This information notice (“Information Notice”) applies to the personal data relating to students (“Student”, “you”, “your”, as appropriate) of Rome Business School S.r.l., with registered offices in via G. Montanelli, 5, 00195, Rome, Italy, registered with the Companies Register of Rome – Italy with VAT number 12303901008 – in its quality of controller (“RBS”, “we”, “us”, “our”, as appropriate). You can contact RBS at [email protected]
We may collect the following categories of personal data:
(1) identifying data such as name, surname, place and date of birth, address of residence, ID number / passport number, etc.;
(2) contact details such as mail address, e-mail address, phone number;
(3) information on the level of education and professional life, such as educational qualification and profession;
(4) payment data such as IBAN, bank account number;
(5) income information;
(6) navigation data, such as IP addresses or the domain names of computers used by you accessing the Website, URIs (Uniform Resource Identifiers), the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the digital code indicating the state of the server’s response (successful, error, etc.) and other parameters relating to the operating system and to your IT environment;
(7) any other data provided voluntarily by the Student.
The provision of personal data for the above purposes is optional but necessary for the pursuit of the purposes listed above; failure to provide certain data might prevent us from fulfilling your requests or from pursuing the purposes above.
Personal data we process are voluntarily provided by you, while applying for one of our Masters or Bachelor, during the enrollment phase (so called “admission phase”), during the course of studies (so called “academic phase”) or after graduation (so called “career services and entrepreneurship”), and in occasion of the participation at events, bootcamps, open days, other activities organized by RBS. We may collect your personal data through the RBS website, as well as over the phone, e-mail or through any of our paper forms.
RBS will process your personal data for the following purposes:
The processing of your personal data for the purposes under point 1. and 2. does not require your consent as it is necessary in light of the contractual relationship between RBS and the Student, pursuant to Art. 6, c. 1, lett. b) of the GDPR. The processing of personal data for the purposes under point 3, 4 and 7 requires your consent. The processing of your personal data for the purpose under point 5 does not require your consent as it is necessary to comply with legal or regulatory obligations to which we are subject, pursuant to Article 6, c. 1, lett. c) of the GDPR. The processing of your personal data for the purposes set out in point 6 above does not require your consent as it is necessary for the pursuit of our legitimate interests within the meaning of Article 6 c. 1 lett f) of the GDPR.
You can check out the list of companies that form part of Grupo Planeta by clicking the following link www.planeta.es. These companies conduct their activities in the sectors of publishing, training, culture, leisure, collecting, textiles, private insurance, mass market and jewellery sectors.
Furthermore, the partners in relation to which, if applicable, we send you commercial communications belong to the same sectors as the companies of Grupo Planeta, as specified above, or in the sectors of telecommunications, banking and finance, travel, technology and legal services.
With respect to the use of your images, your consent for the processing of personal data is effective, to the extent applicable, also according to articles 10 of the Italian Civil Code and 96 of Law no. 633/1941 (Italian Copyright Law); you hence assign, without any limitations concerning territory and time, all the rights of economic exploitation of the images pursuant to article 10 of the Italian Civil Code and 96 of Law no. 633/1941, including the right to obtain, use, fix, store, reproduce, edit, assemble, display, distribute, disseminate, publish, make available, or in any case communicate to the public, in any manner or form, as a whole or in part, on a permanent or temporary basis, the images, waiving any claim and releasing RBS from any liability concerning the above, without prejudice of your reputation. You also acknowledge that no consideration shall be paid by RBS for the use of said images for the purposes above.
Please also note that, according to the specific company event, it will not always be possible for RBS to identify / delete your voice and/or image from the recording. In case you do not want your voice and/or image to be filmed and published, you shall inform the videomaker / photographer and refrain yourself from taking part in the event.
Your personal data will be stored for different periods of time depending on the purposes for which they were collected. Specifically:
(1) the data collected to manage the relationship with the Student will be kept for a period of time equal to the duration of the existing contractual relationship with you and for the following 10 (ten) years from their termination;
(2) data collected to answer your questions and process your requests for information will be retained until your request has been processed;
(3) data collected for marketing purposes will be kept for 2 years;
(4) data collected for the use of images and video will be kept as long as the consent is not withdrawn.
Data collected for the additional purposes set out above will be retained for as long as necessary to fulfil those purposes or for as long as we are required to retain it on the basis of applicable legal provisions.
Your personal data may be communicated to other companies belonging to Grupo Planeta for the purposes indicated in the “Why do we process your personal data?” section of this privacy policy. You can consult the list of companies in Grupo Planeta at the following link www.planeta.es.
Your personal data may also be communicated to employees/collaborators appointed as persons authorized to process data, as well as other subjects, appointed as data processors, and used by the Data Controller for the performance of activities that are necessary for pursuing the purposes above or to which the Data Controller is required to communicate the Data, by virtue of legal or contractual obligations.
We would like to inform you that, in the event that some of the above-mentioned parties are based outside the European Economic Area (EEA), we will transfer your personal data, in the absence of an adequacy decision and without any of the exceptions set out in Article 49 of the GDPR, on the basis of the standard contractual clauses set out in Article 46 c. 2(c) and (d) of the GDPR. .
However, you may request information about the guarantees implemented by RBS by means of a communication addressed to [email protected] .
Pursuant to articles 7(3), and 15 to 22 of the GDPR, you have the right to:
(1) be informed about the purposes and methods of the processing of your personal data;
(2) access your personal data;
(3) rectify incomplete, inaccurate or outdated personal data;
(4) obtain the erasure of your personal data, if one of the conditions set out in article 17 of the GDPR applies;
(5) obtain, in the cases provided for by article 18 of the GDPR, the restriction of the processing of your personal data;
(6) to object, in whole or in part, to the processing of your personal data carried out for the legitimate interest of the Controller; in the event of an objection, the personal data shall no longer be processed, unless there are legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims;
(7) if the conditions set out in article 20 of the GDPR are met, receive the personal data concerning you in a structured, commonly used and machine-readable format and request their transmission to another data controller, if technically feasible;
(8) where consent is required for the processing of personal data, withdraw your consent at any time, without prejudice to the lawfulness of the processing based on the consent given before withdrawal.
You may exercise your rights with RBS by sending an email to [email protected] . We also inform you that you may lodge a complaint at any time with the Italian Data Protection Authority.