INFORMATION NOTICE PURSUANT TO ART. 13 OF EU REGULATION NO. 2016/679

COOPSELIOS Cooperativa Sociale S.C., (Tax Code and VAT No.: 01164310359) (hereinafter “COOPSELIOS”), in the person of its pro tempore legal representative, with registered office in Reggio Emilia (RE), via A. Gramsci, 54/S, and PROGETTARE ZEROSEI S.r.l. Società Benefit, (Tax Code and VAT No.: 02001330352) (hereinafter referred to as “P06”), in the person of its pro tempore legal representative, with registered office in Reggio Emilia (RE), via A. Gramsci, 54/V, in their capacity as joint data controllers pursuant to Articles 4(7) and 26 of EU Regulation No. 2016/679 (GDPR), inform you, pursuant to Article 13 of the GDPR, that your personal data described in Article 1 will be processed by the joint data controllers for the purposes set out in Article 2.

From now on, COOPSELIOS and P06 may be referred to jointly as ‘joint data controllers’.

The full content of the joint data controller agreement pursuant to Article 26 of the GDPR may be requested by you by sending a communication to one of the contact details described in Article 7 below.

1. Category of personal data processed.

1.1. The joint data controllers process your personal data pursuant to Article 4(1) of the GDPR, i.e. identification data (e.g. name, surname, email address) (hereinafter “personal data”), for the purposes described in Article 2.

2. Purposes of processing and related legal basis.

2.1. Your personal data is/may be processed by the joint data controllers for the following purposes:

1. To fulfil your request for contact/further information;
2. Subscription to the newsletter and, consequently, entry into the Community, in order to receive previews of new features of the Learning by Languages system, explore topics in greater depth and exchange opinions.

In accordance with Article 13(2)(e) of the GDPR, the joint data controllers specify that failure to provide your personal data (even partially) may make it impossible for the joint data controllers to carry out the processing purposes referred to in Article 2.1(a) above in a correct and complete manner. In accordance with Article 13(2)(c) of the GDPR, the joint data controllers inform you of your right to withdraw, at any time, any consent you may have given for the processing of your personal data for the purposes set out in Article 2.1(b). COOPSELIOS specifies that the legal basis for the purposes of processing referred to in Article 2.1. can be found in the following regulatory provisions: for the execution of the purpose of processing referred to in Article 2.1. letter a): Article 6 paragraph 1) letter b) of the GDPR; for the purposes of processing referred to in Article 2.1. letter b): Article 6(1) letter a) of the GDPR.

3. Storage period.

3. In accordance with Article 13(2)(a) of the GDPR, the joint controllers of the processing communicate the following retention period, at the end of which your personal data will be subject to erasure, destruction or anonymisation: (i) for the purposes of processing referred to in Article 2.1(a): 5 years from the date of the contact request; (ii) for the purposes of processing referred to in Article 2.1. letter b): until consent is withdrawn.

4. Recipients.

4. In accordance with Article 13(1)(e) of the GDPR, the joint controllers specify that your personal data may be disclosed, where appropriate and necessary, to one or more recipients pursuant to Article 4(9) of the GDPR, identified in general terms by category: for the purposes of processing referred to in Article 2.1: persons authorised pursuant to Articles 4(10), 29 and 32(4) of the GDPR to process data on behalf of the joint data controllers; subsidiaries (including indirect subsidiaries) or companies affiliated with the joint data controllers, even if separate from each other; consultants or companies of various kinds that provide services and/or performances (including professional services) connected, even indirectly, with the fulfilment of the purposes in question (e.g. IT/communication companies).

5. Transfer.

5.1. Your personal data is/may be stored in automated, partially automated and/or non-automated archives belonging to or in any case attributable, even indirectly, to the joint data controllers (even separately from each other), and located within the European Economic Area (EEA).

6. Rights of the data subject.

6.1. With regard to your personal data, the joint data controllers inform you that you may exercise the following rights, which may be subject to the limitations provided for in Articles 2-undecies and 2-duodecies of the amended Legislative Decree No. 196/2003 (Privacy Code): right of access pursuant to Article 15 of the GDPR: right to obtain confirmation as to whether or not personal data are being processed, as well as the information referred to in Article 15 of the GDPR (e.g. purposes of processing, storage period); right to rectification pursuant to Article 16 of the GDPR: right to correct, update or supplement personal data; right to erasure pursuant to Article 17 of the GDPR: right to obtain the erasure or destruction or anonymisation of personal data, where the conditions set out in the same article are met; right to restriction of processing pursuant to Article 18 of the GDPR: right with a markedly precautionary connotation, aimed at obtaining the restriction of processing where the conditions set out in Article 18 are met; right to data portability pursuant to Article 20 of the GDPR: right to obtain personal data provided to the joint controllers in a structured, commonly used and machine-readable format (and, where requested, to transmit them directly to another controller), where the specific conditions set out in the same article are met (e.g. legal basis of consent and/or performance of a contract; personal data provided by the data subject); right to object pursuant to Article 21 of the GDPR: right to obtain the permanent cessation of a specific processing of personal data; right to lodge a complaint with the Supervisory Authority (i.e., the Italian Data Protection Authority) pursuant to Article 77 of the GDPR: right to lodge a complaint where it is believed that the processing under analysis violates national and EU legislation on the protection of personal data. 

6.2. In addition to the rights described in Article 6.1 above, the joint data controllers inform you that, in relation to your personal data, you have the right, where possible and applicable, to exercise, on the one hand, the (sub) right provided for in Article 19 of the GDPR (“The data controller shall communicate any rectification or erasure or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each of the recipients to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The data controller shall communicate those recipients to the data subject upon request”), which is to be considered connected and related to the exercise of one or more rights regulated by Articles 16, 17 and 18 of the GDPR; on the other hand, the joint controllers inform you that, in relation to your personal data, you have the right, where possible and applicable, to exercise the right provided for in Article 22(1) of the GDPR (“The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her”), without prejudice to the exceptions provided for in paragraph 2 below.

6.3. In accordance with Article 12(1) of the GDPR, the joint controllers undertake to provide the information referred to in Articles 15 to 22 and 34 of the GDPR in a concise, transparent, intelligible and easily accessible form, using clear and plain language: such information shall be provided in writing or by other means, including electronic means, or, at the request of the data subject, shall be provided orally, provided that the identity of the latter is verified by other means.

6.4. In accordance with Article 12(3) of the GDPR, the joint controllers inform you that they undertake to provide information on the action taken in response to a request pursuant to Articles 15 to 22 of the GDPR without undue delay and, in any case, no later than one month after receipt of the request; this deadline may be extended by two months if necessary, taking into account the complexity and number of requests (in this case, the joint data controllers undertake to inform you of this extension and the reasons for the delay within one month of receiving the request).

6.5. The rights described above (with the exception of the right under Article 77 of the GDPR) may be exercised using the contact details provided in Article 7 below. 

7. Contact details.

7.1. COOPSELIOS can be contacted at the following address:presidenza@coopselios.com ; P06 can be contacted at the following address: info@progettarezerosei.it

7.2. The Data Protection Officer (DPO) pursuant to Article 37 of the GDPR, appointed by COOPSELIOS, can be contacted at the following address:privacydpocoopselios@baldiandpartners.it ; the Data Protection Officer (DPO) pursuant to Article 37 of the GDPR, appointed by P06, can be contacted at the following address: privacydpoprogettarezerosei@baldiandpartners.it    

Reggio Emilia (RE), 29.7.2025 (date of last update)

COOPSELIOS Cooperativa Sociale S.C. and PROGETTARE ZEROSEI S.r.l. Società Benefit

(in the persons of their respective legal representatives pro tempore)