Politica sulla Riservatezza

INFORMATION IN ACCORDANCE WITH AND FOR THE PURPOSES OF EU GDPR 2016/679 AND CURRENT NATIONAL LEGISLATION RELATING TO THE PROTECTION OF PERSONAL DATA PROCESSING

Data Controller. R&M Servizi srl guarantees privacy to users of R&M Servizi srl courses and services and in particular: project partners, companies that host internships or that enroll their employees in R&M Servizi srl courses or that request to use the employment services offered by R&M Servizi srl, students enrolled in courses and, in the case of minor students, parents, guardians and foster parents.

The Data Controller, to whom you may contact to assert the rights pursuant to articles 15 to 22 of GDPR 2016/679 and the current national legislation, is R&M Servizi srl, with registered office in Via Monsignor Virgilio 91 08048 Tortolì (NU).

Data Protection Officer . The data controller has designated, pursuant to art. 37 of the EU REG, a Data Protection Officer (DPO) who can be contacted by writing to info@rmservizi.it

Data subject to processing. The personal data processed are personal and contact data provided or received by the interested party for example on the occasion of: meetings at the offices of R&M Servizi srl, telephone calls or e-mails, completion of pre-registration forms for training courses, events and other initiatives organized by R&M Servizi srl, requests for information on the activities carried out by the organization also completed via the institutional website, requests for activation of agreements, internships and other services. The data are connected to the establishment and management of the requested service and classified as personal data pursuant to GDPR 2016/679 and the national legislation in force. In relation to the type of service requested, the company may also process data that the law defines as “sensitive” as they are suitable for detecting for example:

  1. a) a general state of health (H certificates, situations relating to vaccination requirements, absences due to illness, maternity, injury) suitability or otherwise for certain tasks (as a result expressed by medical personnel following preventive/periodic medical visits or requested by you yourself);
  2. b) belonging to ethnic minorities or religious beliefs;
  3. c) information of a judicial nature

Sensitive data, concerning the state of health, possibly processed by the competent doctor in carrying out the tasks provided for by Legislative Decree 81/08 and other provisions on hygiene and safety in the workplace, for the performance of preventive and periodic medical checks, will be processed at the employer’s premises exclusively by the same doctor as an independent data controller, for which R&M Servizi srl requests express consent. Only judgments on unsuitability will be communicated by the doctor to the same employer.

Images acquired during teaching activities or events organised by R&M Servizi srl may also be processed, subject to the acquisition of specific consent.

Purpose of processing. The collection and processing of personal data are carried out:

  1. for the use of the services requested from R&M Servizi srl (e.g. participation in training courses, events, help desk service, job services and other specialist services aimed at job placement.)
  2. to carry out with public or private bodies the obligations connected or instrumental to the service provided (e.g. communication to Inail, competent doctor.)
  3. to execute the obligations set forth by Laws, regulations or by community legislation as well as to comply with provisions issued by public authorities authorised to do so or by supervisory and control bodies to which R&M Servizi srl is subject (health checks).
  4. to carry out the procedures required by the funding bodies (e.g. Region, Province, Interprofessional Funds, inspections by bodies identified by them.)
  5. for the purposes related to the management of the financed projects;
  6. for ancillary purposes such as news alerts via email or SMS in reference, for example, to cases of communication for critical events.
  7.  anonymously to carry out statistics and market research
  8.  for the promotion of training courses, services and events organised by R&M Servizi srl after obtaining specific consent

The collection and processing of images is carried out after obtaining specific consent for advertising activities through the press, website and social networks of the services provided by R&M Servizi srl.

Processing methods. The processing of data for the purposes set out takes place using both automated methods, on electronic or magnetic media, and non-automated methods, on paper media, in compliance with the confidentiality and security rules provided for by law, by the resulting regulations and by internal provisions.

Place of processing. The data is currently processed and stored at the operating headquarters of belonging and at the registered office, Via Monsignor Virgilio 91 08048 Tortoli (NU). They are also processed, on behalf of R&M Servizi srl, by professionals and/or companies charged with carrying out technical, development, management and administrative – accounting activities.

Mandatory or optional nature of providing data and consequences of any refusal to provide them. The interested party may refuse to provide the owner with his/her personal data. The provision of personal data for the purposes from a) to

  1. f) is however necessary for a correct and efficient management of the contractual relationship with customers, partners and other subjects involved in the activities of the owner. For the purposes g) and h), when foreseen, it is optional and subject to the acquisition of specific consent. Therefore, any refusal to provide it may compromise in whole or in part the contractual relationship itself, the provision of the service or the pre and post contractual activities.

 

Data recipients. Without prejudice to communications made in compliance with legal and contractual obligations, all data collected and processed may be communicated in Italy and transferred abroad exclusively for the purposes specified above to:

  1. a) Sardinia Region (Regional accreditation portals and other portals connected to the provision of training services and employment services and their reporting), Province of Nuoro, Municipalities, ASL and other bodies financing R&M Servizi srl projects and inspection bodies identified by them;
  2. b) Public bodies (INPS, INAIL, Provincial Directorate of Labour, Tax Offices, Public and Local Bodies and Administrations, etc.);
  3. c) Natural and legal persons, both private and public, bodies and associations pursuant to the obligations set out in Law 81/08 and/or regional and/or local laws and regulations (including health and legal data);
  4. e) Medical practices in compliance with obligations regarding hygiene and safety at work;
  5. f) Insurance companies, credit institutions and law firms (in the presence of disputes);
  6. g) Project partners, companies, students and, in the case of minors, guardians and foster carers and social services or other services that have charge of the minor in relation to the function performed by the employee or collaborator;
  7. h) Members of the commissions and exams

Furthermore, in the management of your data, the following categories of internal and external persons in charge and/or responsible persons identified in writing may become aware of them:

– Employees/collaborators of R&M Servizi srl who, on the basis of the roles and work tasks performed, have been authorised to process the data, trained to do so within the limits of their competences and in compliance with the instructions given to them by the Data Controller

– Labour Consultants and/or Companies specialized in the preparation of pay slips, their employees and collaborators, as external agents or managers;

– Professionals or service companies for business administration and management who operate on behalf of our company including the management of information systems and the Website.

The detailed list of external parties that process data on behalf of the owner is available upon request to info@rmservizi.it. Access to such data is subject to the evaluation of the legitimacy of the request.

Data Transfer. The Data Controller does not transfer personal data to third countries or international organizations.

Data retention period. The data controller retains and processes personal data for the time necessary to fulfill the purposes indicated. Subsequently, personal data will be retained and not further processed as documented in our processing register. The retention period may vary significantly based on: the purposes, the type of data processed, legal obligations; in the event that the data were processed in the context of a funded project, the retention times may be subject to what is provided for in the call for tenders of the funding body. When it is no longer necessary to retain personal data, they will be deleted or de-indexed or destroyed in a secure manner.

Rights of the interested party. Pursuant to art. 7 of Legislative Decree 196/2003 and articles 15 to 22 of the Regulation, the interested party may exercise the following rights:

  1. a) ask for confirmation of the existence or otherwise of your personal data;
  2. b)   obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, where possible, the retention period;
  3. c)   obtain the rectification and deletion of data;
  4. d)   obtain the limitation of the processing;
  5. e)   (where applicable) obtain data portability, i.e. receive them from a data controller, in a structured, commonly used and machine-readable format and transmit them to another data controller without hindrance;
  6. f)    oppose the processing at any time and also in the case of processing for direct marketing purposes;
  7. g)   to object to automated decision-making including profiling;

The same, where exercisable by you, may be asserted by writing to R&M Servizi srl – Via Monsignor Virgilio 91 08048 Tortoli (NU) – Tel. 07820-0623088 – E –mail: info@rmservizi.it – ​​Email PEC – R&M Servizi srl rmservizisrl@pec.it specifying the subject of the request, the right that the interested party intends to exercise, attaching a photocopy of an identity document that certifies the legitimacy of the request.

Proposal of Complaint. Interested parties who believe that the processing of their personal data is in violation of the provisions of GDPR 2016/679 have the right to lodge a complaint with R&M Servizi srl, as provided for by art. 77 of GDPR 2016/679 itself, or to take appropriate legal action (art. 79 of EU REG. 2016/679).

Update March 2020