-mail address email@example.com, and / or at the contact details indicated over time by the Owner.
The updated list of all Data Processors appointed over time is available at the Data Controller’s registered office and will be provided upon written request, in the forms provided for by law.
8. RIGHTS RECOGNIZED BY THE INTERESTED PARTY
At any time, you can exercise your rights towards the Data Controller or Data Processor pursuant to Chapter III (articles 12-22) of the Regulation.
In particular, as an interested party, you have:
e.. the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or agents.
The rights summarized above are exercised with a request addressed without formalities to the Data Controller, the DPO and / or the Manager, to whom appropriate feedback is provided without delay. The request addressed to the Data Controller, the DPO or the Manager can also be sent by registered letter, fax or e-mail.
The interested party can request a copy of the personal data being processed by contacting the offices of the data controller or sending the relevant request to the email address firstname.lastname@example.org.
The interested party, through the aforementioned inbox, can also request the data controller to correct or delete personal data, as well as oppose their processing or request their limitation (all compatibly with the purposes of the processing itself).
The exercise of the rights referred to in the previous points is not subject to any form constraint and is free of charge.
HRV.SWISS is required to provide an answer within one month of the request, extendable up to three months in case of particular complexity of the request.
9. REPRESENTATIVE OF THE DATA CONTROLLER NOT ESTABLISHED IN THE EUROPEAN UNION
HRV.SWISS Sagl with registered office in Lugano (Switzerland), Via al Nido 11, CH-6900 Lugano (Canton Ticino) – VAT number CHE-463.882.940 – VAT, registered in the Commercial Register of the Canton Ticino reporting CH-501.4.020.903- 2 appointed Alberto Ciardelli, representative of the data controller not established in the European Union, domiciled at the registered office of HRV.SWISS reachable by email at email@example.com