1. Data Controller
The Data Controller is Master Training S.r.l. (“Master Training”), with registered office in Correggio (RE), Via Timolini 18, 42015, VAT no. 01932770355, telephone 0522-1590100, email info@mastertraining.it, PEC certified email mastertraining@pec.it.2. Subject of the data processing
The subject of the processing is common identifying information such as first name, surname, email address, telephone number, IP address, device data, access logs, session data.3. Purposes and legal basis for the data processing
Your personal data are collected and processed by the Data Controller for the following purposes:- Registration and profile creation.
- Execution of the services and functions of the App.
- Fulfilment of legal obligations.
- Process any requests for assistance.
- To pursue the legitimate interests of the Data Controller, provided that the interests or the fundamental rights and freedoms of the data subject are not overridden, having regard to the reasonable expectations of the data subject based on their relationship with the Data Controller, and in particular for the prevention of fraud, to the extent strictly necessary and proportionate to ensure network and information security.
4. Provision of data
Providing the data for the purposes referred to in point 3 is necessary to use the services requested and to pursue what is indicated therein.5. Methods of processing
Your personal data will be processed with or without the aid of computers. The Data Controller commits to guarantee the logical and physical security and confidentiality of the personal data processed, implementing all technical and organisational measures appropriate to the processing.6. Data retention
Your personal data for the purposes set out in point 3 will be processed and retained for as long as necessary to pursue the purposes they were collected for, and in any case for as long as required by law.At the end of the retention period, your data will be erased and/or anonymised for statistical purposes.
7. Categories of recipients
Your personal data are accessible to:- Employees and/or contractors of the Controller as persons authorised to process data or system administrators.
- Service providers carrying out outsourced operations on behalf of the Data Controller in their capacity as specially designated external data processors, which perform operations related, instrumental to or supporting those of the Data Controller, e.g. technical support. The full list of Data Processors is available at the Data Controller's registered office.
8. Data Transfer
There are no transfers of data to countries outside the EU or to international organisations. If in order to perform the functions and services of the App the Data Controller has to transfer your personal data to countries outside the EU, it will adopt all the appropriate safeguards envisaged in articles 44 et seq. of the GDPR, including adequacy decisions and standard contractual clauses approved by the European Commission.9. Rights of the Data Subject
In accordance with articles 15 to 21 of the GDPR, you may at any time exercise the rights set out therein, specifically:- Right of access (article 15 of the GDPR), to obtain confirmation as to whether or not your personal data are being processed, and if so receive information relating to: the purposes of the processing, the categories of personal data processed and the storage period, the recipients to whom the data may be disclosed.
- Right to rectification (article 16 of the GDPR), to obtain the correction of erroneous personal data and/or the completion of incomplete personal data without undue delay.
- Right to erasure (article 17 of the GDPR), to obtain the deletion of personal data concerning you without undue delay in the cases envisaged by the GDPR.
- Right to restriction of processing (article 18 of the GDPR), to obtain the restriction of processing by the Data Controller in the cases envisaged by the GDPR.
- Right to data portability (article 20 of the GDPR), to receive your personal data provided to the Data Controller in a structured, commonly-used and machine-readable format, as well as to have them transmitted to another data controller without hindrance in the cases envisaged by the GDPR.
- Right to object (article 21 of the GDPR), objecting to the processing of your personal data, unless the data controller has legitimate reasons to continue the processing.
You may also lodge a complaint with the Personal Data Protection Authority (www.garanteprivacy.it).