Privacy Policy Projects
OSSERVATORIO PERMANENTE GIOVANI-EDITORI PUBLISHERS
Information for data subjects pursuant to Art. 13 of the European General Data Protection Regulation (GDPR) no. 679/2016 – Projects for schools
Data
Data Controller
The Data Controller is Osservatorio Permanente Giovani– Editori (hereinafter "OPGE"), viale Guidoni 95 – 50127 Florence, tel. +39 055 417373
E-mail references: privacy@osservatorionline.it - Pec: osservatorionline@pec.it
Contact details of the Data Protection Officer (DPO)
To date, the Association, having carried out the appropriate assessments, has identified the Data Protection Officer (DPO or DPO for short), who can be contacted at the following e-mail address: dpo@osservatorionline.it
Data Processors
The data processors, as defined and governed by art. 28 of the GDPR, are indicated in a special list available at the OPGE headquarters and can be requested in writing using the references indicated here.
Nature of the data processed
1. Common Data:
- name and surname
- mobile phone number
- e-mail address
-sex
- place and date of birth
Legal bases of processing
The legal bases of the processing (without prejudice to the legal and regulatory requirements to which the data controller is subject) are identified as:
Application for registration within the Daily in Class Project and/or Young Factor and related participation in the competition activities and/or various contexts promoted therein
Sending information relating to projects, events, contests and activities similar to and/or similar to the projects mentioned above.
Specific legal and/or regulatory provisions of the sector to which OPGE belongs
Instances and/or requests submitted by you to OPGE
Purpose of the processing
Basic Purpose
a) purposes connected and instrumental to the management of the contractual relationship and the management of the related obligations (correct management of your position in general: training and for all institutional/participatory activities in general inherent to the existing relationship);
b) purposes functional to the release of information and all other activities connected with and/or to support the performance of the Daily in Class Project and/or Young Factor - including, but not limited to, those functional to the performance of ancillary services necessary for the provision of the service (e.g. notices and communications; etc.);
c) functional purposes for the release of information and all other activities connected with and/or in support of the performance of projects, activities, contests similar and/or similar to the Daily in Class Project and/or Young Factor;
d) purposes connected and instrumental to the fulfilment of obligations provided for by laws, regulations and EU legislation;
e) purposes aimed at enforcing rights also by third parties in judicial, arbitration, administrative proceedings in compliance with regulatory limitations.
Other purposes
Processing methods
The processing of your data is carried out using paper and automated tools, with methods and tools strictly related to the purposes indicated above and, in any case, in such a way as to guarantee the security and confidentiality of your data. In case you want to obtain further information, we remind you of the rights that are guaranteed to you as specified below.
Protection of minors
Given that minors must be guaranteed enhanced protection in terms of confidentiality, it should be noted that consent for the processing of data of minors under the age of 16 should in any case be formalized by their parents or guardians. Minors must always ask their parents' permission before submitting their registration. In any case, if the undersigned ascertains that it is in possession of personal information relating to a minor without due consent, it will immediately delete the information in its archives. Should untruthful data be provided, the undersigned association is considered indemnified from any responsibility and/or claim without prejudice to the checks to which it undertakes.
Provision of data
The provision of personal data to the data controller represents an obligation on the part of the data subject only and to the extent that they are necessary to respond, provide indications, provide services (e.g. registration for the contest and ancillary activities related to it); in the event that the personal data are not released, the owner would be unable to comply. The same applies to the data that the data controller is obliged to acquire in order to comply with legislative and/or regulatory obligations. The optional insertion of data to obtain specific services and/or communications and information involves the subsequent acquisition of the sender's address/reference, necessary to respond to requests or to provide the services, communications and information requested, as well as any other personal data entered.
Categories of recipients of personal data
Your data in general may be communicated by us, with this term meaning to make it known to specific parties or to be hosted on the servers of third parties used by OPGE for the development and implementation of various services, in the following terms:
to subjects who can access the data by virtue of legal provisions, regulations or EU legislation, within the limits provided for by these rules;
to subjects who need to access your data for purposes auxiliary to the relationship between you and us, within the limits strictly necessary to carry out the related tasks (public security subjects and other public and private subjects for the fulfilment of obligations provided for by law, including administrative, financial and similar obligations)
to employees of OPGE operating under the authority and on the basis of the instructions provided by the same in accordance with the law
the company that provides the Data Controller with the server hosting service for the website as well as that of CRM (HubSpot);
to subjects who collaborate with OPGE for the organization and/or performance of educational activities, competitions and/or in any case limited to the Daily in the Classroom Project and/or Young Factor (by way of example and not limited to: newsstands, newspapers, communication agencies, publishing agencies, etc.);
to our consultants, within the limits necessary to carry out their task in favor of our organization, in compliance with the laws and regulations in force;
to subjects experienced in graphics and advertising (e.g. for the development of brochures, company presentations, etc.);
to system administrators specifically appointed by the undersigned in compliance with regulatory requirements.
NB: the data will not be communicated to third parties for their marketing purposes.
Transfer outside the EU
The data controller: does not intend to transfer personal data to non-EU countries.
Retention period
Your personal data will be stored in our archives for the purposes mentioned here and on the basis of your authorizations for the period deemed appropriate, i.e. 10 years from the date of registration within the portal. This is without prejudice to the lawfulness of the processing based on the authorization issued before the withdrawal.
Complaint to the Supervisory Authority
You can lodge a complaint with the supervisory authority:
- in Italy (where the national authority is competent) whose form can be downloaded from the link: www.garanteprivacy.itin the dedicated section;
- outside Italy on the basis of the specific instructions of the EU Member State:
of habitual residence,
working
of the place where the alleged violation occurred
Your rights
Right of access: You can receive a copy of the personal data being processed at any time.
Right to limitation: this can be exercised not only in the event of violation of the conditions of lawfulness of the processing but also in the event that you request the rectification of the data or object to the processing; the Data Controller undertakes to mark the data in question during the period of its assessment of what to do by means of appropriate organisational measures for this purpose.
Right to rectification: You can obtain the rectification of inaccurate personal data concerning you without delay and you can also obtain the completion of incomplete personal data also by providing a supplementary statement.
Right to object: you can object at any time, for reasons related to your particular situation, to the processing of personal data concerning you, even if used for direct marketing and/or profiling.
Right to withdraw consent where given for example for marketing and similar purposes.
Right to erasure (oblivion): You can request the deletion of data in enhanced form, for example even after the data subject has withdrawn his or her consent to the processing of personal data.
Right to portability: it does not apply to non-automated processing, i.e. to paper archives and/or registers; moreover, only data that are provided by the data subject to the Data Controller and processed with the latter's consent or on the basis of a contract entered into with the Data Controller are portable.
Time limit and methods of replying to data subjects
We represent that if you exercise your rights, the Data Controller must provide a written response, also through electronic tools that facilitate accessibility (orally only at the express request of the data subject) within 1 (one) month, which in cases of particular complexity can be extended to 3 (three) months, without prejudice to the obligation to provide feedback within one month of the request, even in the event of refusal.
The Data Controller, having assessed the complexity of the request made by the data subject, may establish the amount of any contribution to be requested, but only if the requests are manifestly unfounded or excessive.
To exercise these rights, you can contact OPGE using the following references
Registered office
viale Guidoni 95 – 50127 Florence
Telephone
+39 055 417373
PEC
osservatorionline@pec.it
PERMANENT OBSERVATORY OF YOUNG PUBLISHERS
Information for data subjects pursuant to Art. 13 of the European General Data Protection Regulation (GDPR) no. 679/2016 – Projects for schools
Data
Data Controller
The Data Controller is Osservatorio Permanente Giovani – Editori (hereinafter "OPGE"), viale Guidoni 95 – 50127 Florence, tel. +39 055 417373
E-mail references: privacy@osservatorionline.it - Pec: osservatorionline@pec.it
Contact details of the Data Protection Officer (DPO)
To date, the Association, having carried out the appropriate assessments, has identified the Data Protection Officer (DPO or DPO for short), who can be contacted at the following e-mail address: dpo@osservatorionline.it
Data Processors
The data processors, as defined and governed by art. 28 of the GDPR, are indicated in a special list available at the OPGE headquarters and can be requested in writing using the references indicated here.
Nature of the data processed
1. Common Data:
- name and surname
- mobile phone number
- e-mail address
-gender
- place and date of birth
Legal bases of processing
The legal bases of the processing (without prejudice to the legal and regulatory requirements to which the data controller is subject) are identified as:
Application for registration within the Daily in Class Project and/or Young Factor and related participation in the competition activities and/or various contexts promoted therein
Sending information relating to projects, events, contests and activities similar to and/or similar to the projects mentioned above.
Specific legal and/or regulatory provisions of the sector to which OPGE belongs
Instances and/or requests submitted by you to OPGE
Purpose of the processing
Basic Purpose
a) purposes connected and instrumental to the management of the contractual relationship and the management of the related obligations (correct management of your position in general: training and for all institutional/participatory activities in general inherent to the existing relationship);
b) purposes functional to the release of information and all other activities connected with and/or to support the performance of the Daily in Class Project and/or Young Factor - including, but not limited to, those functional to the performance of ancillary services necessary for the provision of the service (e.g. notices and communications; etc.);
c) functional purposes for the release of information and all other activities connected with and/or in support of the performance of projects, activities, contests similar and/or similar to the Daily in Class Project and/or Young Factor;
d) purposes connected and instrumental to the fulfilment of obligations provided for by laws, regulations and EU legislation;
e) purposes aimed at enforcing rights also by third parties in judicial, arbitration, administrative proceedings in compliance with regulatory limitations.
Other purposes
Processing methods
The processing of your data is carried out using paper and automated tools, with methods and tools strictly related to the purposes indicated above and, in any case, in such a way as to guarantee the security and confidentiality of your data. In case you want to obtain further information, we remind you of the rights that are guaranteed to you as specified below.
Protection of minors
Given that minors must be guaranteed enhanced protection in terms of confidentiality, it should be noted that consent for the processing of data of minors under the age of 16 should in any case be formalized by their parents or guardians. Minors must always ask their parents' permission before submitting their registration. In any case, if the undersigned ascertains that it is in possession of personal information relating to a minor without due consent, it will immediately delete the information in its archives. Should untruthful data be provided, the undersigned association is considered indemnified from any responsibility and/or claim without prejudice to the checks to which it undertakes.
Provision of data
The provision of personal data to the data controller represents an obligation on the part of the data subject only and to the extent that they are necessary to respond, provide indications, provide services (e.g. registration for the contest and ancillary activities related to it); in the event that the personal data are not released, the owner would be unable to comply. The same applies to the data that the data controller is obliged to acquire in order to comply with legislative and/or regulatory obligations. The optional insertion of data to obtain specific services and/or communications and information involves the subsequent acquisition of the sender's address/reference, necessary to respond to requests or to provide the services, communications and information requested, as well as any other personal data entered.
Categories of recipients of personal data
Your data in general may be communicated by us, with this term meaning to make it known to specific parties or to be hosted on the servers of third parties used by OPGE for the development and implementation of various services, in the following terms:
to subjects who can access the data by virtue of legal provisions, regulations or EU legislation, within the limits provided for by these rules;
to subjects who need to access your data for purposes auxiliary to the relationship between you and us, within the limits strictly necessary to carry out the related tasks (public security subjects and other public and private subjects for the fulfilment of obligations provided for by law, including administrative, financial and similar obligations)
to employees of OPGE operating under the authority and on the basis of the instructions provided by the same in accordance with the law
the company that provides the Data Controller with the server hosting service for the website as well as that of CRM (HubSpot);
to subjects who collaborate with OPGE for the organization and/or performance of educational activities, competitions and/or in any case limited to the Daily in the Classroom Project and/or Young Factor (by way of example and not limited to: newsstands, newspapers, communication agencies, publishing agencies, etc.);
to our consultants, within the limits necessary to carry out their task in favor of our organization, in compliance with the laws and regulations in force;
to subjects experienced in graphics and advertising (e.g. for the development of brochures, company presentations, etc.);
to system administrators specifically appointed by the undersigned in compliance with regulatory requirements.
NB: the data will not be communicated to third parties for their marketing purposes.
Transfer outside the EU
The data controller: does not intend to transfer personal data to non-EU countries.
Retention period
Your personal data will be stored in our archives for the purposes mentioned here and on the basis of your authorizations for the period deemed appropriate, i.e. 10 years from the date of registration within the portal. This is without prejudice to the lawfulness of the processing based on the authorization issued before the withdrawal.
Complaint to the Supervisory Authority
You can lodge a complaint with the supervisory authority:
- in Italy (where the national authority is competent) whose form can be downloaded from the link: www.garanteprivacy.itin the dedicated section;
- outside Italy on the basis of the specific instructions of the EU Member State:
of habitual residence,
working
of the place where the alleged violation occurred
Your rights
Right of access: You can receive a copy of the personal data being processed at any time.
Right to limitation: this can be exercised not only in the event of violation of the conditions of lawfulness of the processing but also in the event that you request the rectification of the data or object to the processing; the Data Controller undertakes to mark the data in question during the period of its assessment of what to do by means of appropriate organisational measures for this purpose.
Right to rectification: You can obtain the rectification of inaccurate personal data concerning you without delay and you can also obtain the completion of incomplete personal data also by providing a supplementary statement.
Right to object: you can object at any time, for reasons related to your particular situation, to the processing of personal data concerning you, even if used for direct marketing and/or profiling.
Right to withdraw consent where given for example for marketing and similar purposes.
Right to erasure (oblivion): You can request the deletion of data in enhanced form, for example even after the data subject has withdrawn his or her consent to the processing of personal data.
Right to portability: it does not apply to non-automated processing, i.e. to paper archives and/or registers; moreover, only data that are provided by the data subject to the Data Controller and processed with the latter's consent or on the basis of a contract entered into with the Data Controller are portable.
Time limit and methods of replying to data subjects
We represent that if you exercise your rights, the Data Controller must provide a written response, also through electronic tools that facilitate accessibility (orally only at the express request of the data subject) within 1 (one) month, which in cases of particular complexity can be extended to 3 (three) months, without prejudice to the obligation to provide feedback within one month of the request, even in the event of refusal.
The Data Controller, having assessed the complexity of the request made by the data subject, may establish the amount of any contribution to be requested, but only if the requests are manifestly unfounded or excessive.
To exercise these rights, you can contact OPGE using the following references
Registered office
viale Guidoni 95 – 50127 Florence
Telephone
+39 055 417373
PEC
osservatorionline@pec.it
PRIVACY
pursuant to Art. 13 GDPR
Registration and participation in the Conference “Young Factor: un dialogo tra giovani, economia e finanza".
All participants in the Conference “Young Factor: un dialogo tra giovani, economia e finanza," organized by the Osservatorio Permanente Giovani-Editori (hereinafter: OPGE), are hereby informed about the processing of their personal data.
Data Controller
The Data Controller of your personal data is OPGE, represented by its President and legal representative pro tempore, with its registered office at Via Alessandro Guidoni, 95, Florence, VAT number 05054380489
OPGE is also the Data Controller of the website - implemented and maintained by a specifically designated internal operator - located at the address: https://www.osservatorionline.it subject to the relevant Privacy Policy and Cookies Policy
More information on the processing of your personal data and feedback on the exercise of your Privacy Rights are provided upon request within 30 days (max 90 days) by writing to the e-mail address dedicated to privacy: privacy@osservatorionline.it
Clarifications on more complex privacy issues can be provided upon request by writing to the e-mail address of the Data Protection Officer (DPO): dpo@osservatorionline.it
ELECTRONIC USER IDENTIFICATION DATA OR USAGE DATA
This refers to information automatically collected through the web registration form to enable navigation and form completion. These are, for example: the IP addresses or domain names of the devices used by the user who connects with this site; the time of the request; the method used to forward the request to the server; the size of the file obtained in response; the numerical code indicating the status of the response from the server (successful, error, etc.); of the country of origin; the characteristics of the browser and operating system used by the visitor.
YOUR PERSONAL DATA
Personal data consists of electronic identification data and content-related information that the data subject voluntarily provides when filling out and submitting the registration form, giving consent for its processing.Personal data are also the images and/or audio collected by OPGE during the Conference.
The processing of personal data is carried out by OPGE according to its statutory purposes and here specifically for the Registration and management of the organization of the Conference "Young Factor: a dialogue between young people, economics and finance" (hereinafter: event) in compliance with the privacy regulations (Legislative Decree 101/2018, GDPR 2016/679) and subsequent amendments. A further purpose is the online dissemination of images and/or audios of the Event, given the character of undoubted public interest of the same.
The Legal Bases or the legal basis that allows OPGE to process your personal data are:
· Your consent for the personal data you voluntarily provide for registration for the Event [legal basis: Art. 6 para. 1 lit. a) GDPR];
· OPGE's legitimate interest in the electronic personal data (e.g.: IP, date, time, etc.) provided by your devices when you visit or fill out the Event registration form. This electronic data is required for the registration form to function (legal basis: Art. 6 (1) (f) GDPR and C47).
Your personal content data and images are processed using electronic, telematic, and paper-based tools and stored in the relevant collections and/or archives. Access to these is restricted to authorized personnel responsible for data processing, who are bound by confidentiality obligations.
Your electronic identification data is processed in the form of logs, handled, and recorded solely to enable navigation and ensure the proper functioning of the registration module.
Your personal data will be stored for the periods specified below.
· Content data, images (photos and/or videos), audio:
for the duration of 10 years, authorized by the data subject, justified by the purpose of documentation/historical reporting of the various editions of the Event of undoubted public interest, unless the data subject revokes consent or requests the deletion of the images and/or audios as an exercise of his/her Privacy Rights pursuant to articles 15-22 of the GDPR, which can be carried out at any time.
The 10-year retention period is established by agreement between the parties and is also recognized as legitimate by the Privacy Guarantor in Provision No. 130 of 22.02.24.
https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/10007060
"It can be admitted that the contractual autonomy of private individuals, pursuant to art. 1321 of the Italian Civil Code - provided that in the face of the persistent fulfilment of the obligation of appropriate information for the processing as well as clear contractual terms and conditions - may legitimately affect the timing of data retention, but not also derogate from the fundamental rights of the data subjects referred to in Articles 15-22 of the Regulation, as insured persons, in the present case".
· Electronic data: for the duration of the browsing session and to allow the electronic operation of the form until it is necessary to perfect the purposes of the processing and then they are deleted.
Your personal data is processed in the following places:
· Offices of the OPGE Data Controller;
· Servers located in the European Union.
The data and related flows are not transferred outside the EU as the entire electronic information system is developed and allocated on European servers. Both the physical offices and the electronic information system are equipped with all the appropriate security measures to counter the risk of breaches, loss or leakage of information.
Who processes your data?
Personal data are processed by the Data Controller through internal parties specifically appointed and subject to the obligation of confidentiality.
An Internal Privacy Manager has been appointed to better manage the privacy system of the structure who can be contacted by writing to privacy@osservatorionline.it
Currently, the only External Privacy Officers who may exceptionally process your personal data are the manager of the web space hosting the registration form and the System Administrator. If you want more information on these External Privacy Officers, just write to privacy@osservatorionline.it
There are no third parties external to the structure recipients of personal data because no communication is made.
The online and/or offline dissemination of personal data takes place only with the express consent of the Data Subject and solely for information and/or documentary purposes of the various editions of the Event of undoubted public interest.
No profiling or automated processing is carried out.
The Data Subject, by contacting the Data Controller as identified above, may Exercise his/her Privacy Rights by contacting the Internal Privacy Officer by writing to privacy@osservatorionline.it or by contacting the Personal Data Protection Officer (DPO) or Data Protection Officer (DPO) by writing to dpo@osservatorionline.it. A response will be given within 30 days from the date of receipt of the request. In more complex cases, it may take no more than 90 days to respond.
The Data Subject, in addition to the Privacy Rights pursuant to Articles 15-22 of the GDPR, has the right to lodge a complaint with the Privacy Guarantor and/or the right to appeal to the competent Court.
The privacy rights granted to the Data Subject pursuant to art. 15-22 GDPR are as follows:
· right of access (Article 15 of the GDPR), i.e. to obtain in particular:
o confirmation of the existence of personal data;
o the indication of the origin and categories of personal data, the purpose and the method of their processing;
o the logic applied in the case of processing carried out with the aid of electronic tools;
o the identification details of the Data Controller, the Data Processor and the subjects or categories of subjects to whom the data have been or may be communicated;
o The retention period;
· right to rectification (Article 16 of the GDPR) or to obtain in particular:
o updating and/or supplementing your personal data;
· right to erasure and right to be forgotten (Article 17 of the GDPR);
· the right to restriction of processing (Article 18 of the GDPR) or to obtain in particular:
o transformation into anonymous form or blocking;
· right to data portability (Article 20 of the GDPR);
· right to object (Article 21 GDPR);
· the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects him or her (Article 22 of the GDPR).
RIGHT TO WITHDRAW CONSENT
The Data Subject has the right to withdraw consent to the processing of personal data at any time, by contacting the Data Controller as identified above, by writing to the Internal Privacy Officer at the following electronic address privacy@osservatorionline.it or by writing to the Personal Data Protection Officer (DPO) or Data Protection Officer (DPO) at the following electronic address dpo@osservatorionline.it
Once this request is processed, your personal data will be deleted from the archives as soon as possible. Before providing or modifying any information, identity verification may be required. A response will be provided as soon as possible.
UPDATES TO THE PRIVACY POLICY
It should be noted that this Policy was last updated on 18 March 2025.
Credits of the privacy icons:
"Clear Policies" project by Sara Vagni for the Privacy Guarantor https://tinyurl.com/w5dpmtfw CCBY License modified with coloring and drawings for an adolescent audience.