Informativa Applicant Paris

Istituto Marangoni France SAS, as Data Controller, wishes to inform you about the personal data it collects and how it is processed, in order to guarantee the protection of your fundamental rights and freedoms, with particular regard to the confidentiality and security with which such data is handled.

Istituto Marangoni France SAS collects and stores your data, including:

• Personal and identification details (such as first name, surname, residential address, email address, chosen courses of interest, nationality, gender, place and date of birth, telephone number, a copy of your identity document);

• Personal bank account and/or the bank account of the person making the payment;

• Educational background/CV.

Data is collected at the time of enrolment and/or subsequently, through the following channels:
a) Completion of the online form;
b) Forms completed during accreditation at Istituto Marangoni Open Days;
c) Other events organised on our campus or at external venues. We may also request social media platforms to send information about our courses based on user profiles, in accordance with their data processing policies, though we do not receive your name in this context.

Istituto Marangoni France SAS processes your data for the following purposes:
a) To enable you to enrol on your chosen course and to provide related services;
b) To register you for events connected with your training plan;
c) To respond to your information requests.

For purposes (a), (b) and (c), processing is necessary for the performance of a contract to which you are party (Art. 6(1)(b) GDPR).

d) To exercise the rights of the Data Controller.
For purpose (d), processing is necessary for the pursuit of a legitimate interest (Art. 6(1)(f) GDPR).

e) To contact you and send you information about our courses by email or telephone, following your requests;
f) To send you information and updates about Istituto Marangoni and your membership via WhatsApp;
g) For profiling purposes.

For purposes (e), (f) and (g), the lawful basis of processing is your consent (Art. 6(1)(a) GDPR).

For purposes (a) and (b), we retain your personal data for the duration of the contractual relationship and for six years thereafter, to comply with legal obligations and for legal defence purposes.
For purposes (c) and (d), your data will be retained for no longer than 12 months after collection.
For purposes (e), (f) and (g), we retain your data for up to 3 years, subject to your right to withdraw consent at any time.

Once the specified retention period has expired, data will be deleted or anonymised.

Please note: in the event of a dispute, if necessary to establish, exercise, or defend the rights of the Data Controller, retention may be extended until the conclusion of the proceedings.

Your data will be processed in ways designed to ensure confidentiality, integrity, and availability. Processing is carried out by means of IT systems and/or automated tools and includes all operations set out in Art. 4 of the GDPR, including communication to persons authorised to process data. Your data will not be disclosed but may be communicated to public or private entities within the scope of the above purposes.

Only authorised individuals within Istituto Marangoni France SAS, including those outside the European Union, may access your data. Istituto Marangoni France SAS is part of Galileo Global Education France. Employees of Galileo Global Education, as well as employees of NABA (Nuova Accademia di Belle Arti) and Domus Academy (all part of Galileo Global Education Group), may also have access to certain data.

Your personal data will never be disclosed but may be communicated and processed by duly appointed third-party processors, such as external collaborators and service providers. Data may also be disclosed where required by law or EU regulations.

Your personal data will be managed and stored on servers located within the European Economic Area (EEA), owned either by the Data Controller or by duly appointed third-party processors. Data may also be processed by other Istituto Marangoni Group companies outside the EEA, subject to appropriate safeguards to ensure adequate protection.

Where third-party processors transfer data outside the EEA, this will be done in compliance with Articles 44 et seq. of the GDPR, with suitable guarantees. Further details can be obtained from the Data Controller.

Providing your data for purposes (a), (b), (c) and (d) is necessary to conclude and perform the contract. For purposes (e), (f) and (g), it is optional; if you do not consent, we will be unable to inform you about our initiatives, events, and courses.

In accordance with the GDPR, you have the following rights:

• Right to withdraw consent [Art. 7(3) GDPR];

• Right of access [Art. 15 GDPR];

• Right to rectification [Art. 16 GDPR];

• Right to erasure (“right to be forgotten”) [Art. 17 GDPR];

• Right to restriction of processing [Art. 18 GDPR];

• Right to data portability [Art. 20 GDPR];

• Right to object [Art. 21 GDPR];

• Right not to be subject to automated decision-making [Art. 22 GDPR].

These rights may be exercised in writing by emailing: dpo@istitutomarangoni.com. This contact may also be used for further information regarding the processing of your personal data.

Istituto Marangoni France SAS will respond within one month, extendable to three months in complex cases, with reasons for any delay provided within one month. Responses will be given in writing or electronically, free of charge unless requests are manifestly unfounded, excessive, or repetitive.

In accordance with Art. 19 GDPR, Istituto Marangoni France SAS undertakes to inform recipients of any rectification, erasure or restriction of processing, unless this proves impossible.

If you believe your rights have been infringed or that your data is processed unlawfully, you have the right to lodge a complaint with the French Data Protection Authority (CNIL) via: https://www.cnil.fr/fr/agir/saisir-la-cnil.

The Data Controller is: Istituto Marangoni France SAS – 48 Rue de Miromesnil, 75008 Paris, France.
Email: privacy@istitutomarangoni.com
The Data Protection Officer (DPO) can be contacted at: dpo@istitutomarangoni.com.

This policy may be amended. Any significant changes will be communicated to you by email or via our website.