INFORMATION ON THE PROCESSING OF PERSONAL DATA

pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016

COOKIE POLICY

This document describes how the website (hereinafter "the site") https://elearning.lavoro.gov.it is managed with regard to the processing of the personal data of the users who consult it. The site provides access to the platform made available by the Ministry of Labour and Social Policies for the use of the e-learning course "Basic Digital Skills".

The data controller

Following the consultation of this site, data relating to identified or identifiable persons may be processed (the data subject pursuant to the Regulation, hereinafter "user"). The data controller is the Ministry of Labour and Social Policies (hereinafter "controller"), with registered office at Via Vittorio Veneto 56, 00187, Rome. As of today, all information concerning the controller, together with the updated list of the designated processors and system administrators, is available at the controller's premises and at the following e-mail address: dgpoliticheattivelavoro@lavoro.gov.it

General information about cookies

Cookies are small text strings (letters and/or numbers) that the sites visited by the user send to the browser, where they are stored in order to then be retransmitted to the same sites on the user's next visit. Cookies are stored by the individual browser on the specific device used (computer, tablet, smartphone, etc.). While browsing a site, some elements of other sites may reside on it (such as, for example, images, maps, sounds, specific links to pages of other domains). In these cases, the user may also receive on their terminal cookies that are sent by the latter (called third-party or publisher cookies). If cookies are sent directly by the site being visited, they are called first-party cookies.

Similar technologies, such as web beacons and transparent GIFs, can be used to collect information about user behaviour and the use of services. In the remainder of this document, we will refer to cookies and all similar technologies simply using the term "cookies". Cookies are classified according to their purpose, duration and the site that set them.

Session cookies are temporarily stored in the device's memory while browsing a site, for example to keep track of the chosen language or authentication to access restricted areas or similar. Session cookies remain stored on the device for a short period of time. In fact, they are deleted as soon as the user closes the browser. Persistent cookies save a file on the device for a long period of time. This type of cookie has an expiry date. Persistent cookies allow sites to remember information and settings on the user's subsequent visits, thus making browsing more convenient and faster since, for example, it is no longer necessary to log in to a restricted section or similar. On the expiry date, the cookie is automatically deleted when the site that created it is first accessed.

The legislation requires the controller to provide the user with information about the cookies used by the site and the purposes for which they are used. The objective is threefold: to guarantee privacy, ensure ease of use and optimise the development of the site. The main types of cookies and the related purposes for which they are used by the site are illustrated below.

Technical cookies - Purpose and lawfulness of processing

Technical cookies are used for the sole purpose of carrying out "…the transmission of a communication over an electronic communications network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide that service". They are not used for further purposes and are normally installed directly by the owner or operator of the site. Functionality cookies are technical cookies and allow the user to browse according to a series of selected criteria (for example, language, products selected for purchase) in order to improve the service provided. Analytics cookies, where used directly by the site operator to collect information in aggregate and anonymous form on the number of users and how they visit the site, are considered technical cookies.

The site uses the following technical cookies:

The prior consent of the user is therefore not required for the installation of technical cookies.

The lawfulness of the processing of personal data is based on the need to perform a task carried out in the public interest or in the exercise of official authority (Article 6.1(e) of the Regulation).

Deactivation, activation, deletion of cookies and their consequences

At any time, the user can limit or block cookies through the browser settings (Microsoft Edge, Google Chrome, Mozilla Firefox, Opera, Safari, etc.). The setting can be defined specifically for the different sites and web applications. More detailed information on cookie management procedures (deactivation, activation, deletion and control) is available by consulting the addresses www.aboutcookies.org, www.youronlinechoices.com or the dedicated sections of the browsers used.

If the storage of technical cookies is blocked, the controller can no longer guarantee the correct functioning of the site and therefore some functions may not be available. The settings on the use of cookies must be managed separately in each browser and device used (PC, notebook, smartphone, tablet, etc.).

Methods of processing personal data

Personal data are processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected, as set out in the relevant cookie table above.

Specific security measures are observed to prevent the loss, unlawful and/or incorrect use and unauthorised access to the data.

Communication and dissemination of personal data

Where necessary, personal data may be communicated (this term meaning making them known to one or more specific parties):

• to parties whose right of access to the data is recognised by national and European Union legal provisions;
• natural and/or legal persons, public and/or private, when the communication is necessary or functional to the performance of the controller's activity in the ways and for the purposes illustrated above;
• to the controller's employees/collaborators, within the scope of their duties and/or any contractual obligations;
• to parties qualifying as processors and/or sub-processors of personal data pursuant to Article 28 of the Regulation, who are entrusted with institutional tasks and/or the technical management of the site (for example hosting, management of any databases used by the site).

Personal data are in no case disseminated, this term meaning making them known in any way to a plurality of indeterminate parties. Personal data, without prejudice to their free movement between the states of the European Economic Area (EEA), are not transferred outside the EEA.

Criteria used to determine the personal data retention period

Personal data processed through technical cookies are retained for the time established by the site (first-party or third-party) that installs them (see the technical cookies section of this notice).

Changes to the notice

The data controller reserves the right to make changes to this notice at any time, giving notice to the user on this page. Please therefore consult this page frequently to stay constantly updated.

Data Protection Officer (DPO)

The Data Protection Officer is:

The Data Protection Officer can be reached at the controller's premises at Via Vittorio Veneto 56, 00187, Rome. In the case of written requests/communications to be sent digitally, the Data Protection Officer can be contacted using the following e-mail addresses:

• dpo@pec.lavoro.gov.it
• dpo@lavoro.gov.it

Rights of the data subject (user)

Please note that, at any time, the user may exercise the following rights:

• the right to receive, in a structured, commonly used and machine-readable format, the personal data concerning them provided to a controller and the right to transmit such data to another controller without hindrance from the controller to which they were provided;
• the right to obtain access to their personal data;
• the right to obtain the rectification of their personal data, where this does not conflict with the legislation in force on the retention of such data;
• the right to obtain the erasure of their personal data, where this does not conflict with the legislation in force on the retention of such data;
• the right to obtain the restriction of processing of their personal data;
• the right to object at any time, on grounds relating to their particular situation, to the processing of their personal data;
• the right to withdraw consent to the processing of their personal data at any time without affecting the lawfulness of processing based on consent given before the withdrawal;
• the right to object at any time to the processing of their personal data for direct marketing purposes, including profiling to the extent that it is related to such direct marketing;
• the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

The user may exercise the above rights by means of a request addressed without formality to the data controller by hand delivery, traditional mail, registered letter, fax or by e-mail to the following addresses:

• dpo@pec.lavoro.gov.it
• dpo@lavoro.gov.it

To facilitate the exercise of these rights, the Italian Data Protection Authority has prepared a specific form that can be downloaded from the website www.garanteprivacy.it

Right to lodge a complaint

The user has the right to lodge a complaint with a supervisory authority (in particular with the Italian Data Protection Authority www.garanteprivacy.it).

Privacy policy

Further information on the use of personal data can be found in the "Privacy policy" document available at the link https://elearning.lavoro.gov.it/privacy-policy/index.php