versione italiana

Related to the Lifeed Platform

Dear Lifeed User,

Surely you know the European Data Protection Regulation n. 679/2016 (also known as “GDPR”), the Regulation about the protection of natural persons with regards to the processing of personal data and concerning the free movement of such data.

Pursuant to this Regulation and to the Italian law, we share the necessary information for you to understand how we process your data that we collect via the Lifeed Platform.

So, we invite you to read this page addressing any questions you may have. If you have any other questions, contact us. We are committed to protecting you and being transparent about our process.

Let’s go!

Who is the Data Controller?

L.B.V. S.r.l. – VAT n.: 09236350964 with registered office in via Cadore n. 2 – 20092 – Milano (MI)
e-mail: info@lifeed.io
Tel. +39 373 8157081

L.B.V. S.r.l. (hereinafter “LBV” and/or “Data Controller“) is the data controller of personal data of Users (hereinafter also “Data subject“) using the Lifeed web platform, including any subdomains (hereinafter “Platform“).

How can I contact the DPO?

e-mail: dpo@lifeed.io
Tel. +39 379 1610212

Through the Site, LBV provides a set of “Services”, including digital training programs to understand the skills needed for employment and to learn useful tools to make the job search effective. On the Platform, there is also an online space available to the Users to share their experiences, tips and resources. Please read our Terms and Conditions for further details.

It is possible to use the Services through the Platform or request and view a demo version (all Users registered on the Platform and benefiting from the Services offered by LBV are generically referred to as “Community“).

What Data do we process with the Platform?

Personal Data:

  • First and Last name
  • IP address, device and browser information
  • Cookie e pixel (in accordance with our cookie policy)
  • Business email address, username and password
  • Telephone number, company and job role

Special categories of personal data:

  • Parenthood
  • Caregiving

LBV does not need to process further data than that described above. The additional information that the Data Subject provides through the existing messaging form in the Platform, the usage of the Platform and the creation of the personal profile will be processed in accordance with this Privacy Policy, the Terms and Conditions and the provisions of the EU and national legislation (hereinafter this data will be jointly called as “Data“).

What purpose is the data processed?
What legal basis is the Data processed?
What is the Data retention?
Allow access to the Platform
Legitimate interest of the Data Controller in providing the Services of the Platform, and of the User himself to correctly use the Platform
See our Cookie Policy related to our Platform
Answer requests for information about the Services
Legitimate interest of the Data Controller in answering to any requests from Users
The Data will only be kept for the duration necessary for the execution of the request
Conclude contracts related to the Services and fulfill contractual obligations with the Community Users (contractual purposes)
Fulfillment and contractual management for the provision of the Services offered. The provision of Data is necessary for the correct provision of the Services
The Data will be kept for a period equal to the duration of the Contract (any renewals included) and for the next 10 years (only related to tax and fiscal data, unless otherwise provided in accordance with the EU and national legislation)
Fulfilling the administrative and accounting obligations provided for by the legislation (e.g. on anti-money laundering, accounting management and invoicing)
Legitimate interest of the Data Controller in fulfilling the legal obligations
The Data will be kept for a period equal to the duration of the Contract (any renewals included) and for the next 10 years (only related to tax and fiscal data, unless otherwise provided in accordance with the EU and national legislation)
Carry out advocacy, reporting and scientific research activities
Legitimate interest of the Data Controller in fulfilling the contract with the direct “client” company of LBV
The Data will be appropriately anonymized and communicated in aggregate form
To analyze your preferences, habits, behaviors or interests of Community Users, in order to provide personalized Service offerings (profiling purposes)
Consent. This is optional and you can withdraw it at any time
For a maximum period of 12 months from the consent of the Data Subject

The Data is processed with manual or IT tools, also through automated tools, suitable to guarantee its security, confidentiality and to avoid unauthorized access.

The Data processed is stored using cloud computing tools on servers located within the EU territory (Ireland): for more information on safety standards and compliance with the requirements set by the GDPR adopted by the selected external providers, consult the dedicated web page.

After the data retention indicated above, the Data will be destroyed, deleted or anonymized, compatible with the technical procedures of deletion and backup.

To whom is the Data communicated?
  • Service providers related to the activities of the Data Controller and public institutions
  • Service providers related to assistance, tax and legal advice
  • Service providers related to IT or storage and external service providers

The Data collected through the Platform will be processed only to ensure the correct use of the Services and may be viewed and used by the LBV team (employees and collaborators) appropriately authorized to process them.

The Data of the Users Community, duly anonymized, will be communicated only in aggregate form to the Company (direct “client” of LBV) – employer of the User/Data Subject – for reporting activities; such Data may also be communicated to public institutions and universities for advocacy and scientific research purposes, aimed at influencing public policies and the allocation of resources within political, economic and social systems and to ensure full respect for equal opportunities in professional and work development.

If the Company (direct “client” of LBV) needs to receive a report containing the Data of the Users of the Community in a non-anonymous form, the Data Controller will communicate only the name, surname, date of use of the course, total hours of duration of the course and certification of the results upon passing the course undertaken. This Data will be communicated only to that “client” and only if there is an evidence of the latter’s willingness to participate in the “formazione finanziata – FondoImpresa” and/or in the “fondo banche assicurazioni”.

In any case, LBV reserves the possibility to communicate to the “customer” Company the Data of the Data Subject related to name, surname, work e-mail and date of registration on the Platform, in order to allow the correct performance of the agreement signed with LBV.

The Data may be communicated for legitimate interest purposes, to suppliers of assistance services, technical, tax and legal consultancy, assignees of receivables in the context of credit securitization or credit assignment operations for strictly connected and instrumental purposes to the management of the relationship with the transferred Data Subject, as well as to the issue of securities, assignees of Company or business unit, potential buyers of LBV and companies resulting from possible mergers, divisions or other transformations of the LBV, also in the context of the activities functional to these operations, and to competent authorities.

The above-mentioned subjects may act, as appropriate, as external data controllers or independent data controllers in accordance with current legislation. You can request the updated list of companies to which the Data will be communicated at any time to the Data Controller, by means of a specific request to be sent using the contact information indicated in this Privacy Policy.

Is the Data transferred abroad?

The Data will mainly be processed within the national territory and the European Union, but could also be transferred to extra EU Countries.

Any transfer of the Data of the Data Subject to countries located outside the European Union will take place only in compliance with adequate guarantees for the purposes of the transfer itself (and in particular complying with the provisions of art. 45, 46 and 49 of GDPR), e.g. provided that the European Commission has confirmed that the third country has an adequate level of data protection or other data protection guarantees exist, such as binding corporate rules or signing up to standard EU contractual clauses.

With particular reference to the processing “to and from the United Kingdom” (following the Brexit event), until 30 June 2021 the Data will not be considered as transferred to a third country; therefore, unless the European Commission and the UK Government reach an adequacy agreement before that deadline, there will be no change from what has been in place so far.

In any case, the processing of data is carried out in accordance with the national and supranational data protection provisions in force (Legislative Decree 196/2003, as amended and supplemented by Legislative Decree 101/2018, and EU Regulation 679/2016).

The Data Subject will have the right to obtain from the Data Controller a copy of the Data held abroad and to obtain information about the place where such data is stored making an express request to be sent using the contacts indicated in this document.

What are the Data Subject rights?

By contacting the Data Controller and the DPO (using the above mentioned e-mail address) or the other contact information above, you can ask LBV at any time:

  • access to the Data concerning you, the rectification of inaccurate Data, the integration of incomplete Data, their deletion (right to be forgotten), the limitation of processing in the cases provided for art. 18 GDPR;
  • to receive in a structured format, common use and readable by automatic device the Data concerning you in the cases provided for by art. 20 GDPR; and, if technically feasible, to transmit such data to another data controller without hindrance;
  • to withdraw the consent given at any time; as well as oppose at any time the processing of Data pursuant to art. 21 GDPR, giving evidence of the reasons justifying the opposition;
  • any other request for clarification regarding the processing of Data carried out by the Data Controller.

Finally, we remind you that it is always possible to make a complaint to the competent Supervisory Authority (Guarantor for the Protection of Personal Data) pursuant to art. 77 of the GDPR, if it considers that the processing carried out by the Data Controller is contrary to the legislation in force.

The Data Controller may make changes and/or additions to this Privacy Policy, also as a result of changes in the applicable legislation. You can view the text of the Privacy Policy constantly updated on our Platform in the Privacy Policy section or make an explicit request by contacting the Data Controller or the DPO directly using the contact information indicated above.

Last updated: 10 February 2021