Pursuant to the General Data Protection Regulation (UE) "GDPR" n. 2016/679 (hereinafter the "Regulation" or “GDPR”), we inform you that the personal data provided to the "EUGEN - EUROPEAN GENERATION Social Promotion Association ", will be treated according to the principles of lawfulness, correctness and transparency in order to guarantee the rights, fundamental freedoms, as well as the dignity of natural persons, with particular reference to privacy and personal identity.

1. IDENTIFIED DETAILS OF THE OWNER OF THE PERSONAL DATA PROCESSING
The Data Controller (hereinafter "Owner") is EUGEN - EUROPEAN GENERATION Social Promotion Association - APS, tax code 97834840585, registered office in Piazza Albania 35 - 00153 Rome, in the person of its pro tempore President.                                                                                                                                                   
Phone: +39 3518770536; email: info@eu-gen.org; PEC: eugen-europeangeneration@pec.it;

2. RESPONSIBLE FOR THE PROTECTION OF PERSONAL DATA
Pursuant to art. 37 of the Regulation, the Data Controller has designated the Personal Data Protection Officer (RPD/DPO) in the person of Massimo Corinti. E-mail: dpo@corinti.eu - PEC: dpo@pec.corinti.eu

3. CATEGORIES OF PERSONAL DATA PROCESSED
Within the limits of the purposes and methods described in this Information, the personal data processed may include:
a) personal information such as name, surname, date of birth, email address, telephone number, residential address; the identity document.
b) state of health.
c) the curriculum vitae and other information relating to the university career.
d) Information related to the use of the Reserved Area: chronological and sequential records of performed operations (Logs) for the purpose of detecting any irregularities. The provision of data for these purposes is mandatory; failure to provide such data will result in the denial of access to the Reserved Area.
e) Any other information relevant and necessary for the use of the services provided on “www.eu4eu.org” – “www.eng.eu4eu.org”.
f) Data related to images, photos, and any audio-video recordings aimed at documenting the activities of the Data Controller, to be published on the institutional website. The processing of such data requires the explicit consent of the data subject pursuant to Article 6.1.a) of the GDPR.

 4. PURPOSES AND LEGAL BASES OF THE TREATMENT
The personal data provided by the data subject are processed for the following purposes and corresponding legal basis:
• Category data referred to in point a): or activities necessary for participation in the Erasmus program. The legal basis for such processing is the performance of a contract to which the data subject is a party, or the implementation of pre-contractual measures adopted at the request of the data subject, pursuant to Article 6.1.b) of the GDPR. With regard to the use of the email address for sending communications that offer training and employment opportunities within the EU4EU network of companies and enterprises, such processing is a necessary condition and an essential purpose for the data controller’s fulfillment of obligations in implementing the program. The acquisition and processing of such data do not require the data subject’s consent.
• Category data referred to in points b) and c): to evaluate personal aspects and characteristics, requirements, compliance, suitability, to customize services by aligning them to individual needs in order to propose one's orientation in the EU4EU program.
•  Category data referred to in point d): guarantee the security of the portal, as well as implement its own compliance and risk management processes. The legal basis of this treatment is the legitimate interest of the Association in protecting its business continuity, as well as its assets, from potential external risks, pursuant to art. 6.1.f) of the GDPR. The acquisition and treatment does not require the consent of the interested party.
• Category data referred to in point e): evaluate actions for any legal disputes. The legal basis of this treatment is the legitimate interest of the Association to exercise and defend its rights, pursuant to art. 6.1.b) of the GDPR; to fulfill legal and/or regulatory obligations applicable to the Association, pursuant to art. 6.1.c) of the GDPR. The acquisition and treatment does not require the consent of the interested party.

5. METHOD OF TREATMENT
The processing of your data takes place through the use of tools and procedures suitable for guaranteeing a high level of security and confidentiality, through electronic instruments and/or with the aid of paper supports.

6. RECIPIENTS OR CATEGORIES OF DATA RECIPIENTS
The personal data provided may be communicated to recipients, who will process the data as external managers (pursuant to Article 28 of the Regulation), and/or as natural persons acting under the authority of the Data Controller and the Data Processor. processing (pursuant to Article 29 of the Regulation), for the purposes listed above, namely:
• Organizations which, duly registered on the www.eu4eu.org portal, evaluate the trainee candidate's requirements to fill the open positions in a company.
• To third parties who need to carry out specific activities in relation to the Data, in accordance with the purposes of the processing.
• Companies, and freelance professionals also in associated form.
The list of data processors is constantly updated and available upon request.

7. DATA TRANSFER OUTSIDE THE EU AREA AND AUTOMATED PROCESSING
Personal data is not processed outside the EU Area (EEA). There are no automated decision-making processes, and no data profiling is implemented.

8. RETENTION PERIOD OR POLICIES

Personal data will be kept only for the time necessary for the purposes for which they were collected, respecting the principles of limitation of conservation and minimization defined in art. 5.1, letters c) and e) of the GDPR. In any case, the data will be kept to comply with regulatory obligations and pursue the purposes in accordance with the principles of necessity, minimization and adequacy.
The Data Controller may retain the data after the end of the contractual relationship to fulfill obligations under current, contractual and/or tax-related for five (5) years, or in the event of legal action. If the Personal Data is no longer needed for any purpose and we are not required to keep it by law, we will do everything possible to delete, destroy or anonymize it.

9. RIGHTS OF THE INTERESTED, ART. FROM 15 TO 22 OF THE REGULATION
The interested party always has the right to request from the Data Controller or the DPO, using the contacts above, access to your personal data, the rectification or cancellation of the same, the limitation of treatment or the possibility of opposing the treatment, of request the portability of the data, to revoke the consent to the processing by asserting these and the other rights provided for by the Regulation, by forwarding a reasoned request via e-mail to the Data Controller. Furthermore, the interested party always has the right to lodge a complaint with the Guarantor at the references on the website: www.garanteprivacy.it as required by art. 77 of the Regulation, or to take the appropriate judicial offices pursuant to art. 79 of the Regulation.

10. CHANGES AND UPDATES
This privacy notice was last updated in January 2025.
The Association reserves the right to modify or simply update its content, in whole or in part, including in response to changes in applicable regulations. You are encouraged to regularly visit this section to review the most recent and updated version of the privacy notice, ensuring you remain informed about the data collected and the processing activities carried out.