Privacy Policy

This disclosure describes how to manage the site with reference to the processing of personal data of users who consult it. The information is provided pursuant to art. 13 of the G.D.P.R. 2016/679 to those who interact with the online services of the Organization, accessible electronically. The information is provided only for the institution’s website and not for other websites that may be consulted by the user via links.

The Data Controller and the Data Processor

Consultation of this site starting from the address: https://www.cpialecce.edu.it involves the release of information and personal data.

The Data Controller is: CPIA Lecce, in the person of its Legal Representative, Anna Marinella Chezza, which has its registered office in Via Pappacoda n.15 – 73100 Lecce (Le).

The person responsible for exercising the rights of data subjects is identified in the person of: Vito Giuseppe Scorrano. Requests can be forwarded to the email addresses lemm31000r@istruzione.it or by postal service at the headquarters of the School.

Place of data processing

The treatments connected to the online services of this site take place in the European Union, at the aforementioned headquarters of the School and are only handled by the personnel in charge of the treatment, or by persons in charge. In any case, the data will not be transferred to a non-European third country and will be kept for the period established by law.

Types of data processed and purpose of the processing

Registration data

The information requested during registration will be used to allow access to the online services of the School. Since the registration is preparatory for access to online services, the personal data of users, having made the choice of the service and subject to further information, will be processed for the purposes connected and/or functional to the chosen service.

Data provided voluntarily

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.

Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.

Communication and/or dissemination

The personal data provided by users who request services or send informative material (mailing lists, answers to questions, notices and newsletters, deeds and measures, etc.) are used only for the purpose of performing the service or provision requested and are communicated to third parties only if this is necessary for the fulfillment of requests (e.g. delivery service of requested documentation) or when the communication is imposed by law or regulation.

Your personal data will not be disclosed, by this term meaning making it known to indeterminate subjects in any way, including by making them available or for consultation, but they could be communicated or disclosed exclusively to natural or legal persons (responsible for the particular treatment ) who, by virtue of a contract with the Data Controller, provide specific processing services or carry out related, instrumental, support, or partnership activities, subject to an explicit assignment that imposes the duty of confidentiality and security.

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are kept for the times defined by the relevant legal legislation. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.

Cookies

Cookies are not used to transmit information of a personal nature, nor are c.d. persistent cookies of any kind, or systems for tracking users.
The use of c.d. session cookies (which are not stored permanently on the user’s computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe exploration and site efficiency.
The so-called Session cookies used on this site avoid the use of other IT techniques potentially prejudicial to the confidentiality of users’ browsing and do not allow the acquisition of personal identification data of the user.

Processing methods

Personal data will be processed by means of IT/telematic tools and for purposes connected and/or instrumental to online services or for simple navigation on the site, as established by current Italian legislation; in particular:

• to make the provision of the service possible;
• to make possible the execution of the foreseen legal obligations.

The data will be processed using tools and/or methods aimed at ensuring the confidentiality and security of the data, in compliance with the provisions of the GDPR, by adopting specific measures appropriate to the risk of varying probability and severity for the rights and freedoms of the natural persons, to prevent data loss, illicit or incorrect use and unauthorized access and to minimize the risks relating to the confidentiality, availability and integrity of the personal data collected and processed.

Rights of the interested parties

Pursuant to art. 12 and following. of the European Regulation 2016/679:

1. The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form.
2. The interested party has the right to obtain the indication:
   1. of the origin of the personal data;
   2. of the purposes and methods of the treatment;
   3. of the logic applied in case of treatment carried out with the aid of electronic instruments;
   4. of the identification details of the owner, of the managers and of the designated representative;
   5. of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as designated representative in the territory of the State, managers or agents.
3. The interested party has the right to obtain:
   1. updating, rectification or, when interested, integration of data;
   2. the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
   3. the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right.
   4. the limitation, portability of data or to lodge a complaint with the Supervisory Authority in accordance with articles from 15 to 22 of the GDPR.
4. The interested party has the right to object, in whole or in part:
   1. for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
   2. to the processing of personal data concerning him for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication.

For any information regarding the processing of data, as well as for the exercise of the rights listed above, the user can contact the Data Controller or the Data Protection Officer, at the contact details indicated above.