EXTENDED INFORMATION ON PERSONAL DATA

PURSUANT TO ART. 13 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT "GDPR"

Dear Sir/Madam, pursuant to Article 13 of EU Regulation 2016/679 and in relation to the information you will acquire, for the purposes of protecting individuals and other subjects regarding the processing of personal data, we inform you of the following:

1.0 Owner, Data Controllers

The data controller is Idee Insieme-Societa Cooperativa Sociale, with headquarters at Via Santa Brigida, 51, 80133 Naples (Naples). You may also exercise your rights by sending communications to the following email address: privacy@ideeinsieme.it or certified email: ideeinsieme@pec.ideeinsieme.it

2.0 Purpose and legal basis of the processing

The personal data you provide may be processed solely for the following purposes:

• registration for training courses
• managing applications in response to job offers published on our website
• Collection and dissemination of CVs to match job supply and demand
• purposes related to the establishment, management and termination of the contractual and training relationship
• registry management
• execution of the service requested by you
• sending service communications
• fulfill legal obligations and comply with requests from higher authorities
• verification and control of physical and IT access, enabling and disabling electronic badges and passwords;
• marketing activities and/or commercial communications, including interactive communication, market research and statistical studies carried out via email, SMS and MMS, invitations to recreational or cultural activities and/or events organised by the Company for which you may give your consent

The data you provide may also be used for subsequent job selections, unless you expressly agree otherwise. Videos or photos may be taken during the courses and published on various social media platforms, unless you expressly agree otherwise.

3.0 Treatment methods

The processing of your personal data is carried out using the operations indicated in Article 4 of the Privacy Code and Article 4(2) of the GDPR, specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure, and destruction of data. All operations are performed using computerized procedures. The processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures adopted at the data subject's request. After registering, you will be asked to upload your CV to the platform. We invite you to provide your written consent to the processing of your data ("I authorize the processing of my personal data contained in my CV pursuant to Legislative Decree no. 196 of 30 June 2003 and the GDPR (EU Regulation 2016/679)"), as well as consent to the use of your email address for the purpose of sending recruitment or promotional communications related to this activity or the execution of any contractual relationship. We also invite you to omit any sensitive or irrelevant data in relation to the specific purposes for which they were provided. The data provided may be used by the Data Controller within group companies and shared with them pursuant to specifically stipulated agreements, and this is expressly acknowledged. The processing is necessary for the proper performance of the requested activity. No further processing based on the legitimate interests pursued by the data controller is envisaged.

4.0 Types of data processed

Common data, such as, for example:

• data contained in the registration forms (name, surname, tax code, place and date of birth, physical and electronic address, landline and/or mobile telephone number, data relating to your professional career, data and photo contained in your CV);
• billing information

5.0 Communication and dissemination of data

Personal data will be processed by internal staff at our office, authorized/appointed to process data and appropriately trained in personal data security and privacy rights. Personal data may be communicated and transferred in whole or in part:

• Forma.Temp (Training Fund)
• Capitali Umani srl is a firm/company that handles administrative/accounting management.
• to associations representing employment agencies, temporary workers' trade unions and trade union confederations;
• to the law firm that supports the administration in the event of any legal disputes;
• to Public Administrations in general for the performance of institutional functions within the limits established by laws and regulations

These entities will process the data in their capacity as independent data controllers. Your data will not be disclosed and will be used within the limits indicated in this policy.

6.0 Data retention

Your data will be retained for 10 years. Beyond this period, it will be retained only as long as it is necessary for the indicated processing purposes and to protect your interests, unless you explicitly request deletion. It may be anonymized and retained at the Company's discretion for an indefinite period. Access to data: Your data may be made accessible for the purposes referred to in Articles 2.A) and 2.B) to Data Processors and Data Processors;

7.0 Transfer Abroad

The transfer of your personal data is not foreseen.

8.0 Rights of the interested party

At any time, you may exercise, pursuant to Articles 15 to 22 of EU Regulation no. 2016/679, the right to:

• ask for confirmation of whether or not personal data concerning you exists;
• obtain information regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed and, where possible, the retention period;
• obtain the rectification and erasure of data (right to be forgotten);
• obtain treatment limitation;
• obtain data portability, i.e. receive data from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance;
• object to the processing at any time, including in the case of processing for direct marketing purposes;
• object to automated individual decision-making, including profiling
• request access to your personal data and the rectification or erasure of the same or the limitation of the processing concerning you or to object to their processing, in addition to the right to data portability;
• withdraw consent at any time without affecting the lawfulness of processing based on consent given before its withdrawal;
• lodge a complaint with a supervisory authority.

9.0 Right of rectification

The data subject has the right to obtain from the data controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by providing a supplementary statement.

10 Ways to exercise the right to be forgotten

The data subject has the right to obtain the erasure of personal data concerning him or her without undue delay, and the data controller has the obligation to erase personal data without undue delay if one of the following grounds applies:

• the data are no longer necessary for the purposes for which they were collected or processed
• the data subject has withdrawn consent and there is no other legal basis for the processing;
• the data subject objects to the processing of the data and there are no overriding legitimate grounds for continuing such processing, or the data subject objects to the processing pursuant to Article 21, paragraph 2;
• The data has been processed unlawfully: in the event of any violation of personal data protection legislation, the data controller may no longer use the information, and each data subject may request its deletion.
• the personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
• personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1

11 Right to restriction of processing

The data subject has the right to obtain from the data controller restriction of processing where one of the following applies:

• the data subject contests the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data;
• the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
• even if the data controller no longer needs them for the purposes of the processing, the personal data are required by the data subject for the establishment, exercise or defence of legal claims;
• the data subject has objected to the processing pursuant to Article 21, paragraph 1, pending the verification whether the legitimate grounds of the data controller override those of the data subject.

Where processing has been restricted under paragraph 1, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

12 Right to data portability

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and shall have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

• the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b); and the processing is carried out by automated means.
• In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
• The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
• The right referred to in paragraph 1 shall not adversely affect the rights and freedoms of others.

13 Right to object

• The data subject has the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her pursuant to Article 6, paragraph 1, letters e) or f), including profiling based on those provisions. The data controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.
• Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.
• If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.
• The right referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the data subject and shall be presented clearly and separately from any other information at the latest at the time of the first communication with the data subject.

14 Right to withdraw consent

If the processing is based on the data subject's consent, he or she has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

15 Right to lodge a complaint with the supervisory authority

• Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if he or she considers that the processing of personal data relating to him or her infringes this Regulation.
• The supervisory authority to which the complaint has been submitted shall inform the complainant of the status or outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78.

16 How to use the service

By entering data, the user guarantees to provide accurate and complete information and agrees to update this information as necessary through their personal area. If Idee Insieme-Societa Cooperativa Sociale determines that the data entered by the user is inaccurate, incomplete, or out of date, it reserves the right to disable the user's use of the service. The user is responsible for maintaining the confidentiality of their password and for all activities related to it. The user is required to immediately notify Idee Insieme-Societa Cooperativa Sociale if they become aware of any unauthorized use of their password. The user agrees to comply with all local and international laws. The user agrees not to use the service for illegal, inappropriate, defamatory, abusive, threatening, vulgar, or obscene communications. The user further agrees not to use any material that in any way invades, infringes, or violates the personal or intellectual property rights of others, and assumes personal responsibility should this occur. To this end, in compliance with the privacy code and cookie policy, Idee Insieme-Societa Cooperativa Sociale collects the IP address of the computer from which the communication originated upon registration. This allows us to identify the perpetrator of any fraudulent behavior, reserving the right to notify the relevant authorities in such cases. Idee Insieme-Societa Cooperativa Sociale is not responsible for the content, information, and data provided on the site, which are purely indicative, and for links to other websites that may be present on ideeinsieme.it.

17 Updating information

Idee Insieme-Societa Cooperativa Sociale reserves the right to update the terms of use of the site. For further information, please email privacy@ideeinsieme.it.

18 Rules for using the newsletter

Users who subscribe to the Idee Insieme-Societa Cooperativa Sociale "Newsletter" information service via email agree to receive, according to the methods and timeframes established by the undersigned company, an email containing information about the latest job offers and training opportunities on the site or, in any case, information deemed to be consistent with the mission of Idee Insieme-Societa Cooperativa Sociale.

19 Confidentiality of access parameters

The User ID and Password are strictly personal and cannot be shared with third parties. The holder is responsible for the careful storage of these data. Idee Insieme-Societa Cooperativa Sociale will send the User ID and Password to the email address provided during registration. Candidates are therefore required to enter an email address to which they have exclusive access. For greater security in the storage of confidential data, when choosing a User ID and Password, Idee Insieme-Societa Cooperativa Sociale strongly recommends avoiding settings that could be linked to the candidate registering.

19. How to exercise your rights

You may exercise your rights at any time by sending: a registered letter with return receipt to Idee Insieme-Societa Cooperativa Sociale with headquarters at Via Santa Brigida, 51. 80133. Naples (Na) or a certified email to the address: ideeinsieme@pec.ideeinsieme.it