Privacy
Privacy notice - art. 13 General Data Protection Regulation UE 679/16 (GDPR)
Why this privacy notice
We inform you about which personal data we collect and by which methods , in order to ensure your fundamental rights and freedoms, with particular reference to confidentiality procedures.
Categories of data that we process
We collect personal identifiers and contacts (such as name, surname, home address, email address and your preferences in our courses) and any other information relating to you which you may provide, in the following cases:
- filling out our on-line contact form in the section “contact us” of our website www.naba.it;
- filling out our on-line contact form in our website onlinecourses.naba.it;
- filling out our on-line contact form in the section “request brochure” of our website www.naba.it;
- filling out our on-line contact form in the section “open day” of our website www.naba.it;
- registering during our ”Open Day”;
- during all NABA events organized in our Campus or in other sites.
We can also ask to social networks to send you information about our courses according to youry interests, but we don't know your personal data.
Why we use your personal data
We may use the Personal Information we collect for the following purposes:
- to register you during our events, as for instance our “Open Day”;
- to contact you and to send you information on our courses through mail or telephone in response to your requests;
- to send you informations related to our Scholarships, our initiatives our courses and the events that could interest you;
- statistical analysis on an anonymous and aggregate basis, in order to improve our educational offer.
How long we retain your information
We will retain information we collect whenever we have a justifiable business need to do so and/or for as long as it is needed to fulfill the purposes outlined in this privacy notice, in any case we will retain your data for three years from the last time we contacted you.
Security of your personal data
We have appropriate policies and technical and organizational measures in place to safeguard and protect your personal data against unlawful or unauthorised access, accidental loss or destruction, damage, unlawful or unauthorised use and disclosure.
How we share your information
Inside the company, the personal data will be processed by the employees in charge of the function and because as “authorised persons in charge of the processing” of personal data.
Also we may share information with third parties and service providers who work on our behalf as “data processors”. We also may disclose information whenever we believe disclosure is necessary or required by law or regulation, in order to comply with legal process or government requests. No personal data of any user will be publicly disclosed.
Where we store your personal data
Your data are located and stored inside the European Economic Area “EEA” su server ubicati all’interno dell’Unione Europea del Titolare e di società terze incaricate e debitamente nominate quali Responsabili del trattamento. The data will not be stransfered outside EEA.
The transmission of your data is optional, if you don't consent we will not send you any information about our Scholarships, our initiatives and events.
Also we may share information with third parties and service providers who work on our behalf as “data processors”. We also may disclose information whenever we believe disclosure is necessary or required by law or regulation, in order to comply with legal process or government requests. No personal data of any user will be publicly disclosed.
Your rights according to GDPR
In accordance with GDPR, we inform you about your rights:
- obtain from the confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data (Right to access art. 15);
- obtain without undue delay the rectification of inaccurate personal data (Right to rectification art. 16);
- obtain from the controller the erasure of personal data concerning you (Right to be forgotten art. 17);
- obtain from the controller restriction of processing (Right to restriction of processing art. 18);
- receive the personal data concerning you, provided to a controller, in a structured, commonly used and machine-readable format in order to transmit those data to another controller without hindrance from the controller (Right to data portability art. 20);
- object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning you (Right to object art 21);
When the personal data breach is likely to result in a high risk to your rights and freedoms, we will communicate you without undue delay. (Art. 34);
You also have the right to withdraw your consent at any time (Art. 7). You may exercise such rights by contacting us, or alternatively you may file a complaint with the competent supervisory authority, in addition to your rights outlined above.
Data Controller
The data controller is:
Nuova Accademia S.r.l.
Via Carlo Darwin, 20
20143 Milano MI
Tel.: (+39) 02 973721
privacy@naba-da.com
The data protection officer is the company:
Mazars Italia S.p.A
Via Ceresio 7
20154 Milano MI
Email: dpo@naba-da.com
Update of this notice
We may change this Privacy Notice from time to time. We will provide notice to you if these changes are material and, where required by applicable law, we will obtain your consent.