PRIVACY

Policy

This information is issued pursuant to Articles 12, 13 and 14 of the EU Regulation 2016/679 GDPR and is addressed to users of the company website.

The following applies only to Websites, Apps, social profiles and services, whose domains or properties are registered or traceable to the publisher Scuola28 SSDRL, in particular t h e domain bio28.it and all third-level domains linked to it.

The processing of personal data will be based on the principles of fairness, lawfulness and transparency, protecting the confidentiality and rights of the person concerned.

1. Notes for the reader
In order to make this document more understandable and transparent to our users, we have found it necessary to use simple and colloquial language. Therefore, the use of a less formal tone should not be interpreted as a lack of respect or courtesy to the user but simply a way to facilitate communication.

2. To whom is this document addressed?
This Information Notice (hereinafter "Policy"), provided pursuant to Articles 13 and 14 of the Regulation (EU) April 27, 2016 No. 679 (so-called "GDPR"), is intended to illustrate how Scuola28 SSDRL (hereinafter also "Scuola28 SSDRL" processes personal data collected as part of your use, applications and services offered through this website.

3. How can you contact us?
Scuola28 SSDRL as Publisher and Data Controller, is primarily responsible to the user for any questions, concerns or complaints regarding this policy or the processing of personal data. In case you, as a user of the website and a "data subject" need any clarification regarding the processing of your personal data, please contact us at the following contact details:

Scuola28 SSDRL
Registered office: Strada Caminata n. 28 - 14036 Moncalvo (AT) P.IVA 01610380055 C.F.: 01610380055
PEC: orsolina28ssdrl@pec.it
Phone 0141-917277
e-mail: info@bio28.it
‍

‍
4. Data Protection Officer - DPO
The Data Protection Officer DPO can be reached at the e-mail address: paola@zprivacy.eu

5. For what purposes do we process your personal data and on what basis of lawfulness?
We process your personal information to give you the best possible experience when you access our website, use our services, and interact with us. This includes the following purposes:

6. Allow consultation of our website
When you visit our website, we automatically collect certain information, including your IP address, login information, browser type and version, browser plug-ins, operating system, and platform.

As you browse our site, we may also collect other data such as the Clickstream URL, articles viewed or searched, any viewing and download errors, the times and duration of visits to particular pages, and interaction with the page itself. To collect this data, we use various technologies, including cookies. More information about cookies is available in a specific notice available in the footer of the website. If you need more information regarding the processing of your personal data, please contact us through the information we provided above.

- Acquisition mode: Data are automatically conferred by your browsing devices using Internet network communication protocols (e.g., TCP/IP, UDP)
- Basis of lawfulness: We process this data by virtue of our Legitimate Interest - art. 6.1 lett. f) of the GDPR - to provide and improve the navigation on our Site, propose efficient and secure web services trying to ensure the continuous improvement of your browsing experience over time.
- How long we keep your data: We keep your personal data only as long as necessary to enable you to browse the Site. In particular, some data is kept the length of time you are on the Site itself and some until you decide to delete it by deleting technical and functional cookies (e.g. language setting). For more information regarding cookie management, see our Cookie Policy in the Site Footer.
‍

‍
7. Managing communications
We collect your personal information when you communicate with us in person, through our website, email, by phone, or through any other means using the contact information we have issued to you through this Site. For example, we collect your contact information and details of our messages to you and from you including details of when you sent them, when we received them, and in some cases even where you sent them from.

- Mode of acquisition: The data are partly automatically conferred in the communication protocol used by your chosen tool and partly conferred by you in the content of the communication.
- Basis of lawfulness: We primarily process this data because of our Legitimate Interest - art. 6.1(f) of the GDPR - to respond to your requests and handle necessary communications. However, in some cases we may be called upon to respond under specific contractual or legal obligations- Articles 6.1(b) and (c) of the GDPR.
- How long we keep your data: By following up on contact or support requests you decide to send us, your personal data is only processed for as long as it is needed to provide you with the information and/or assistance you need.
‍

‍
8. Manage data collection forms
Description of processing: As a user, you may provide us with your personal data, including data that allows your identification when you fill out specific forms (so-called" Forms"). These forms are designed in order to facilitate your inquiries and ensure quick and accurate responses and are supplemented by appropriate privacy policy if necessary.

- Method of acquisition: the data are voluntarily provided by you in the completion of our Application or Registration Forms. Failure to provide them will result in our inability to provide you with the requested service.
- Basis of lawfulness: The processing is necessary for the execution of pre-contractual measures taken at your request - art. - 6.1 lett. b) of the GDPR.
- How long we keep your data: We only keep your personal data on the site for as long as it takes to fulfill your request.
‍

‍
9. Newsletters and other direct marketing communications
We may use the information you provide to send you newsletters or other communications that we believe may be of interest to you. Where required by law, commercial communications will be sent only after we have obtained your consent. In any case, we offer you the opportunity to unsubscribe from any communication sent.

- Service Description: If you want to keep up to date with our services and choose to subscribe to our newsletter, it is necessary to provide certain data such as your name, e-mail address or other specific data stated from time to time in the Registration Form. If you subscribe to our newsletter service, you give us consent to send to your e-mail address, commercial communications (e.g. information notes, promotions, etc.) in an automated way. These communications will never be invasive and will be done solely for the purpose of commercial promotion of our Brand and our products and/or services. You may revoke your consent to the processing for these purposes at any time, free of charge and in an easy manner through the appropriate link found within each of our e-mails or by using the contact information provided in this notice. The effectiveness of communications made through the newsletter service is periodically monitored in order to also understand your interest in the communications made. In particular, proper delivery to your mail server, your interaction with the landing page such as, for example, whether or not our newsletters are opened by, the number of openings over time is monitored. Monitoring is done to understand your interest in our communications and to disable automatic delivery if messages are not received regularly or there is no interaction by you for long periods of time.
- Method of acquisition: The data necessary to activate the communication service, such as your name your e-mail address, are voluntarily given by you in the specific Newsletter Registration Form. The information regarding the delivery of ourcommunication to your mail server are automatically provided by the communication protocol. Data about your interaction with the communication service are obtained from special markers inserted by the newsletter service we use within the landing page.
- Basis of lawfulness: We process the data automatically conferred in the communication protocol and those obtained from the newsletter management system to carry out communications. However, according to art. 130 of Legislative Decree 196/2003, commercial communications carried out in an automated or systematic way (without the intervention of an operator), can only be carried out if the recipient has given his consent. This consent is equated by us with that provided for in art.- 6.1(a) of the GDPR and is handled in the manner set forth in Art. 7 of the GDPR.
- How long we keep your data: your data will be processed and kept until you decide to revoke your consent or request deletion.

10. Cookies and other technologies
When you browse the pages of our site, we automatically collect data through the use of "cookies." A cookie is a text file containing small amounts of data that a Web site can send to your browser, which can then be stored on your computer as a tag that distinguishes your computer but does not identify you. Some of our Web site pages use cookies to provide you with better service during subsequent uses of the Web site. You can set your browser to notify you before you receive a cookie so that you have a chance to decide whether or not to accept it.

We use a plugin to manage your consent to our website''s use of cookies. However, you can also set your browser to disable cookies; You should be aware that if you do this, some pages on our Web site may not function properly.

Instructions for disabling cookies can be found at the following web pages: Mozilla Firefox - Microsoft Edge - Google Chrome - Opera - Apple Safari

For information about the specific cookies used on this Web site, please see the Web site's Cookie Policy via the link provided at the bottom of all pages on the site (footer).
‍

‍
11. Processing of personal data COLLECTED through our social profiles
When you follow our social channels (e.g., Facebook, Instagram, YouTube, etc.) or interact in any way with our social profiles (e.g., by commenting, sharing, following us, or by liking), we will use your information to interact and communicate with you through our social profile in order to offer products and services and develop our "Brand" through the social channel you interacted with. Please note that the information you voluntarily release to us on social profiles and any expressions of interest you may have, will be used exclusively for the analysis and communication purposes stated in this policy. Also for the purpose of protecting our interests or those of third parties, we reserve the right to request the deletion of comments that are offensive or in violation of any applicable law and upon the occurrence of the conditions, to use such comments or posts in order to protect or enforce our rights and/or interests in court.

- Mode of acquisition: The data are voluntarily given by you through one of our social profiles.
- Basis of lawfulness: We process this data because of our Legitimate Interest to promote our brand through social channels and address any inquiries - art. 6.1(f) of the GDPR.
- How long we keep your data: We keep your personal information until your account is deleted or your comment or post in which you tagged us is deleted.

Please remember that for privacy purposes the social network is the autonomous controller of your personal information and, as such, does not operate under our responsibility. The collection and use of information obtained is governed by the social network's privacy policies to which we encourage you to refer.
‍

‍
12. Legal reporting requirements
We may process your information in order to make necessary disclosures, in response to requests we are legally required to fulfill, to law enforcement or judicial authorities, or in defense of a right.

- Mode of acquisition: The data are already in our possession as they are collected for other purposes. Basis of lawfulness: The processing is necessary to fulfill a legal obligation - art. 6.1 lett. c) of the GDPR to which you are subject or our company is subject.
- How long we keep your data: We keep your personal data for as long as necessary to fulfill our obligations.
‍

‍
13. Links to external websites
Where we provide links to other Web sites, we do so for informational purposes only. Other Web sites are beyond our control and this Policy does not apply. If you access other Web sites using the links we have provided, the operators of those sites may collect your information and use it in accordance with their Privacy Policy, which may differ from this Policy.
‍

‍
14. Security of your personal data
We have taken a number of physical, technical and organizational measures to ensure adequate levels of security for the personal data processed under our control, so as to prevent all reasonably foreseeable risks, with particular but not limited reference to their destruction, loss, modification or unauthorized disclosure or accidental or unlawful access.

The data provided are stored and archived on secure servers in the European Economic Area

If you have a password that allows you to access our Web services, it is your responsibility to keep it secure and confidential.

‍

15. International Transfers
Our personal data processing operations generally take place within the European Economic Area ('EEA'). However, should Your personal data be transferred to countries

located outside the European Economic Area (EEA), in the absence of adequacy decisions from the European Union Commission, we will ensure that appropriate safeguards are in place to protect the personal data of its applicants in these countries. Some of the safeguards that could be adopted, where appropriate, include the use of the "Standard Contractual Clauses" (SCCs) established by the European Commission under Article 46(1) GDPR, pseudonymization and if possible encryption of the data itself.

The transfer abroad of personal data is often related to the use of cloud technologies, digital communication systems, security software and protection of IT services. I these cases, our Company is committed to using services chosen from among operators that guarantee higher standards of security and attention to the protection of personal data.

‍

16. Who can process your personal data
For the achievement of the above purposes, the following parties may have access to your personal data:

a. Our employees and contractors are properly trained in measures to protect your rights and the security of your data. They act as authorized and competent persons in this regard.
b. We work with companies, professional firms, and consultants who specialize in assistance and/or advice regarding privacy, administration, and legal issues. We also engage third parties to ensure the proper functioning of our website and its services. For example, we rely on service providers, cybersecurity experts, and other third parties to improve, extend, and protect our website and computer systems. Each outside party is carefully evaluated for competence and reliability, and is contractually bound to provide a level of protection for your personal information that is no less than our own. These parties act as Data Processors within the meaning of Article 28 of the GDPR.
c. We may disclose your information to administrative, institutional, judicial or other authorities for whom disclosure is required by law or necessary for the purposes described in this policy.
The full list of providers who process your personal data is available from the Controller.
‍

‍
17. What are your Rights?
In accordance with applicable law and under the circumstances determined by the lawful basis under which your personal information is processed, you may exercise the following rights.
‍

‍
a. Right of access to personal data. You have the right to obtain confirmation as to whether or not we are processing personal data concerning you and if so, to obtain access to the personal data processed. You have the right to obtain a copy of the data being processed. This right is applicable only if it does not lead to infringement of the rights and freedoms of others. On this point, please note that in the case of repeated requests, you may be charged a fee by us based on our administrative costs.
If you have an account (e.g., catalog restricted area access), you can access your user profile in order to obtain a copy as well as correct, edit or delete inaccurate data. You also have the option to close your Account at any time by writing to privacy@bio28.it
‍
b. Right to rectify, erase or limit the processing of personal data. If you wish to rectify, erase or restrict the processing of your personal data, please contact us through the information we have provided in the section. It is your responsibility to ensure that you provide true, accurate, complete data and keep it up to date (e.g. account).

‍
c. Right to revoke consent. If you have given us consent to process your data, you can revoke it at any time (e.g., newsletter)

‍
d. Right to data portability. If the processing is based on your consent or contract and is carried out by electronic means, you have the right to receive, in a structured, commonly used and machine-readable format, personal data concerning you that you have provided to us and you have the right to transmit such data to another data controller without hindrance from us.

‍
e. Right to object. As a user, you have the right to object to the processing of your data under certain circumstances. For example, you may benefit from this right if the processing is based on our legitimate interests (or those of third parties). You can challenge the merits of our legitimate interests, however, we may have the right to continue to process such personal data on the basis of our legitimate interests or when this is relevant in connection with legal actions, or the data is necessary for the establishment, exercise or defense of a right in court. You also have the right to object to the processing of your personal data for direct marketing purposes.

‍
f. Right not to be subjected to automated decision making. Right to lodge a complaint with the 'supervisory authority. Without prejudice to the possibility of approaching our Company for the exercise of rights related to the processing performed by us, you may lodge a complaint before the competent independent administrative authority in the Member State of the European Union where you normally reside, where you work, or where an alleged violation of the law on the protection of your personal data has occurred. In the Italian territory you can file a complaint with the following supervisory authority: https://www.garanteprivacy.it

‍

‍
17.1 Forms for exercising your rights
To exercise your rights towards the owner, you can use the following form: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 Remember that in order for you to exercise your rights, your identification is required on our part.
‍

‍
18. Policy Changes
This Policy was last updated on 06/05/2024.
‍

‍
19. Questions regarding this Policy
The publisher of this site Scuola28 SSDRL acting as the Data Controller of your personal data. If you have any questions, concerns or complaints regarding this Policy or the handling of your data, you can contact us by e-mail a t : privacy@bio28.it or contact the DPO at the following e-mail: paola@zprivacy.eu