Privacy Policy
Last updated: 27 May 2026
This policy describes how the personal data of users who visit the website accademiaditaliano.it is processed, in accordance with EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.
1. Data controller
Adiuva S.r.l. (operating under the Accademia di Italiano brand)
Registered office: Via Durini, 7 - 20122 Milan (MI), Italy
Email: privacy@adiuva.it
Certified email (PEC): adiuva@pec.it
2. Types of data collected
Data provided voluntarily
- First name, surname, email, telephone - through contact forms, information requests, course enrolment
- Payment data - through a third-party gateway (Flywire) for fee payments
- Documents for the student visa (passport, proof of funds) - only if provided to request visa support
Data collected automatically
- IP address, browser type, language, pages visited - for statistical analysis (Google Analytics)
- Technical and analytical cookies (see Cookie Policy)
3. Purposes of processing
- Provision of the requested services (course enrolment, visa support, contact)
- Response to information requests
- Fulfilment of legal, accounting and tax obligations
- Service communications (enrolment confirmations, teaching materials)
- Marketing communications - only with explicit prior consent
- Statistical analysis of the website in aggregate form
4. Legal basis
- Performance of a contract or pre-contractual measures (art. 6.1.b GDPR)
- Fulfilment of legal obligations (art. 6.1.c GDPR)
- Explicit consent for marketing purposes (art. 6.1.a GDPR)
- Legitimate interest of the controller for aggregate statistical analysis (art. 6.1.f GDPR)
5. Method of processing
Data is processed by automated and manual means, by authorised and trained staff, with technical and organisational security measures adequate to ensure integrity, confidentiality and availability (HTTPS transmission encryption, restricted access, periodic backups).
6. Retention period
- General contact data: 24 months from the last contact
- Data of enrolled students: for the duration of the course + 10 years (tax and academic-record obligations)
- Payment data: 10 years (tax obligations)
- Marketing data: until consent is withdrawn
- Analytical cookies: see Cookie Policy
7. Communication and disclosure
Data is not disclosed publicly. It may be communicated to:
- Authorised staff of Accademia di Italiano (teachers, administration office, accounting)
- Service providers (hosting Cloudflare, payments Flywire, email Google Workspace, analytics Google) all appointed as data processors
- Competent authorities (Police Headquarters, Consulates) for student-visa procedures - only at the student's request
- Tax and supervisory authorities as required by law
8. Transfer of data outside the EU
Some providers (Google, Cloudflare) also operate servers outside the EU. The transfer takes place on the basis of Standard Contractual Clauses approved by the European Commission and with supplementary security measures.
9. Rights of the data subject
Under articles 15-22 GDPR, the data subject has the right to:
- Access their data
- Rectification of inaccurate data
- Erasure (right to be forgotten)
- Restriction of processing
- Data portability
- Objection to processing
- Withdrawal of consent (without affecting the lawfulness of prior processing)
- Lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it)
To exercise these rights, write to privacy@adiuva.it.
10. Minors
The services are intended for adults. For minors under 16, consent to the processing of data must be provided by a parent or legal guardian.
11. Changes
This policy may be updated. Any substantial changes will be communicated to data subjects by email or by notice on the website.