Privacy Notice – Pursuant to Article 13 GDPR

Data Controller 

Nice Exchange Italy di Sara Antoci, with registered office at Via dei Pozzilli 5, 93012 Gela (CL), Italy, VAT no. IT02135090856 (hereinafter, “NICE” or the “Controller”). 

---

Subject of the Processing 

NICE processes personal data provided by users through the contact form on the website, including: 

1. Full name 
2. Date of birth 
3. Gender 
4. Nationality 
5. City / State 
6. Email address 
7. Phone number 

These data are voluntarily provided by the user when submitting an information request. 

---

Purpose and Legal Basis of Processing 

Personal data are processed for the following purposes: 

1. Responding to information requests submitted via the website. 
   Legal basis: performance of pre-contractual measures requested by the data subject (Art. 6(1)(b) GDPR).
2. Contacting the user by email or phone to provide details regarding cultural exchange and au pair programs. 
   Legal basis: performance of pre-contractual measures (Art. 6(1)(b) GDPR). 
3. Optional sending of informational or promotional communications, only with explicit consent. 
   Legal basis: consent (Art. 6(1)(a) GDPR).
4. Compliance with legal, administrative, fiscal, and accounting obligations. 
   Legal basis: compliance with legal obligations (Art. 6(1)(c) GDPR).
5. Protection of the Controller’s rights, including the right of legal defense. 
   Legal basis: legitimate interest (Art. 6(1)(f) GDPR).  

Providing personal data is mandatory for purposes 1, 2, and 4. Failure to provide data will make it impossible to process the request. 

---

Processing Methods 

Data are processed using manual and electronic tools, in accordance with GDPR security requirements, and by authorized personnel specifically instructed by the Controller. 

The processing is carried out using methods strictly related to the purposes outlined above and aims to prevent unauthorized access, loss, disclosure, or unlawful use of the data. 

---

Data Retention 

Data will be retained for: 

• 12 months from the information request, if no further relationship follows; 
• Until consent is withdrawn for promotional communications; 
• 10 years for data subject to legal, fiscal, or administrative obligations; 
• The entire duration of any legal dispute and until the deadlines for appeals expire. 

---

Data Communication 

Data may be disclosed to subjects acting as independent controllers, including: 

• Legal, tax, or administrative consultants; 
• Banking or insurance institutions; 
• Public authorities in compliance with legal obligations; 
• Subjects legally authorized to access the data.

Data may also be communicated to data processors appointed under Art. 28 GDPR, such as: 

• Digital service providers, hosting, CRM, email services; 
• Technical website providers. 

Data will not be disseminated. 

---

Data Transfer 

Data are managed and stored on servers located within the European Union. 

Any transfer outside the EU may occur only if: 

• An adequacy decision by the European Commission exists; 
• Standard Contractual Clauses (Art. 46 GDPR) are adopted; 
• Explicit consent is provided. 

---

Data Subject Rights 

Users may exercise at any time the rights provided by Articles 15–22 GDPR, including: 

• Right of Access 

To obtain confirmation that data are being processed and to access such data. 

• Right to Rectification 

To request the correction or completion of inaccurate or incomplete data. 

• Right to Erasure 

To request deletion of data when: 

• They are no longer necessary for the purposes for which they were collected; 
• Consent is withdrawn (or no other legal basis exists); 
• Data are unlawfully processed; 
• Deletion is required by law. 

• Right to Restriction<br>
  To request restriction of processing in cases of dispute, unlawful processing, need for legal defense, or pending objection.
• Right to Data Portability
  To receive personal data in a structured, commonly used, machine-readable format and transmit them to another controller, where applicable. 
• Right to Object 
  To object at any time to processing based on legitimate interest.
• Exercising Rights 
  Requests may be sent to: info@niceculturalexchange.com 
• Complaint to Supervisory Authority 
  The user may lodge a complaint with the Data Protection Authority.

 

---

Cookies and Tracking Tools 

This website may use technical cookies and, upon consent, analytical or profiling cookies. For more information, please check our Cookie Policy. 

This Privacy Policy may be updated at any time. The latest version will always be available on this page. 

This GDPR Compliance Statement applies to the website and services provided through the domain: https://niceculturalexchange.com/. 

© NICE – All rights reserved.