Privacy Policy
gianky-project.eu Website
Introduction
This Privacy Policy describes how Talentix Impresa Sociale Srl (hereinafter, the "Data Controller" or "we") collects, uses and protects the personal data of visitors and users of the website gianky-project.eu (hereinafter, the "Website").
The Website is part of the Erasmus+ KA220-YOU Cooperation Partnership project "In Gianky We Trust", co-funded by the European Union, aimed at financial education for young people with difficulties.
This policy is provided pursuant to Articles 13 and 14 of EU Regulation 2016/679 (General Data Protection Regulation — GDPR) and the Italian Privacy Code (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018).
Data Controller
The Data Controller is Talentix Impresa Sociale Srl, with registered office at Piazza Carlo Felice, Turin 10121, Italy. VAT number: 12471440011. Email: info@talentix.it.
For any questions regarding the processing of your personal data, you may contact the Data Controller at the email address above.
Types of Data Collected
Data provided voluntarily by the User
When you use the contact form on this Website, we collect the following data:
- Full name
- Email address
- Subject of the enquiry (optional)
- Message content
Navigation data
The IT systems and software procedures used to operate this Website may acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This data includes:
- IP addresses
- Browser type and operating system
- Pages visited and time of access
- Referring website
- Language preferences
Cookie data
The Website uses technical cookies and, with your consent, analytics and preference cookies. For detailed information, please refer to our Cookie Policy.
Purposes and Legal Basis of Processing
Responding to contact requests
Data provided via the contact form is processed for the purpose of responding to your enquiry. Legal basis: your consent, provided by voluntarily submitting the form (Art. 6(1)(a) GDPR), and the legitimate interest of the Data Controller in managing communications (Art. 6(1)(f) GDPR).
Website operation and security
Navigation data is processed to ensure the correct functioning, security and performance of the Website. Legal basis: legitimate interest of the Data Controller (Art. 6(1)(f) GDPR).
Language preferences
A technical cookie (NEXT_LOCALE) is used to store your language preference so that the Website is displayed in the correct language on subsequent visits. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) — this cookie is strictly necessary for the functioning of the multilingual service.
Analytics (with consent)
If you consent, anonymised and aggregated data may be collected to understand how visitors use the Website and to improve its content and usability. Legal basis: your consent (Art. 6(1)(a) GDPR).
Data Retention
Personal data collected through the contact form is retained for the time strictly necessary to process your request and for a maximum of 12 months thereafter, unless a longer retention period is required by law.
Navigation data is retained for a maximum of 90 days.
Cookie consent preferences are stored locally on your device for up to 12 months, after which you will be asked to provide consent again.
Data Sharing and Transfers
Your personal data is not sold, traded or transferred to third parties for marketing purposes.
Data may be shared with the following categories of recipients, acting as data processors pursuant to Art. 28 GDPR:
- Hosting providers (for website operation)
- Email service providers (for handling contact form submissions)
- Project partners within the Erasmus+ consortium, to the extent necessary for the project's objectives
International transfers
Where data is transferred outside the European Economic Area (EEA), appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, in accordance with Chapter V of the GDPR.
Your Rights
Under the GDPR, you have the following rights with respect to your personal data:
- Right of access — to obtain confirmation of whether your data is being processed and to access it (Art. 15)
- Right to rectification — to correct inaccurate or incomplete data (Art. 16)
- Right to erasure ("right to be forgotten") — to request deletion of your data (Art. 17)
- Right to restriction of processing — to limit how your data is processed (Art. 18)
- Right to data portability — to receive your data in a structured, commonly used format (Art. 20)
- Right to object — to object to the processing of your data (Art. 21)
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing (Art. 7(3))
How to exercise your rights
You may exercise any of these rights by contacting the Data Controller at info@talentix.it. We will respond to your request within 30 days, as required by the GDPR.
Right to lodge a complaint
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it.
Security Measures
The Data Controller adopts appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These measures include:
- TLS/SSL encryption for all data transmitted between your browser and the Website
- Regular security updates and patches for the Website infrastructure
- Access controls limiting data access to authorised personnel only
Data of Minors
This Website is not intended to directly collect personal data from minors under the age of 16. If a minor wishes to contact us through the contact form, we encourage them to do so with the assistance and consent of a parent or legal guardian.
If we become aware that we have inadvertently collected personal data from a minor without appropriate consent, we will take prompt steps to delete such data.
Changes to This Policy
The Data Controller reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements or data processing practices. Any changes will be published on this page with an updated "Last updated" date.
We encourage users to periodically review this page to stay informed about how we protect their personal data.