PRIVACY POLICY FOR THE PROCESSING OF PERSONAL DATA
Pursuant to Art. 13 of the EU Regulation No. 2016/679 (hereinafter GDPR) on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), we inform you about the processing of personal data relating to you that we collect when concluding the contract for the conduct of the certification examination or during the course thereof:
1. . Data Controller
The data controller is Intertek Italia SpA, with registered office in Cernusco sul Naviglio (Mi), via Miglioli 2/A, C.F. 06031680017 and VAT no. 12431470157 email professioni@intertek.com
2. Data Protection Officer
The Data Protection Officer can be reached at the following address: Via Miglioli 2/A, 20063 Cernusco sul Naviglio (MI), email: privacy.italia@intertek.com
3. Purposes, legal bases of processing and consequences in the event of refusal to process
The personal data that you provide us with and that will be collected in the course of the provision of the services you have requested will be processed for the purposes according to the legal bases indicated below:
| N | PURPOSE (Why we process your data) | CONSEQUENCES IN THE EVENT OF REFUSAL TO PROCESS (What happens if you refuse to provide personal data and/or authorise processing) | CONSEGUENZE IN CASO DI RIFIUTO AL TRATTAMENTO (Cosa accade se lei rifiuta di conferire i dati personali e/o di autorizzare il trattamento) |
|---|---|---|---|
|
1 |
Procedures associated with applying for certification examinations |
Processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject, Processing is necessary for compliance with a legal obligation to which the data controller is subject |
Consent is not required; in the event of your refusal to provide the data, it will not be possible to proceed with the employment relationship or its continuation. |
|
2 |
Accounting and tax and administrative requirements related to the examination application |
Processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject |
Consent is not required; in the event of a refusal to provide the data, it will not be possible to proceed with the employment relationship or its continuation |
|
3 |
Keeping of accounting records in relation to the examination application |
Processing is necessary for the pursuit of the legitimate interests of the data controller or of third parties |
Consent is not required; in the event of your refusal to provide the data, it will not be possible to proceed with the employment relationship or its continuation |
|
4 |
Personal data protection requirements |
Processing is necessary for the pursuit of the legitimate interests of the data controller or of third parties |
Consent is not required; in the event of your refusal to provide the data, it will not be possible to proceed with the employment relationship or its continuation. |
|
5 |
Checking the quality of services |
Processing is necessary for the pursuit of the legitimate interests of the data controller or of third parties |
Consent is not required; in the event of your refusal to provide the data, it will not be possible to proceed with the employment relationship or its continuation. |
|
6 |
Recordings, photos, audio and video of the examination session via the Internet (access to the platform, identification, examination session, examination verification) |
Art. 6(1)(a) GDPR (data subject has given consent to the processing of his or her personal data for one or more specific purposes) |
In the absence of your consent, the data will not be processed. |
|
7 |
Intertek Group Information for Marketing Activities |
Art. 6(1)(a) GDPR (data subject has given consent to the processing of his or her personal data for one or more specific purposes) |
In the absence of your consent, the data will not be processed
|
4. . Recipients and categories of processed data
Personal data provided by you or acquired in the course of the service will be processed exclusively by specially authorised personnel or by data processors appointed for this purpose. Your personal data may be disclosed to: 1. consultants, accountants or lawyers who provide functional services for the purposes indicated above; 2. the National Accreditation Body – Accredia and other accrediting and/or notifying Bodies in accordance with the procedures provided for by the same; 3. banking and insurance institutions that provide functional services for the purposes indicated above; 4. Subjects that process the data in execution of specific legal obligations; 5. Judicial or administrative authorities, for t h e fulfilment of legal obligations; 6. Your personal data, subject to your consent, may be subject to disclosure by means of publication on the website of Intertek Italia SpA or of Group companies.
5. Special categories of data
Intertek Italia SpA does not request or collect any special categories of data as defined by the EU Regulation 2016/679 (such as, for example, information disclosing racial or ethnic origin, political, philosophical or religious beliefs, sexual orientation or health data)
6. Treatment modalities
Personal data are processed by adopting appropriate security measures aimed at preventing unauthorised access, disclosure, modification or destruction of personal data. All employees of Intertek Italia SpA who have access to your personal data are duly designated as authorised subjects and each of them may only process data that is indispensable for the performance of their work duties. The processing is mainly carried out using IT and/or telematic instruments, with organisational methods and logic strictly related to the purposes indicated above.
7. Transfer abroad
Your personal data may be transferred to a third country or international organisation within the business group to which Intertek Italia SpA belongs, but always in compliance with the rules contained in EU Regulation 2016/679.
8. Personal data retention period and criteria used
The personal data subject to processing is collected in documents and/or computer files whose conservation is established in accordance with the purposes of processing as summarised below. Your personal data, subject to processing for the purposes indicated above, will be kept at the registered office of Intertek Italia SpA for the duration of the contract and, subsequently, for as long as Intertek Italia SpA is subject to conservation obligations for tax purposes or for other purposes provided for by law or regulation. The images and videos related to the examination, whether online or not, shall only be conserved for the purpose of deliberation and issue of the certificate and permanently deleted within 1 month of the deliberation.
9. Rights of the data subject
The Regulation grants you the following rights, which you may exercise vis-à-vis and against each joint owner. A full extract of the following articles of law is attached.
– Right of access: Article 15 of the European Regulation allows you to obtain from the data controller confirmation as to whether or not data relating to you is being processed and, if so, to obtain access to that data.
– Right of rectification: Article 16 of the European Regulation allows you to obtain from the controller the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration.
– Right to erasure: Article 17 of the European Regulation allows you to obtain from the data controller the erasure of personal data concerning you without undue delay if one of the grounds set out in the regulation applies.
– Right of restriction: Article 18 of the European Regulation allows you to obtain from the controller the restriction of processing when one of the cases provided for by the rule applies.
– Right to object: Article 21 of the European Regulation allows you to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you in accordance with Article 6(1)(e) or (f), including profiling on the basis of these provisions.
– Right to portability: Article 20 of the European Regulation allows you to receive in a structured, commonly used and machine-readable format personal data concerning you that you have provided to a data controller and you have the right to transmit such data to another data controller without hindrance from the data controller to whom you have provided it in accordance with the conditions set out in the provision
– Right to withdraw consent: Article 7 of the European Regulation allows you to withdraw the consent you have given at any time. Withdrawal of consent does not affect the lawfulness of the processing based on the consent before the withdrawal.
– Right to lodge a complaint: Article 77 of the European Regulation gives you the right to lodge a complaint with a supervisory authority, in particular in the Member State where you normally reside or work or where the alleged infringement has occurred, if you consider that the processing is in breach of the Regulation
10. Further information
More information is available on our website at http://www.intertek.it/. A full extract of the above-mentioned articles of law i s available on the website of the Garante della Privacy:
https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/6264597
Any explanations, which you may require for t h e exercise of your rights, may be requested in writing, accompanied by a valid identification document, at the following e-mail address: privacy.italia@intertek.com.
2. Changes to this privacy policy
The Controller reserves the right to make any changes to this information notice deemed appropriate or made mandatory by the regulations in force from time to
time, informing users thereof. Last updated: April 2020
