The Data Controller and the Data Processor
The Data Controller is the natural or legal person, public authority, service, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. The Data Controller is also responsible for data security aspects.
The Data Processor is the natural or legal person, public authority, service, or other body which processes personal data on behalf of the Data Controller.
With reference to this website, the Data Controller and the Data Processor (pursuant to Article 28 of EU Regulation No. 2016/679 – GDPR) is: Giorgia Nicholas.
For any clarification or for the exercise of the user’s rights, she can be contacted at the following email address: giorgianicholas@yahoo.it.
Place of Data Processing
The processing of data generated by the use of soulconsulting.net takes place in Trieste.
Where necessary, data related to the newsletter service may be processed by the Data Processor or by persons specifically appointed for this purpose at the relevant offices.

Data Processing MethodsLike all websites, this site uses log files in which information is automatically collected during users’ visits. The information collected may include:

• Internet Protocol (IP) address;
• Type of browser and device parameters used to access the site;
• Name of the Internet Service Provider (ISP);
• Date and time of the visit;
• Referring webpage and exit page;
• Number of clicks, if applicable.

The above information is processed automatically and collected exclusively in aggregated form to verify the proper functioning of the website and for security purposes. These data are processed based on the legitimate interests of the Data Controller.
For security reasons (anti-spam filters, firewalls, virus detection), the automatically recorded data may also include personal information such as the IP address. Such data may be used, in compliance with applicable laws, to block attempts to damage the website or harm other users, or to prevent other unlawful or harmful activities. These data are never used to identify or profile the user, but solely to protect the website and its users. Processing is carried out based on the legitimate interests of the Data Controller.
If the website allows users to leave comments or request specific services, including submitting a curriculum vitae for potential employment, the site automatically collects and records certain identifying data of the user, including email address. This information is voluntarily provided by the user at the time of the service request. By submitting a comment or other information, the user expressly accepts this privacy policy. The data collected will be used exclusively to provide the requested service and only for the time strictly necessary for its delivery.
Information that users choose to make public through the site’s services and tools is provided consciously and voluntarily by the user, and the site is not responsible for any potential violations of laws. It is the user’s responsibility to ensure they have the necessary permissions to submit personal data of third parties or content protected by national or international regulations.
Purpose of Data ProcessingData collected during the operation of the site are used for the purposes described above and specifically for:

• Newsletter subscription
• Blog comment subscription
• Enrollment in online courses
• Enrollment in videoconference courses
• Enrollment in in-person courses
• Profiling data (Cookies)

Data will be retained only for the period strictly necessary to achieve the purpose indicated and, in any case, no longer than 5 years. Data used for security purposes (e.g., blocking attempts to damage the site) are retained only for the time strictly necessary to achieve this purpose.
Data Provided by UsersAs indicated above, the optional, explicit, and voluntary sending of emails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data included in the message.
Specific summary information will be progressively provided or displayed on pages of the site designed for particular services upon request.

Article 13, paragraph 2 of EU Regulation 2016/679 lists the rights of the user. Soulconsulting.net therefore intends to inform users of the existence of:

• The right of the data subject to request from the data controller access to their personal data (Art. 15 EU Regulation), their updating (Art. 7, paragraph 3, letter a) Legislative Decree 196/2003), correction (Art. 16 EU Regulation), integration (Art. 7, paragraph 3, letter a) Legislative Decree 196/2003) or restriction of processing concerning them (Art. 18 EU Regulation), or to object, for legitimate reasons, to their processing (Art. 21 EU Regulation), as well as the right to data portability (Art. 20 EU Regulation);
• The right to request the deletion (Art. 17 EU Regulation), anonymization, or blocking of data processed in violation of the law, including data that do not need to be stored in relation to the purposes for which they were collected or subsequently processed (Art. 7, paragraph 3, letter b) Legislative Decree 196/2003);
• The right to obtain certification that operations of updating, correction, integration of data, deletion, blocking of data, or transformation have been communicated, including their content, to those to whom the data were disclosed or disseminated, except in cases where this is impossible or would require means manifestly disproportionate to the right protected (Art. 7, paragraph 3, letter c) Legislative Decree 196/2003).

Requests can be addressed to the data controller without formalities or, alternatively, by using the form provided by the Italian Data Protection Authority, or by sending an email to: giorgianicholas@yahoo.it.
If processing is based on Art. 6, paragraph 1, letter a – explicit consent to use – or on Art. 9, paragraph 2, letter a – explicit consent to the use of genetic, biometric, or health data, data revealing religious or philosophical beliefs, trade union membership, racial or ethnic origin, or political opinions – the user has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent given before withdrawal.
Similarly, in case of violation of the legislation, the user has the right to lodge a complaint with the Italian Data Protection Authority, the supervisory authority for data processing in Italy.
For a more detailed review of the rights to which you are entitled, see Articles 15 et seq. of EU Regulation 2016/679 and Article 7 of Legislative Decree 196/2003.