Privacy Policy

Last updated: 27 May 2026

This privacy policy describes how personal data of users visiting accademiaditaliano.com is processed, in accordance with EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 and subsequent amendments.

1. Data Controller

Adiuva S.r.l. (operating under the brand Accademia di Italiano)
Registered office: Via Durini, 7 - 20122 Milan (MI), Italy
Email: [email protected]
PEC: [email protected]

2. Types of data collected

Data provided voluntarily

• Name, surname, email, phone - via contact forms, information requests, course enrolment
• Payment details - via third-party gateway (Flywire) for tuition payments
• Student visa documents (passport, financial proof) - only if provided for visa support requests

Data collected automatically

• IP address, browser type, language, pages visited - for statistical analysis (Google Analytics)
• Technical and analytical cookies (see Cookie Policy)

3. Purposes of processing

• Provision of requested services (course enrolment, visa support, contact)
• Response to information requests
• Compliance with legal, accounting and tax obligations
• Service communications (enrolment confirmations, course materials)
• Marketing communications - only with explicit consent
• Aggregated statistical analysis of the website

4. Legal basis

• Performance of contract or pre-contractual measures (art. 6.1.b GDPR)
• Compliance with legal obligations (art. 6.1.c GDPR)
• Explicit consent for marketing purposes (art. 6.1.a GDPR)
• Legitimate interest of the Controller for aggregated statistical analysis (art. 6.1.f GDPR)

5. Processing methods

Data is processed using both automated and manual tools, by authorised and trained personnel, with appropriate technical and organisational security measures (HTTPS encryption, restricted access, periodic backups).

6. Data retention period

• Generic contact data: 24 months from last contact
• Enrolled student data: for course duration + 10 years (tax and curricular obligations)
• Payment data: 10 years (tax obligations)
• Marketing data: until consent is withdrawn
• Analytical cookies: see Cookie Policy

7. Communication and disclosure

Data is not publicly disclosed. It may be communicated to:

• Authorised Accademia di Italiano personnel (teachers, registrar, administration)
• Service providers (Cloudflare hosting, Flywire payments, Google Workspace email, Google analytics) - all appointed as Data Processors
• Competent authorities (Questura, Consulates) for student visa procedures - only at student's request
• Tax and supervisory authorities as required by law

8. Data transfer outside the EU

Some service providers (Google, Cloudflare) operate servers outside the EU. Transfers occur on the basis of Standard Contractual Clauses approved by the European Commission and additional security measures.

9. User rights

Under articles 15-22 GDPR, the data subject has the right to:

• Access their data
• Rectify inaccurate data
• Erasure (right to be forgotten)
• Restriction of processing
• Data portability
• Object to processing
• Withdraw consent (without affecting the lawfulness of prior processing)
• Lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it)

To exercise these rights, write to [email protected].

10. Minors

Services are intended for adults. For minors under 16, consent to data processing must be provided by a parent or legal guardian.

11. Changes

This privacy policy may be updated. Substantial changes will be communicated to data subjects by email or through a notice on the website.