PRIVACY STATEMENT
Pursuant to article 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as " Regulation "or" GDPR ")
The processing of personal data will be based on the principles of lawfulness, fairness and transparency and protection of the privacy and rights of the data subjects.
All personal data are collected and processed in compliance with national and EU data protection laws.
1. Data Controller and Data Protection Officer
The Data Controller is INDIRE, Italian Institute for Documentation, Innovation and Educational Research, with registered office in Florence, Italy, 50122, Via Michelangelo Buonarroti 10, fax 055-2380395, and operational headquarters in Florence, Via Cesare Lombroso 6/15, certified electronic mail (so called “PEC”) indire@pec.it.
Data Protection Officer ("DPO")
Pursuant to article 37 of the Regulation, the Data Controller has appointed a Data Protection Officer which can be contacted at the email address dpo@indire.it.
2. Purposes and legal basis for the processing of personal data
The personal data, if any, will be processed for the following purpose:
analysis of a questionnaire and elaboration of its results within a Research Project titled “Language teaching, learning and assessment” carried out in collaboration with the European Commission. The questionnaire is relevant for the current policy discussion at international and national level, on language learning, teaching and assessing and answers will provide useful input in this context.
The data will be collected and analyzed anonymously by INDIRE and shared through a report which will be written by INDIRE in cooperation with the European Commission and will be used in part of the support for the implementation of the Council Recommendation on a comprehensive approach to the teaching and learning of languages.
The legal basis for the data processing consists is the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (art. 6, paragraph 1, e) GDPR).
3. Processing methods
Any personal data collected through the research questionnaires will be processed mainly with automated IT procedures on servers located at the INDIRE offices on the Italian territory. Electronic data may also be stored in the SPC CLOUD (Public Connectivity System) for Italian Public Administrations. The data may also be processed non-electronically, with the help of manual tools.
Automated processing or profiling of the personal data provided are not carried out.
4. Data retention period
The data will be kept for the time necessary to achieve the purposes for which they were collected.
The data retention period cannot be less than the duration of the above mentioned Project. This period is determined in such a way as to guarantee the correct conservation of the data on paper or IT support for the period of time defined by the EU and national regulations in force on the conservation of administrative and accounting documentation.
5. Providing data and consequences of a possible refusal
The compilation of the questionnaire and participation in the research carried out by INDIRE in collaboration with the European Commission is optional and takes place on a voluntary basis. Failure to provide data prevents you from contributing to the research activity and from participating in the aforementioned Project.
6. Communication and dissemination of personal data
The data may be processed by authorised INDIRE personnel (e.g. staff of the competent research structure, etc.) by authorised external collaborators, who are required to respect confidentiality and privacy and may be disclosed and communicated to other subjects only in aggregate and anonymous form for statistical or research purposes or in any case for the implementation of the research project. The data may be communicated to the European Commission or to third-party companies operating in the ICT sector.
There is no transfer of personal data processed to non-EU countries.
7. Rights of the data subjects
Pursuant to articles 15-22 of Regulation (EU) 2016/679, the data subjects have the following rights with regards to their personal information:
• the right to be informed about the collection and the use of their personal data;
• the right to access personal data and supplementary information;
• the right to have inaccurate personal data rectified, or completed if it is incomplete;
• the right to erasure (to be forgotten) in certain circumstances;
• the right to restrict processing in certain circumstances;
• the right to data portability, which allows the data subject to obtain and reuse their personal data for their own purposes across different services (where applicable);
• the right to object to processing in certain circumstances;
• rights in relation to automated decision making and profiling;
• the right to withdraw consent at any time (where relevant).
Finally, as data subject, you have a specific right to lodge a complaint with the Italian Data Protection authority, based in Rome, Piazza Venezia n. 11.
