Privacy policy

Dear User,

Under Articles 12 et seq. of Regulation (EU) 2016/679 (‘GDPR’), this notice explains how A21CONSULTING processes your personal data:

1 – CATEGORIES OF PERSONAL DATA. We collect identification details, professional contact details and/or, where applicable, information about your role within the end-client company, as well as any other data you may share in the course of training activities.

2 – PURPOSES AND LEGAL BASIS OF PROCESSING. The data collected will be used to enable you to take part in training, identify you, record your attendance and subsequently issue certificates and award training credits, where applicable. The legal basis for processing is A21CONSULTING’s legitimate interest in properly performing the consultancy agreement entered into with the client company for which you work or with which you collaborate. The controller’s legitimate interest is therefore aligned with the data subjects’ interest in obtaining certificates and/or training credits for the events they have attended, in accordance with Article 6(1)(f) of the GDPR.

3 – PROCESSING METHODS AND RETENTION PERIOD. Data are collected, processed and stored in both digital and paper formats. A21CONSULTING uses processing tools and methods that ensure compliance with security and personal data protection measures, following procedures closely linked to the purposes set out above. Personal data may also be processed on behalf of A21CONSULTING by trainers who work with the company and have been authorised in advance to process such data. The personal data you provide will be retained for as long as necessary to achieve the purposes described above, subject to any further retention required for the defence of legal claims or to comply with statutory obligations applicable to A21CONSULTING.

4 – DISCLOSURE OF DATA. Your data will not be made public or transferred outside the European Economic Area (EEA).

5 – PROVISION OF PERSONAL DATA. You need to provide your personal data so the controller can fulfil its contractual obligations, identify you correctly, complete the attendance register and issue certificates and training credits. If you refuse to provide the data, it may not be possible to issue attendance certificates or award training credits.

6 – DATA SUBJECT RIGHTS. Subject to the conditions set out in the GDPR, you may exercise the following rights: the right of access (Article 15); the right to rectification (Article 16); the right to erasure (Article 17); the right to restriction of processing (Article 18); the right to data portability (Article 20); the right to object (Article 21); and the right to object to automated decision-making concerning individuals (Article 22).

For the conditions and procedures for exercising these rights, please refer to the full text of the GDPR and the Italian Data Protection Code, available at www.garanteprivacy.it.

If you believe these rights have been infringed, you may contact the controller using the details below to obtain a quicker and more effective response. If you are not satisfied, you may lodge a complaint with the Data Protection Authority.

7 – CONTROLLER’S IDENTITY AND CONTACT DETAILS. The controller is A21CONSULTING di Mirko Veratti, with its registered office at Via San Cristoforo n. 28 sc. A – 41121 Modena (MO), VAT no. 04003170364, email: mirko.veratti@a21consulting.com.

Legal advice provided by:

Andrea Baccarani, lawyer

Studio Civilisti

Palazzo Fontanelli – Via del Taglio n. 24, 41121 Modena