pursuant to article 13 of EU Regulation 2016/679 - General Data Protection Regulation ("GDPR"):
1) Purpose of the treatment
The personal data relating to the students of the Conservatories provided and collected during the present procedure will be used exclusively for purposes related to the "Erasmus Orchestra" project, for the selection and management of the musicians, as well as for the fulfillment of the obligations established by the laws and regulations in force on the matter;
The provision of the requested data is optional, however any refusal to make the required declarations will result in the exclusion of the candidates indicated from the selection procedure.
2) Data processing
Personal data are processed according to the principles of lawfulness, correctness and transparency, and are acquired and stored with the aid of tools, including electronic ones, suitable for guaranteeing their security and confidentiality according to the methods established by the laws and regulations in force.
The data collected may be communicated to the following categories of subjects:
· to employees of the Data Controller or in any case involved for service reasons;
· to any external subjects of the entity involved in the procedure;
· to the competent public offices in execution of the provisions of the law in force;
· or to other subjects entitled pursuant to law no. 241/1990 and subsequent amendments.
Personal data may be shared, for institutional purposes, with subjects to whom the communication is required by provisions of the law, by regulations or with public subjects for the performance of their institutional functions (by way of example, Authorities with inspection purposes or who carry out control or verification activities).
3) Subjects of the treatment
The Data Controller is the administration: National Institute of Documentation, Innovation and Educational Research (INDIRE), Via M. Buonarroti 10 – 50122 Florence (Italy), fax 055-2380395, PEC indire@pec.it, To exercise your rights listed below, you can write to segreteriapresidente@indire.it
Pursuant to Article 37 of the Regulation, the Data Controller has appointed its own Data Protection Officer (DPO) domiciled for the role at the registered office of INDIRE, who can be contacted at the email address dpo@indire.it.
4) Data retention period
The data will be kept until the expiry of validity of the ranking object of the selection (31/12/2025), and for the period of time necessary to comply with legal obligations or provisions of control and/or supervisory authorities.
5) Place of treatment
Personal data will not be transferred to a non-EU third country or to international organizations.
All data is mainly processed with automated IT procedures on servers located at INDIRE offices or at leading companies providing cloud computing services for Public Administrations certified by AgID and with data centers in Italy. Personal data will not be subject to an automated decision-making process or profiling.