1.Data Controller

2.Data Protection Officer (DPO)

The Data Controller has determined that the appointment of a Data Protection Officer (DPO) is not mandatory under Article 37 GDPR, as the legal requirements are not currently met.

For any questions regarding the processing of personal data, please contact the Data Controller using the contact details above.

3.Types of Data Collected, Purposes and Legal Basis

3.1 Contact and Admission Requests

3.2 Newsletter and Marketing Communications

Personal data collected through voluntary newsletter subscriptions are processed for sending information and promotional communications regarding the school's activities. The mailing service is provided by Mailchimp.

3.3 Contact Forms and Comments

Personal data submitted through contact forms or comments are processed exclusively for responding to requests.

3.4 Browsing Data

The website automatically collects certain technical information, including IP addresses, browser type and operating system, solely for statistical purposes and to ensure the proper functioning of the website.

3.5 Cookies

The website uses technical cookies, analytical cookies (Google Analytics), and, where consent has been provided, third-party cookies. Please refer to our Cookie Policy for further details.

3.6 Purchases and Services (shop.eisversilia.it)

When purchasing services or enrolling in programmes through the school's online platform, billing and payment information is processed for contract performance and compliance with legal and tax obligations.

4.Children's Consent

Children under the age of 14 require the consent of a parent or legal guardian for the processing of their personal data (for example, newsletter subscriptions or online forms).

Where personal data are processed as part of the educational relationship (including enrolment, academic administration, catering and boarding services), processing is based on the contract entered into with parents or legal guardians.

5.Data Recipients

Personal data may be processed by authorised employees and external service providers acting on behalf of the Data Controller, including IT providers, hosting companies, newsletter providers, and administrative or tax consultants.

Where required, such providers are appointed as Data Processors pursuant to Article 28 GDPR.

Personal data are never disclosed to the public.

6.Data Processing and International Transfers

Personal data are processed using electronic and paper-based systems designed to ensure appropriate security and confidentiality.

Processing mainly takes place within the European Union and the European Economic Area (EEA). Where service providers (such as Google or Mailchimp) process data outside the EEA, transfers are carried out using appropriate safeguards provided under the GDPR, including the European Commission's Standard Contractual Clauses where applicable.

7.Data Retention

Personal data are retained only for as long as necessary to fulfil the purposes for which they were collected and in accordance with applicable legal requirements.

Accounting records are generally retained for ten years, while marketing data are retained until consent is withdrawn.

8.Your Rights

Under Articles 15–22 of the GDPR, you have the right to:

• Access your personal data;
• Request correction of inaccurate data;
• Request deletion of your personal data;
• Request restriction of processing;
• Object to processing;
• Receive your personal data in a portable format;
• Withdraw your consent at any time where processing is based on consent.

Requests may be sent to: info@eisversilia.it

9.Complaints

You have the right to lodge a complaint with the competent supervisory authority. In Italy, this is the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

www.garanteprivacy.it

10.Changes to this Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy at any time. Any updates will be published on this page. Users are encouraged to review this page periodically by referring to the "Last updated" date shown above.