INFORMATION REGARDING THE PRIVACY PERTAINING TO THE WEBSITE WWW.LAMAISONNETTE.NET
- General Information
The purpose of this privacy statement is to provide the necessary information on the processing of personal data when utilising our website and related services.
According to the Regulation (EU) 2016/679 (hereafter “Regulation” or “GDPR”), this document describes the mode of processing of personal data of users that consult, request information, consent to subscribe to the Newsletter and Mailing List and apply for eventual collaboration via the website.
1.1. Processing of Personal Data
Personal data, as defined by article 4 of the Regulation EU concerning the “protection of personal data (“GDPR”), refers to all information pertaining to an identified or identifiable person e.g., name, address, e-mail, postcode, etc.
1.2. Data Controller
The Data Controller is La Maisonnette S.r.l. with headquarters in Viale dell’Umanesimo n. 72-74, IT-00144, Rome (E-mail: lamaisonnette@mclink.it, PEC: lamaisonnette@pec.it, phone number +39 06.5910339).
1.3. Rights of the Data Subject
As subjects affected by the activity of data processing, with reference to your personal data, in accordance with the applicable regulations, you have the following rights:
- Right of Access;
- Right of Rectification and Cancellation
- Right to Limitations on Processing
- Right of Data Movability; and
- Right to Oppose Data Processing
The appropriate application must be submitted by contacting the Data Controller.
1.4 Right of Complaint
The interested parties who believe the personal data processing carried out through this website is in breach of the Regulation, are entitled to lodge a complaint to the Supervisory Authority located at Piazza Venezia 11 (Rome), as established in art. 77 of the Regulation or to use appropriate legal procedures (art. 79 of the Regulation).
- INFORMATION REGARDING SUBSCRIPTION TO THE NEWSLETTER AND COLLECTION OF FORMS
2.1 Optional Data Provided by Navigators
The navigator is free to provide personal data to request information and/or contact information as well as to subscribe to the newsletter and mailing list. The request requires the prior consent of the browser to process the data necessary to provide the service.
2.1.1. Forms Collection
The optional, explicit and voluntary sending of messages to the La Maisonnette contact addresses involves the acquisition of the sender’s contact details, necessary to reply, as well as all personal data included in the communications. The processing of requests is subject to specific consent by the Navigator for the processing of the data necessary to provide the requested services. By selecting the appropriate box, therefore, you declare that you have read this information and give your consent to the processing of your personal data within the limits and for the purposes indicated therein.
The data, once entered on the site, are processed by authorized staff within the school.
Personal data will usually be deleted once archiving is no longer necessary.
Legal basis of the processing:
Art. 6(1)b GDPR (data processing necessary for the execution of pre-contractual measures adopted at the request of the interested party / execution of a requested service).
2.1.2. Newsletter e Mailing List
The Navigator is free to provide personal data when requesting periodic information material. Subscription to the Mailing List and Newsletter involves the automatic receival of updates, events, promotions; consent can be revoked at any time. The processing of requests is subject to specific consent by the Navigator for the processing of the data necessary to provide the requested services.
The legal basis of the processing lies in the consent given by selecting the appropriate box on the contact form. By selecting the appropriate box, therefore, you declare that you have read this information and give your consent to the processing of your personal data within the limits and for the purposes indicated therein.
Data processing is carried out through: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.
The data, once entered in the appropriate FORM, are processed both by authorized staff within the school and sent and managed by the “Active Campaign” Mailing List service (https://www.activecampaign.com).
Privacy: Https://www.activecampaign.com/legal/privacy-policy.
Location of processing: USA.
Via this platform we manage the data sent. The platform allows you to unsubscribe from the Newsletter or Mailing List at any time.
Personal data will be kept for the timeframe necessary to process the request and for the duration of the subscription to the Newsletter.
The data may be transferred to non-EU countries.
The platform complies with the rules of the European Regulation on the protection of personal data.
Legal basis of the processing:
Art. 6 (1) of GDPR (processing of data following the consent of the interested party)
2.2. Data Recipients
Personal data may be disclosed to collaborators who assist us in managing requests and our back-office organisation. These collaborators are our personal data processing managers who are bound to our explicit instructions and policies, as well as by obligations of confidentiality and secrecy. Upon request, we are able to provide a list of our collaborators; our data processors. Data processing is always performed in a partially automated context.
2.3. Rights of the Interested Parties
In the cases outlined, the parties concerned are entitled to access their personal data, rectify or delete the information, as well as to limit or oppose their data processing (the right of movability) (art. 15 et seq. of the Regulation). The request must be submitted to the Data Controller.
Interested parties have the right to lodge a complaint directly with the Privacy Guarantor located at Piazza Venezia 11 (Rome).
- EXTENDED INFORMATION ON THE USE OF COOKIES
Types and purposes of processing
When accessing and using our website for purely informative purposes, e.g., without registering or providing data in any other form, the personal data collected is solely that which the browser sends to our server and which are crucial from a technical standpoint to allow viewing of our website and guaranteeing its stability and security.
3.1 Definitions
Cookies, or alternate technologies such as “pixels” (hereafter, “cookies”) are used on your computer when visiting and using our website.
Cookies are brief text files stored by the browser within a device in order to retain specific information or image files (e.g., pixels). When revisiting our website using the same device, the information saved in the cookies is transmitted respectively to our website (this refers to “First Party Cookies”) and/or to other websites to which the cookies belong (referred to as “Third Party Cookies).
3.2 Categories of cookies utilised
This website uses the following categories of cookies, the purposes and functions illustrated below:
- Technical cookies
- Functionality and Performance Cookies
More information on the categories of cookies set and used by our website can be found throughout this document.
3.2.1 Technical cookies
Technical cookies have the sole function of ensuring the transmission of communication between the user and the site on the Internet, to the extent strictly necessary for ensuring the best possible service quality. These cookies are used exclusively by us and thus defined as first party cookies.
Data collected from the cookies generated by our site is stored on servers located within Italy. Data related to cookies is managed solely within our site and not disclosed to third parties. All information collected via these cookies is accumulated and therefore anonymous. The purpose is the improvement of website functionality and the visitor’s browsing experience.
Our website’s use of this category of cookie does not require the interested party’s consent. For this reason, technical cookies cannot be individually activated or deactivated by the user. However, it is possible to deactivate cookies in your browser at any time (see below).
The legal basis of processing for technical cookie use: Art. 6(1)b GDPR (execution of a requested service).
3.2.2 Functionality and Performance cookies
Functionality cookies allow our website to store information already provided by the interested party (e.g., language selection) by offering improved and customised features based on such information. These cookies collect and store only pseudonymized information/ pseudonymous data, and do not track the user’s movements on any other websites. The IP address of the computer transmitted for technical reasons is automatically rendered anonymous and does not permit the drawing of conclusions about individual users.
This type of cookie allows the user’s recall of selections created within our site in order to provide customised features. Functionality and performance cookies are also defined as “strictly necessary” cookies in the sense of the Directive and Privacy 2002/58 EC, and as such do not require the consent of the interested party.
The legal basis of processing for category B cookies: Art. 6(1)f GDPR (processing of personal data on the basis of the Data Controller’s legitimate interest)
3.3 Third-party cookies and services
Third-party cookies are designed to create user profiles and to send advertising messages in line with the user’s expressed preferences via navigation.
The website does not directly produce profiling cookies, i.e., user profile-creating cookies which are used to send advertising messages according to the user’s expressed preferences through their web browsing choices. However, the site may contain third-party links, services, or multimedia components that may in turn generate cookies over which we cannot have direct control.
For example, the website’s third-party links and services such as links to Instagram, Facebook, and Google Maps, and the site’s use of Facebook Pixel, which may potentially place cookies on the user’s electronic device. Please note that the document’s statement on the use of cookies does not concern third-party sites accessed via the website’s portal. It is therefore advised to read the relevant privacy policies by consulting the links indicated below.
We wish to underline that the Data Controller, who in this instance is the “website publisher”, does not receive any information from the respective providers or concessionaires of third-party services, relating to any of their retrieved data. In some cases, only accumulated, and therefore anonymous, statistics will be provided, necessary only for accounting for the services of third-parties purchased by us.
The legal basis of processing for the use of these cookies: Art. 6(1)a GDPR. (data processing based on the consent of the interested party).
Google Analytics
This website uses Google Analytics, the web analysis service provided by Google Inc. (“Google”). The components of Google Analytics embedded in our site may use cookies generated directly by Google Inc’s servers and those of its partners.
Information regarding the interested party’s use of the website, generated by cookies, is typically transmitted to and stored in a US-based Google server.
As the publisher of the site, we are unable to provide sufficient information on the use of cookies by the service provider/ concessionaire.
Regarding this, please consult the following link: https://www.google.com/intl/it_ALL/analytics/learn/privacy.html
Overview of Google Analytics security and privacy standards: https://support.google.com/analytics/answer/6004245?hl=en
https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
The user can prevent cookie storage by setting browser software accordingly. In addition, it is possible to avoid the storage by Google of cookie-generated data relating to the user’s use of the website (including IP address), and the processing of such data, by downloading and installing the browser plug-in available at the following address: https://tools.google.com/dlpage/gaoptout?hl=it
We use Google Analytics to systematically analyze and improve the use of our website.
Legal basis of processing: Art.6(1)f GDPR (processing of personal data on the basis of legitimate interest of the Data Controller).
Facebook and Instagram buttons and widgets
The website contains buttons and widgets for content sharing via the Facebook social network, 1601 South California Avenue, Palo Alto, CA 94304, U.S.A. Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland, is responsible for Facebook.com in Europe. The plug-ins are customarily indicated with a Facebook and Instagram logo. By clicking on the respective button, the user accepts that their browser generates a link to the respective social network’s servers, and transmits the usage data to the respective social network operator; and vice versa. These components may use cookies generated directly by Facebook’s servers and its partners. As a publisher, we are unable to provide sufficient information on the use of cookies by the service provider/ concessionaire.
Social network providers store data collected in the manner described above for user profiling, and use this for advertising, market research and/or design of their own websites geared toward the user’s interests. The user has the right to object to user profiling, applied by contacting the respective plug-in provider.
Clicking on the link and, for example, connecting to the webpage, allows the plug-in provider to store this information in the interested party’s user account and share it publicly with their contacts. It is recommended therefore that the user log out regularly after using a social network, especially before activating the link, so as to avoid their profile being matched with the plug-in provider.
Regarding this, it is advised to visit the following links:
http://www.facebook.com/about/privacy/
https://www.facebook.com/about/privacy/cookies
Google Ads
We use the Google Ads services to bring attention to our promotions via advertising material. Google Ads stores a cookie on the user’s device that allows Google to recognise the user’s Internet browser. We do not collect or process any personal data through the aforementioned advertising measures. Solely Google’s statistical evaluations are received. These evaluations allow us to distinguish particularly effective advertising measures. We do not receive further data from the use of advertising material; in particular, we are unable identify users based on this information.
For further information on the purpose and scope of the collection and processing of data by Google, please refer to the following privacy policy. It contains further information about user rights and privacy-protection options in the settings:
https://www.google.com/intls/en/policies/privacy.
There are various ways to prevent participation in this monitoring process. These include permanently deactivating Firefox, Internet Explorer or Google Chrome in browsers at the link: http: //www.google.com/settings/ads/plugin or by setting cookie preferences to exclude them. Please note that effectuating this may compromise the full functionality of the site.
The legal basis of processing: Art. 6(1)a GDPR (processing of personal data following the consent of the interested party).
Facebook Custom Audiences (“Facebook Pixel”)
This website utilises the “Facebook Pixel” technology of Facebook’s social network for the following purposes:
- Facebook Custom Audiencies
Facebook pixels are utilised for remarketing purposes. This allows the display of advertisements of interest (“Facebook ads”) to website users when they visit Facebook’s social network or other websites also utilising this technology. In this form, our goal of displaying advertisements of interest to the user is pursued to render our website or offers more attractive.
- Facebook conversion
Facebook Pixel technology is also utilised to ensure our Facebook ads match the user’s interest. Via Facebook Pixels we are able to monitor the effectiveness of Facebook ads, for statistical and market research purposes, by observing whether users have been redirected to our website after clicking on a Facebook ad (so-called “conversion”).
Given our marketing tools, the user’s browser automatically establishes a direct connection with the Facebook server, to the extent that the user consents to the use of cookies that require consent of the interested party. Through the integration of Facebook Pixel technology, Facebook receives the information that the user has browsed our site, particular pages of it, or that the user has clicked on one of our ads. In the case that the user is registered with a Facebook service, Facebook can associate the user’s visit to our website with their Facebook account. The processing of this data by Facebook takes place within the context of Facebook’s data policy.
The Data Controller and Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook) are joint controllers in regard to the collection and transfer of data for this processing, in relation to the following purposes:
- The creation of “ad hoc” or interesting ads and their optimization
- Sending messages of a commercial nature (for example via Messenger)The processes which do not fall within the scope of joint ownership are:
- Processes taking place after the collection and transmission of data, which is the sole responsibility of Facebook
- The preparation of reports and analysis in aggregate and anonymous form is our responsibility inasmuch as it is carried out as Data Processor.
More information on how Facebook processes personal data, including the legal basis of the processing, as well as more information on the data subject’s rights, can be found here: https://www.facebook.com/about/privacy
Data transfer is granted as part of joint ownership on the basis of our legitimate interest, referred to in Article 6(1)f of the Regulation.
Further information on security measures can be found here: https://www.facebook.com/legal/terms/data_security_terms
Further information in regards to the transfer of data abroad, on the basis of standard contractual clauses, is available here:
https://www.facebook.com/legal/EU_data_transfer_addendum
To disable user’s cookie settings:
https://www.facebook.com/settings/?tab=ads#
Legal basis of processing: Art. 6(1)a GDPR (processing of personal data following the consent of the interested party).
ActiveCampaign
ActiveCampaign is a cloud software platform with headquarters in Chicago, Illinois. The company offers customer experience automation software, which combines the categories of email marketing, marketing automation, sales automation and CRM. For e-mail marketing, which involves the processing of personal contact data (such as e-mail address, surname and first name), consent is required as a basis of permission to justify the data processing and the user’s mailing list subscription.
Legal basis of processing: Art. 6(1)a GDPR (processing of personal data following the consent of the interested party).
Widget Google Maps (Google)
Google Maps is a map viewing service run by Google Inc. We utilize interactive Google maps, due to the belief that they provide a useful service in assisting visitors reach us and in indicating the school’s location.
3.4 Denial of consent: disabling site cookies
At present it is not possible to selectively disable our technical cookies. Alternatively, it is possible to deactivate these cookies completely.
With regards to third-party cookies, please refer to the links provided in previous paragraphs, for selective deactivation, wherever possible.
A user wishing to refuse consent to the installation of website-generated cookies, must customize the settings of their computer or device by setting, if applicable, the deletion of all cookies or activating a warning message when cookies are stored.
Please consult the website http://youronlinechoices.eu for further information on cookies, how they affect the user’s browsing experience and how to disable third-party cookies.
It is important to remember that disabling cookies may prevent the user utilising some, if not all, functions or sections of the site.
3.4.1. How to manage and disable user cookies on PC
For the management of cookies, it is advisable to refer to developer websites of the main browsers, as these vary continuously according to the version of the software installed, in particular:
Internet Explorer: http://windows.microsoft.com/it-it/windows-vista/block-or-allow-cookies
Firefox: http://support.mozilla.com/it-IT/kb/Cookies
Chrome: https://support.google.com/chrome/bin/answer.py?hl=it&answer=95647&p=cpn_cookies
Safari: http://support.apple.com/kb/HT1677?viewlocale=it_IT
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
The user can browse without cookies by activating the “Do not track” option in most browsers, or by activating the anonymous browsing mode.
3.5 Acceptance of cookie installation
By browsing our site without altering the settings relating to the deactivation of cookies on the user’s browser, the interested party agrees that all cookies, including those of third parties, can be installed on their device.
- PRIVACY INFORMATION FOR APPLICATIONS THROUGH WWW.LAMAISONNETTE.NET
The Data Controller provides the “Work with us” page for consultation of professional positions available in the La Maisonnette school network and reserves the right to evaluate the applications received for the purpose of selecting and recruiting personnel.
The Data Controller is La Maisonnette S.r.l. based in Viale dell’Umanesimo n. 72-74, IT-00144, Rome (E-mail: lamaisonnette@mclink.it, PEC: lamaisonnette@pec.it). Subsequently, if authorized by the interested party, the Data Controller will be the company that manages the specific headquarters of the La Maisonnette Affiliate Center seeking staff with whom La Maisonnette S.r.l. share the same information. Please refer to the page dedicated to Affiliated Centers within the website www.lamaisonnette.net to for information on the other Data Controllers.
4.1. Purpose of the processing
Personal data spontaneously communicated will be processed by La Maisonnette S.r.l. who receives the CV for the following purposes:
- a) responding to requests for information;
- b) managing Research, Personnel Selection and business contacts;
- c) exercising the rights of the owner, such as the right to defense in court.
If the Data Controller intends to process data provided for purposes other than those detailed above, the aspiring candidate must be informed of such additional purposes before carrying out this processing.
4.2. Legal bases of the processing
The legal bases lay in the art. 6 p.1 lett. b e f) of the Regulation: “the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; and “processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party”; the nature of the data processing is optional, and in its absence, the controller cannot evaluate the profile of the candidate. The consensus of the data subject is explicit by transferring the cv via e-mail, fax or the recruiting section in the website www.lamaisonnette-primaria.net.
In case of receipt of the CV by email, the information on data processing will be communicated at the first useful contact following the sending of the curriculum.
If the CV is sent via the website, the information is immediately available on the Privacy Policy page and must be read before sending.
When there is the intention to enable the communication of the data, especially if there are sensitive data in the CV, within the Affiliated Centres of La Maisonnette, it is necessary to include the following indication in the CV:
“Hereby I authorize the processing of my personal data and particular data included in my cv according to the Legislative Decree 30 June 2003, n. 196 “Rules on the protection of personal data” and the GDPR (UE Regulation 2016/679) to be communicated within the network of the Affiliated Centres of La Maisonnette”.
In the absence of the specific authorization to this regard, it will not be possible to share the CV received with the Affiliated Centres and therefore to meet possible demands within the circuit.
4.3. Processing Methods
The personal data are processed by the controller and responsible persons authorized for the adequate fulfillment of the purposes indicated in point 2) through electronic instruments and paper archives, as well as the use of security measures designed to ensure the confidentiality of personal data and to avoid unauthorized access. The controller shall not put into act automated processing, including profiling, for the achievement of the purposes included in the present document.
4.4. Data communication
The data concerning means of communication (telephone, e-mail, etc.) will be used by internal parties duly appointed. Data communication and dissemination (e.g., social networks, Internet websites, etc.,) with third parties outside of the E.U. is not envisaged.
4.5. Duration of Processing
The controller will keep the personal data for as long as it is necessary to fulfill the purposes described above and not longer than 2 years of their collection, after which the controller or an appointed person will remove the CV.
4.6. Rights of the interested party
Data subjects have the right to request access from the controller to their personal data, to ask to rectify it, to cancel, to limit the processing or to oppose for their data to be processed, as well as the right to require the portability of the data itself.
The request can be addressed to the controller to whom the CV has been sent via e-mail, fax or registered letter with the text: “PRIVACY-Requirement on behalf of the interested party” specifying the right that the subject wishes to exercise (cancellation, rectification, portability, forgotten), adding a valid email/pec address to which the reply can be delivered.
The data controller or anyone appointed by the same, will comply with the request within 30 days from the date of receipt. If the matter of the request may be judged complex, the time could be extended to a further 30 days, subject to timely communication to the interested party. If the data had been communicated to a La Maisonnette Affiliated Centre, it will be the responsibility of La Maisonnette S.r.l., who first received the CV, as the data controller, to inform the circuit of the request received.
If the aspiring candidate deems it appropriate to assert his rights, they have the right to lodge a complaint with the competent supervisory authority, corresponding to the National Privacy Guarantor, based in Piazza di Montecitorio, 121, 00186 Rome.
4.7 Data Protection Officer (DPO)
The Data Protection Officer, pursuant to art. 37 of Reg. 2016/679 / EU, is Dr. Luca Galasso based in Rome, e-mail: privacy@lamaisonnette.net.