Privacy Policy and terms of sale

Privacy Policy

Notice on the processing of personal data

Dear User,

pursuant to Articles 12 et seq. of EU Regulation 2016/679 (“GDPR”), we hereby provide you with the following information concerning the processing of your personal data by A21CONSULTING:

1. 1 - CATEGORIES OF PERSONAL DATA. The company collects the following categories of personal data: identification data; professional contact data and, where applicable, data relating to your position within the end-customer company; and any other data you may share when interacting during training activities.
2. 2 - PURPOSE AND LEGAL BASIS OF THE PROCESSING. The data collected will be processed to enable you to take part in the training, identify you and record your attendance, as well as to subsequently issue certificates and award training credits where applicable. The processing is therefore based on A21CONSULTING’s legitimate interest in correctly performing the consultancy agreement entered into with the customer company for which you work or with which you collaborate. The Controller’s legitimate interest is aligned with the data subjects’ interest in obtaining certificates and/or training credits for the events they attended, in accordance with Article 6(1)(f) GDPR.
3. 3 - PROCESSING METHODS AND RETENTION PERIOD. Data is collected, processed and stored on both IT/digital and paper/analogue media. A21CONSULTING uses processing tools and methods that ensure compliance with personal-data security and protection measures, according to procedures strictly related to the purposes stated above. Personal data may be processed on behalf of A21CONSULTING by trainers who collaborate with the company and have been duly authorised to process it. The personal data you provide will be kept for the time needed to achieve the purposes described above, without prejudice to any longer retention required for legal claims or by statutory obligations to which A21CONSULTING is subject.
4. 4 - DISCLOSURE OF DATA. Your data will not be made public and will not be transferred outside the European Economic Area (EEA).
5. 5 - NATURE OF THE PROVISION OF DATA. Providing your personal data is necessary to allow the Controller to correctly perform its contractual obligations and fully identify you for the correct completion of the attendance register and the issue of certificates and training credits. Refusal to provide the data may make it impossible to issue attendance certificates and award training credits.
6. 6 - DATA SUBJECT RIGHTS. Subject to the conditions set out in the GDPR, you may exercise the following rights: right of access (Article 15); right to rectification (Article 16); right to erasure (Article 17); right to restriction of processing (Article 18); right to data portability (Article 20); right to object (Article 21); and rights relating to automated individual decision-making (Article 22).
7. To verify the applicable conditions and procedures for exercising these rights, please refer to the full text of the GDPR and the Italian Privacy Code available on the website of the Italian Data Protection Authority: www.garanteprivacy.it.
8. If you believe that the rights listed above have been infringed, applicable law allows you to contact the Controller using the details below for a faster and more effective response or, if you are not satisfied, to lodge a complaint with the competent Data Protection Authority.
9. 7 - IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER. The Data Controller is A21CONSULTING di Mirko Veratti, with registered office at Via San Cristoforo 28, staircase A, 41121 Modena (MO), Italy, VAT number 04003170364, email mirko.veratti@a21consulting.com.