Privacy Policy
Information regarding personal data protection pursuant to art. 13 and 14 of EU Regulation 2016/679
With this document, Mygrants S.r.l., with registered office in P.zza Cardinale Pappalardo 23, 95100 Catania, VAT No. 03609451202, email privacy@mygrants.it, in its capacity as Data Controller (hereinafter referred to as the “Company” or “Data Controller“), provides common information regarding the processing of personal data carried out in the context of its own corporate website, which is accessible online at: https://mygrants.it/ (hereinafter referred to as the “Website“). It should be noted that this information is provided only with regard to the Company’s website, and not for other websites which may be consulted through hypertext links published on the Website and leading to resources which fall outside of the Company’s domain. For the provision of certain services, specific information may be published on the relevant pages of the Website, of which this document is an integration.
- Categories of users and personal data processed
The Data Controller processes data belonging to:
- natural persons (hereafter referred to as “Trainee(s)“), who access the Website and voluntarily register in order to use the Data Controller’s web services aimed at identifying all potential talents (mainly among immigrants) and at facilitating their placement on the job market according to their employment needs, while offering them a personalized training course to strengthen and update their skills (hereinafter referred to as “Services“);
- other natural persons who visit the Website without accessing the sections reserved to Trainees (hereinafter referred to as “Other Users“). (hereinafter, Trainees and Other Users will be jointly referred to as “Users“). The following data is processed:
a. with exclusive reference to the Trainees:
a.1.) common data, such as:
- Kpersonal data, contact details (including electronic modes) and bank details;
- Kcitizenship and possible immigrant status as well as additional “ordinary” information relating to this status (such as, for example, transit regions);
- K data relating to education (qualifications, language skills, etc.) and professional experience;
- Kprofessional and personal skills (including the goals achieved within the Data Controller’s business) and areas of interest;
- Kfurther information denoting a situation of particular vulnerability (such as possible refugee status; having been subjected to imprisonment during the trip to Europe; acts of persecution suffered, etc.) which does not fall under a special category pursuant to art. 9 of the GDPR or relate to criminal convictions and crimes pursuant to art. 10 of the GDPR
(hereinafter referred to as “Ordinary Personal Data“)
a.2.) geolocation data: The Website can collect geographic location data (thus allowing the identification of the Trainee’s device geographical position in real time) using only the IP address (hereinafter, referred to as “Geolocation Data“)
a.3.) special data, such as:
- K information related to refugee status (for example, why asylum was requested);
- Kany information relating to racial or ethnic origin;
- Kany health-related information.
(hereinafter referred to as “Special Personal Data“).
b. with reference to all Users:
b.1.) Browsing data: The IT systems and software procedures used to operate the Website acquire, during their normal activity, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of computers and terminals used by users, the URIs/URLs (Uniform Resource Identifier/Locator) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code showing the status of the response from the server (successful, error, etc.) and other parameters relating to the User’s operating system and computer environment.
Only for Trainees, qualitative and quantitative data related to the actions carried out on the Website (with particular reference to the training activities available), i.e. what activity the trainee has carried out, for how long etc. (hereinafter all referred to as “Navigation Data”)
b.2.) Submitted data: The optional, explicit and voluntary sending of messages by filling in the forms on the Website, as well as those sent using the Company’s contact addresses and private messages sent by Users to social media profiles/institutional pages (where this possibility is available) involves the acquisition and processing of the sender’s contact data needed to respond to said messages, as well as the acquisition of all personal data included in communications and registration forms (hereinafter, referred to as “Communicated Data“)
(all Ordinary Personal Data, Special Personal Data, Geolocation Data, Navigation Data and Submitted Data, hereinafter collectively referred to as “Personal Data“).
c. Cookies and other tracking systems: Consult the cookie policy on the Website.
- Purpose and legal basis of data processing
- Delivering the Services and carrying out the activities which are connected and instrumental to said delivery (such as performing “preliminary screenings” on Trainees to identify their skills and strengths and weaknesses, monitoring recorded performances, etc.) and fulfilling organizational and management activities (including sending communications relating to the Services)
- The fulfillment of legal obligations related to: Civil, fiscal and administrative provisions, of Community legislation, of rules, codes or procedures approved by the Authorities and other competent Institutions, as well as to follow up on requests from competent administrative or judicial authority and, more in general, from public subjects in compliance with legal formalities.
- Asserting and defending one’s rights, including through extrajudicial initiatives and also through third parties, and preventing crimes (such as, for example, fraud, identity theft, immigration crimes, computer crimes, etc.).
- Limited to the data mentioned in par. 1, point b): The relevant processing is necessary to allow Users to access the Website and use it in an optimal way, and to manage requests received through the Website.
- Limited to the navigation data mentioned in par. 1 point b.1.): For purposes related to the security of the Data Controller’s systems and to obtain statistical information on the use of the Website (such as the most frequently visited pages of the Website, the average time spent on each page), as well as to check the correct operation of the Website.
- Limited to Geolocation Data, to allow the Data Controller to put the Trainees and the companies located in the same local area in contact, facilitating the placement of the Trainee on the job market.
- Limited to the Ordinary Personal Data of the Trainees, for the direct promotion of new services of the Data Controller.
- – With reference to Ordinary Personal Data: implementing pre-contractual and contractual measures (originating from the Trainee’s expression of interest in and request for access to the Data Controller’s Services).
– With reference to Special Personal Data: consent. - Compliance with a legal obligation to which the Data Controller is subject
- Pursuit of legitimate interests by the Company
- Implementation of pre-contractual measures taken at the request of the data subject
- Pursuit of legitimate interests by the Company
- Consent
- Consent
- Mandatory release of required data and consequences of the failure to release it
- \name and surname
- \date of birth
- \residence / domicile
- \email address
- \mobile number
- \if registered with the job center
- \legal status
- \hard skills
- \soft skills
- \language level (IT, EN, FR)
- \Italian driver’s license (category B)
- \geographic availability (or geographic flexibility)
- \hourly availability (or hourly flexibility)
- \availability for business travel
- Data processing procedures Pseudonymization
- Recipients or categories of recipients of personal data
- Kto those authorized to process the Data Controller’s data (employees and collaborators);
- Kto the Company’s third-party service suppliers (including IT, accounting, administrative, legal, insurance, banking services) who operate as data processors, as appropriate;
- Kto the Data Controller’s key partners involved in the creation of the Services (such as e-learning companies, companies involved in career placement projects, banking institutions who may be involved in processing credit access for the Trainees), as well as to companies that contact the Data Controller to fulfil their employment needs, and to other third parties (public and private) who interact with the Data Controller in the context of the Services (such as, for example, reception centers for asylum seekers, temporary work agencies and job centers, high schools and universities, etc.)
- Kto third-party companies and professionals appointed to assert the Company’s rights, interests and claims arising from its relationship with the Users;
- Kto State administrations, judicial or administrative authorities, public and private bodies, including after inspections and audits;
- Kto persons who may access data legally or under secondary or Community regulations.
- Kto the employees in charge of managing the Website and the IT, security and data storage systems
- Kto external subjects who manage and maintain the Website and who provide relevant technical services.
- Period of retention of personal data
- Trainee Ordinary Personal Data
- Trainee Special Personal Data
- Geolocation data
- Navigation Data
- Communicated Data
- Personal Data which needs to be processed due to legal obligations
- Transfer of personal data to another country or to an international organization
- Rights
- The right to access
- The right to rectification
- The right to erasure
- The right to processing restriction
- The right to data portability
- \object to the processing of Personal Data for the purposes mentioned in paragraphs n. 3 and 5 for reasons (which must be explained) connected to their own individual situation;
- \object to the processing of Personal Data for the purpose mentioned in par. 2, no. 7, at any time, easily and free of charge;
- \also, if they believe that their Personal Data is processed in violation of the provisions of the GDPR, to lodge a complaint with the national supervisory authority of the member state of the European Union in which the interested party habitually resides, works, or where the alleged violation of their rights has taken place (in Italy they may contact the Data Protection Authority, or address the appropriate judicial offices (Article 79 of the GDPR);
- Contacts
- \by post at Via Saragozza 1 (c / o COB), 40123 Bologna
- \by email at privacy@mygrants.it
Ordinary Personal Data must be released to ensure the operational, financial and administrative delivery of the Data Controller’s Services and related professional activities. Therefore, any failure (including partial failures) to the contribution of said data prevents the Data Controller from delivering Services for the benefit of the Trainees, and from fulfilling the obligations related to said Services.
The following items of Ordinary Personal Data must be published on the Website as they are necessary in order for Trainees to access the Services offered (specifically, so that third parties can see which activities the Trainees have carried out on the platform):
Personal Details
Skills
Mobiity
(hereinafter, the “Public Data“).
The Trainee may, however, decide each time whether they wish to make further Personal Data entered at the time of registration visible.
The Trainee may, however, decide each time whether they wish to make further Personal Data entered at the time of registration visible.
Geolocation is optional, however, in the absence of consent to the collection of Geolocation Data, the Data Controller will not be able to identify the Trainee’s geographical area and will therefore be unable to select the companies with which to put the Trainee in contact according to the criterion of geographical proximity.
Ordinary Personal Data and Special Personal Data are provided directly by the Trainee at the time of registration to the Website and to tests (such as the “personality quiz”), which are instrumental to the delivery of the Services.
The platform through which the Data Controller delivers its Services processes Personal Data in pseudonymized form, according to the following procedures: at the time of registration, each Trainee is assigned an alphanumeric pseudonym that will identify them within the platform and in relation to third parties.
Personal Data will be temporarily stored on the Data Controller’s server (in the cloud) and will be processed exclusively by authorized and specifically trained individuals, using both manual and IT tools.
Information relating to new services offered by the Data Controller, referred to in paragraph 2. Purposes and legal grounds for processing, n. 7, will be sent via push notifications.
The Users’ Personal Data may be disclosed to the following parties for all the purposes mentioned in paragraph 2:
In particular, all User personal data mentioned in par. 1, point b. can be communicated for the sole purposes referred to in paragraphs n. 2., n. 4., and n. 5:
These data recipients will operate as data processors as appropriate.
The only category shown is that of data recipients, as it is subject to continuous updates. To view the updated list of recipients, Users may contact the Company directly by using the contact mentioned in par. 9.
Personal Data will be stored by the Data Controller for the period of time strictly necessary to achieve the purposes for which it was collected, and in particular:
In all cases, once the respective terms have elapsed, all Personal Data will be deleted. It remains understood Personal Data may be stored for a longer period than stated above if it is relevant to pending or foreseeable disputes, if requested by competent authorities, or pursuant to the applicable legislation.
As a rule, Personal Data is not transferred abroad. However, should this become necessary for the pursuit of the aforementioned purposes, the transfer will take place in accordance with the provisions of the law.
Users, if circumstances arise, may, at any time and free of charge, exercise the following rights against the Company:
To exercise all rights, Users can submit a specific request by contacting the Data Controller: