Research Structure No. 2 ORGANIZATIONAL MODELS, METHODOLOGIES AND CURRICULUM
Project Code CUP: B56E24002330001
Research Line 2: School Networks for the Innovation of the Education System
Project E 2.3 – Networks for the Innovation of the School Ecosystem
Action 4 – Innovation Network – Small Schools
Survey YOUR VOICE IN THE EUROPEAN VISION FOR SMALL AND RURAL SCHOOLS
PRIVACY STATEMENT
pursuant to article 13 of (EU) Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data (hereinafter, "Regulation" or "GDPR").
The processing of personal data will be based on principles of fairness, lawfulness, transparency, confidentiality, and protection of the rights of data subjects.
This notice is provided to give you information regarding the purposes and methods of processing of your personal data provided for participation in the survey “Your Voice in the European Vision for Small and Rural Schools”.
- Data controller
The data controller is INDIRE, National Institute of Documentation, Innovation and Educational Research, based in via Michelangelo Buonarroti 10 in Florence, Italy, fax 055-2380395, email: segreteriapresidente@indire.it
- Data Protection Officer ("DPO")
The Data protection officer appointed by INDIRE, also for the purposes of exercising the rights referred to in § 8 below, can be contacted by email at dpo@indire.it
- Purpose and legal basis of data processing
The data provided will be processed for the following purposes:
- to conduct a survey aimed at validating the dimensions already explored, and at identifying teaching practices, forms of partnerships with local stakeholders, and the use of technologies and digital environments by small and rural European schools, for the purpose of drafting a European vision document on small and rural schools;
- to contribute to the creation of a European Manifesto for Small Schools within the framework of the EUN Special Interest Group “Small and Rural School”;
- to fulfil the institutional purposes of INDIRE.
The legal basis for the processing consists of the explicit consent of the data subject (Article 6, paragraph 1, letter a) of the GDPR) in order to allow participation in the initiative indicated above.
- Nature of data collected and processing methods
The personal data processed are:
- First name
- Last name
- E-mail address
Personal data of participants are collected via the LimeSurvey application hosted on web servers located at a leading cloud service provider with data centers in Italy, qualified by AgID as a Cloud Service Provider (CSP) for providing Cloud services to Public Administrations, and expressly designated as data processor pursuant to Art. 28 GDPR.
No automated processing or profiling of personal data will be carried out.
- Data retention period
Data will be stored for the time necessary to achieve the purposes for which they were collected. The data retention period does not normally exceed one year from the date of closure of the activities relating to the event.
This period is further determined to ensure proper storage of the data, whether in paper or electronic format, for the number of years defined by applicable EU and national regulations regarding the retention of administrative and accounting records.
- Provision of Data and Consequences of Refusal
Providing personal data is optional and voluntary.
- Communication and dissemination of personal data
Data may be processed by authorized INDIRE staff and/or authorized external collaborators, who are also required to maintain confidentiality and privacy. Data may be disseminated only in aggregate and anonymous form for educational research purposes.
Data may also be entrusted to Cloud Service Providers qualified by National Cybersecurity Agency (“CAN”) to provide Cloud services to Public Administrations with data centers in Italy, designated as data processors pursuant to Art. 28 GDPR.
INDIRE does not transfer personal data outside the EU.
- Rights of the data subject
At any time, the data subject may exercise, where applicable, his/her rights towards the Data Controller pursuant to articles 15-22 of EU Regulation 2016/679, and in particular the rights to:
- access to personal data;
- ask for their rectification when they have been incorrectly transcribed;
- ask for the updating and/or integration of their data when they have changed;
- ask the data controller to transform it into anonymous form or to block it;
- ask the data controller for cancellation or oblivion as appropriate;
- ask the data controller to limit the processing because, for example, some data are in excess of the purposes to be carried out;
- ask the data controller, where applicable, for portability in the sense of transferring their data to another data controller without burdens or expenses to be borne by the interested party;
- oppose the processing for legitimate reasons;
- withdraw the consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation;
- Right to Lodge a Complaint
Data subjects who believe that the processing of their personal data is in violation of Regulation (EU) 2016/679 have the right to lodge a complaint with the Italian Data Protection Authority, based in Rome, Piazza Venezia 11, as provided for by Art. 77 of the Regulation, or to seek judicial remedy under Art. 79 of the Regulation.
CONSENT
- I declare that I have fully read the information on the processing of data provided by INDIRE pursuant to Article 13 of Regulation (EU) 2016/679.
- I give my consent to the processing of personal data for the purposes set out in the information notice.
