INFORMATION ON THE PROCESSING OF PERSONAL DATA
Pursuant to Art. 13 of the EU Regulation No. 2016/679 (hereinafter GDPR) on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), we inform you about the processing of personal data relating to you that we collect when entering into the contract for the conduct of the certification examination or during the course thereof:
1. Data controller
The data controller is Intertek Italia SpA, based in Cernusco sul Naviglio (Mi), via Miglioli 2/A, C.F. 06031680017 and P.IVA 12431470157 email professioni@intertek.com
2. Data Protection Officer
The Data Protection Officer can be reached at the following address: Via Miglioli 2/A, 20063 Cernusco sul Naviglio (MI), email: privacy.italia@intertek.com
3. Purposes, legal bases of processing and consequences in the event of refusal to process
The personal data that you provide us with and that will be collected in the course of the provision of the services you have requested will be processed for the purposes according to the legal bases indicated below:
| N | PURPOSE (Why we process your data) |
LEGAL BASIS (On the basis of which legal provision we deal with them) |
CONSEQUENCES IN THE EVENT OF REFUSAL TO PROCESS (What happens if you refuse to provide personal data and/or authorise processing) |
|---|---|---|---|
|
1 |
Procedures associated with applying for certification examinations |
Processing is necessary for the performance of a
contract to which the data subject is party or for the performance
of pre-contractual measures taken at the request of the
same, The processing is necessary for the performance of
a legal obligation to which the data controller is subject
processing |
Consent is not
required, in case of its
refusal to provide data
it will not be possible to
course of the employment relationship,
or to its
continuation. |
|
2 |
Accounting and fiscal and
administrative tasks related to the application
participation in the examination |
Processing is necessary for the performance of a
contract to which the data subject is party or for the performance
of pre-contractual measures taken at the request of the
same |
Consent is not
required, in case of its
refusal to provide data
it will not be possible to
course of the employment relationship,
or to its
continuation. |
|
3 |
Keeping of accounting records in relation
the application
examination |
Processing is necessary for the performance of a
contract to which the data subject is party or for the performance
of pre-contractual measures taken at the request of the
same |
Consent is not
required, in case of its
refusal to provide data
it will not be possible to
course of the employment relationship,
or to its
continuation |
|
4 |
Compliance with data protection
of personal data |
Processing is necessary for the pursuit of the
legitimate interest of the data controller or of
third parties |
Consent is not
required, in case of its
refusal to provide data
it will not be possible to
course of the employment relationship,
or to its
continuation. |
|
5 |
Checking the quality of services |
Processing is necessary for the pursuit of the
legitimate interest of the data controller or of
third parties
|
Consent is not
required, in case of its
refusal to provide data
it will not be possible to
course of the employment relationship,
or to its
continuation. |
|
6 |
Recordings, photos, audio and video of the
examination session via the Internet (access
to the platform, identification
examination session, examination verification). |
Art. 6(1)(a) GDPR (the data subject has
consented to the processing of their personal data
personal data for one or more specific purposes) |
In the absence of his
consent shall not
proceed to the processing of
of the data. |
|
7 |
Intertek Group Information for
marketing activities |
Art. 6(1)(a) GDPR (the data subject has
consented to the processing of their personal data
personal data for one or more specific purposes).
|
In the absence of his
consent shall not
proceed to the processing of
of the data.
|
4. Recipients and categories of processed data
Personal data provided by you or acquired in the course of the service will be processed exclusively by specially authorised personnel or by data processors appointed for this purpose. Your personal data may be disclosed to: 1. consultants, accountants or lawyers who provide functional services for the purposes indicated above; 2. the National Accreditation Body - Accredia and other accrediting and/or notifying Bodies in accordance with the methods provided for by the same; 3. banking and insurance institutions that provide functional services for the purposes indicated above; 4. Subjects that process the data in execution of specific legal obligations; 5. Judicial or administrative authorities, for the fulfilment of legal obligations; 6. Your personal data, subject to your consent, may be subject to disclosure by means of publication on the website of Intertek Italia SpA or of the companies in the Group.
5. Special categories of data
Intertek Italia SpA does not request or collect any special categories of data as defined by the EU Regulation 2016/679 (such as, for example, information disclosing racial or ethnic origin, political, philosophical or religious beliefs, sexual orientation or health data).
6. Methods of processing
Personal data are processed by adopting appropriate security measures aimed at preventing unauthorised access, disclosure, modification or destruction of personal data. All employees of Intertek Italia SpA who have access to your personal data are duly designated as authorised subjects and each of them may only process data that is indispensable for the performance of their work duties. The processing is mainly carried out using IT and/or telematic instruments, with organisational methods and logic strictly related to the purposes indicated above.
7. Transfer abroad
Your personal data may be transferred to a third country or international organisation within the business group to which Intertek Italia SpA belongs, but always in compliance with the rules contained in EU Regulation 2016/679.
8. Personal data retention period and criteria used
The personal data subject to processing is collected in documents and/or computer files whose conservation is established in accordance with the purposes of processing as summarised below. Your personal data, subject to processing for the purposes indicated above, will be kept at the registered office of Intertek Italia SpA for the duration of the contract and, subsequently, for as long as Intertek Italia SpA is subject to conservation obligations for tax purposes or for other purposes provided for by law or regulation. The images and videos related to the examination, whether online or not, will only be conserved for the purpose of deliberation and issue of the certificate and permanently deleted within 1 month
by the resolution.
9. Rights of the data subject
The Regulation grants you the following rights, which you may exercise vis-à-vis and against each joint owner. A full extract of the following articles of law is attached.
- Right of access: Article 15 of the European Regulation allows you to obtain from the data controller confirmation as to whether or not data relating to you is being processed and, if so, to obtain access to that data.
- Right of rectification: Article 16 of the European Regulation allows you to obtain from the data controller the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purpose of the processing,
the data subject has the right to obtain the integration of incomplete personal data, also by providing a declaration
supplementary.
- Right of erasure: Article 17 of the European Regulation allows you to obtain from the data controller the
deletion of personal data concerning you without undue delay if one of the grounds provided for by the
standard.
- Right of restriction: Article 18 of the European Regulation allows you to obtain from the data controller the restriction of
of the treatment when one of the hypotheses provided for in the rule applies.
- Right of objection: Article 21 of the European Regulation allows you to object at any time, for reasons
related to your particular situation, to the processing of personal data concerning you pursuant to Article 6(1)(e) or (f), including profiling on the basis of these provisions.
- Right to portability: Article 20 of the European Regulation allows you to receive in a structured, commonly used and machine-readable format personal data concerning you provided to a data controller and you have the right to transmit such data to another data controller without hindrance from the data controller to whom you have provided it under the conditions set out in the rule
- Right to withdraw consent: Article 7 of the European Regulation allows you to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before the
revocation.
- Right to lodge a complaint: Article 77 of the European Regulation grants you the right to lodge a complaint with a supervisory authority, namely in the Member State in which you habitually reside or work or in the place where the alleged infringement has occurred, if you consider that the processing concerning you is in breach of the regulation.
10. Further information
More information is available on our website at http://www.intertek.it/. A full extract of the above-mentioned articles of law is available on the website of the Garante della Privacy: https://www.garanteprivacy.it.
Any explanations, which you may require for the exercise of your rights, may be requested in writing, accompanied by a valid identification document, at the following e-mail address: privacy.italia@intertek.com.
2. Changes to this privacy policy
The Controller reserves the right to make any changes to this information notice deemed appropriate or made mandatory by the regulations in force from time to time, informing users thereof. Last updated: April 2020
