Informativa Applicant Paris

Istituto Marangoni France SAS, as the data controller, wishes to inform you about the data it collects and how it does so, in order to guarantee respect for your fundamental rights and freedoms, with particular emphasis on the confidentiality and security with which the data is processed.

Istituto Marangoni France SAS collects and stores your data:
• Personal and identification information (such as surname, first name, residential address, email address, courses of interest, citizenship, gender, place and date of birth, telephone number, a copy of your identity document);
• Personal bank account and/or bank account of the person making the payment;
• Educational background/curriculum vitae.

The data is collected at the time of registration and/or subsequently, through the following channels:
a) Completion of the online form.
b) Forms collected during accreditation at the Istituto Marangoni Open Day.
c) Other events organised on our campus or other locations. We may ask social networks to send information about our courses based on their users' profiles and in accordance with their data processing policy, but we are not informed of your name.

Istituto Marangoni France SAS uses your data for specific purposes:

a) To enable you to enrol in the course of your choice, as well as to provide related services.
b) To accredit you for events related to your training plan.
c) To respond to your requests for information
With regard to purposes 3 a), b) and c), processing is necessary for the performance of a contract to which you are a party (Art. 6(1)(b) GDPR).

d) To exercise the rights of the data controller.
For purpose d), processing is necessary for the pursuit of a legitimate interest (Art. 6(1)(f) GDPR).

e) To contact you and send you information about our courses by email or telephone, following your requests.
f) To send you information and updates about Istituto Marangoni and your membership via WhatsApp.
g) For profiling purposes.
For purposes e), f) and g), the legal basis for processing is your consent (Art. 6(1)(a) of the GDPR).

For the purposes mentioned in point 3 (a) and (b) above, we retain your personal data for the entire duration of the contractual relationship and beyond the six-year limitation period from the termination of the relationship, in order to comply with legal obligations and for legal protection reasons.

For the purposes mentioned in point 3 (c) and (d), Istituto Marangoni will retain your data for a period not exceeding 12 months after collection.

For the purposes mentioned in point 3 (e), (f), (g), we retain your data for a period of up to 3 years, without prejudice to your right to withdraw your consent at any time.

When a time limit is specified, once it has expired, the data will be destroyed or anonymised.

Please note: In the event of a dispute, if it is necessary to establish, exercise or defend the rights of the data controller, the retention period for the data collected for the above-mentioned purposes may be extended due to the need to prepare a defence within that period. In this case, the data will only be retained until the dispute is resolved.

Your data will be processed using methods that guarantee its confidentiality, integrity and availability. Processing is carried out using information systems and/or automated systems and will include all the operations or set of operations referred to in Article 4 of the GDPR and necessary for the processing in question, including communication to the persons responsible for the processing itself. The data in question will not be subject to dissemination; on the contrary, it will or may be communicated to public or private entities operating within the scope of the purposes described above.

Only persons authorised within the scope of the tasks assigned by Istituto Marangoni France SAS, including those located outside the European Union, may access your data. Istituto Marangoni France SAS is part of Galileo Global Education France. Employees of Galileo Global Education, as well as employees of NABA (Nuova Accademia Belle Arti) and Domus Academy, which belong to the same Galileo Global Education group, may also have access to some of your data. Personal data will not be disclosed under any circumstances; it may also be communicated and processed by third parties duly designated as processors, such as external collaborators and companies providing specific services.

Personal data may also be accessible or communicated to parties whose right to access your personal data is recognised by legal provisions, secondary legislation or European Union regulations.

Your personal data will be managed and stored on servers located in the European Economic Area (EEA) and belonging to the data controller and/or third-party companies designated and duly identified as data processors. Your data may also be processed by other companies belonging to the Istituto Marangoni group, located outside the European Economic Area (EEA), adopting appropriate security measures to ensure an adequate level of protection. In addition, certain third-party companies designated as processors may transfer your personal data to servers located outside the European Economic Area (EEA). In this case, this will be done in accordance with Articles 44 et seq. of the GDPR, using appropriate safeguards to ensure protection. Further information on these safeguards can be obtained from the data controller.

The provision of your data in points 3 (a), (b), (c) and (d) is necessary for the conclusion and performance of the contract. For points 3 (e), (f) and (g), it is optional; if you do not consent, you will not be able to be informed of our initiatives, events and courses that we will activate.

In accordance with the provisions of the GDPR, Istituto Marangoni France SAS guarantees the following rights:
• Right to withdraw consent [Art. 7(3) of the EU Regulation] (Right to withdraw consent given. Note: withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal).
• Right of access by the data subject [Art. 15 of the EU Regulation] (right to obtain confirmation of the existence or non-existence of personal data concerning him/her and a copy thereof in an intelligible form).
• Right to rectification [Art. 16 of the EU Regulation] (right to rectify inaccurate personal data concerning him/her).
• Right to erasure (‘right to be forgotten’) [Art. 17 of the EU Regulation] (right to erasure of his/her own data. Note: If the data has already been disseminated, i.e. made available to an indeterminate number of recipients - for example, by publication on the Istituto Marangoni France SAS website - it may be impossible for Istituto Marangoni France SAS to delete/destroy it; therefore, if it is impossible to delete the data in accordance with the above, Istituto Marangoni France SAS will inform you of the reasons why it is impossible to do so in this case and will continue to uphold the right to be forgotten).
• Right to restriction of processing [Art. 18 of the EU Regulation] (right to obtain restriction of processing, for example, if the accuracy of the data is contested or in the event of unlawful processing).
• Right to data portability [Art. 20 of the EU Regulation] (right to receive personal data concerning him/her provided to Istituto Marangoni France SAS in a structured, commonly used and machine-readable format and right to transmit those data to another controller without hindrance by Istituto Marangoni France SAS if the processing is based on consent and is carried out by automated means).
• Right to object [Art. 21 of the EU Regulation] (right to object to the processing of personal data).
• Right not to be subject to automated decision-making [Art. 22 of the EU Regulation] (right not to be subject to a decision based solely on automated processing).

The above rights may be exercised in writing by sending an email to dpo@istitutomarangoni.com. The same contact person may be contacted at any time for further information regarding the processing of personal data. It should also be noted that the exercise of these rights must not infringe upon and/or violate the rights and freedoms of others.
Istituto Marangoni France SAS undertakes to respond to requests within one month, except in the case of particularly complex requests, for which it may take up to three months. In any case, Istituto Marangoni France SAS will explain the reason for the delay within one month of the request.
The result of the request will be provided in writing (at the request of the interested party) or in electronic form (and, in this case, free of charge). Istituto Marangoni France SAS specifies that a contribution may be requested from the interested party if their requests are manifestly unfounded, excessive or repetitive: in this regard, Istituto Marangoni France SAS will follow up on the requests.
Istituto Marangoni France SAS, in accordance with Article 19 of the EU Regulation, undertakes to inform the recipients to whom the personal data of the interested party has been communicated of any rectification, erasure or restriction of processing requested by the interested party, where possible.

If you believe that your rights have been compromised or violated, or that the processing of your data is contrary to applicable law, you have the right to lodge a complaint with the Data Protection Authority, in accordance with the procedure specified by the Authority at the following Internet address: https://www.cnil.fr/fr/agir/saisir-la-cnil.

The data controller is: Istituto Marangoni France SAS - 48 Rue de Miromesnil, 75008 Paris, France. Email: privacy@istitutomarangoni.com The data protection officer can be contacted at the following email address: dpo@istitutomarangoni.com.

This policy is subject to change. Any significant changes will be communicated to you by email or via our website.