Privacy Notice on the Processing of Personal Data

Dear User,

In compliance with the provisions of Articles 12 and following of Regulation (EU) 2016/679 (“GDPR”), we wish to provide you with the following information regarding the processing of your personal data by A21CONSULTING:

1 – CATEGORIES OF PERSONAL DATA.

The undersigned company collects the following categories of personal data: identifying data; professional contact data and/or data possibly related to your employment position within the final Client company; other data that you may have shared during interactions in training activities.

2 – PURPOSE AND LEGAL BASIS OF THE PROCESSING.

The data collected will be processed in order to enable you to participate in the training, by identifying you and recording your attendance, as well as subsequently producing certificates and, if applicable, recognizing training credits. The processing is therefore based on the legitimate interest of A21CONSULTING to properly fulfill the consultancy contract concluded with the Client company at which you work or with which you collaborate. The legitimate interest of the Data Controller thus combines with the interests of the data subjects in obtaining the certificates and/or training credits for the events they have attended, in accordance with Article 6(1)(f) of the GDPR.

3 – METHOD OF PROCESSING AND RETENTION PERIOD.

The data are collected, processed, and stored on both digital/computerized supports and paper/analog supports. A21CONSULTING uses processing tools and means that ensure compliance with security measures and the protection of personal data, with processes closely related to the purposes outlined above. The personal data may possibly be processed, on behalf of A21CONSULTING, by trainers previously assigned to the processing who collaborate with the company. The personal data you provide will be retained for the time necessary to achieve the purposes highlighted above, without prejudice to any further retention imposed by legal defense in judicial proceedings or legal obligations to which A21CONSULTING is subject.

4 – DATA DISCLOSURE.

Your data will not be disclosed nor transferred outside the EEA.

5 – NATURE OF THE PROVISION.

Your provision of personal data is necessary to enable the Data Controller to properly fulfill its contractual obligations and to fully identify you for the correct completion of the attendance register, as well as for the issuance of certificates and training credits. Any refusal to provide the data may result in the inability to produce participation certificates and to obtain recognition of training credits.

6 – RIGHTS OF THE DATA SUBJECT.

Under the conditions provided by the GDPR, you may exercise the following rights: Right of access (Art. 15) – Right to rectification (Art. 16) – Right to erasure (Art. 17) – Right to restrict processing (Art. 18) – Right to data portability (Art. 20) – Right to object (Art. 21) – Right to object to automated decision-making processes concerning natural persons (Art. 22).

For the purpose of verifying the conditions and procedures for exercising the aforementioned rights, please refer to the full text of the GDPR and the Privacy Code available on the website: www.garanteprivacy.it.

Should you consider that your rights as mentioned above have been violated, the current legislation allows you to contact the Data Controller at the contact details provided below for a prompt and effective response or, if you are not satisfied, to file a complaint with the Authority for the Protection of Personal Data.

7 – IDENTIFYING AND CONTACT DATA OF THE DATA CONTROLLER.

The Data Controller is A21CONSULTING of Mirko Verratti, headquartered at Via San Cristoforo n. 28 sc. A – 41121 Modena (MO), VAT No. 04003170364, email: mirko.veratti@a21consulting.com.