Dear User,

Pursuant to art. 13 EU Regulation 2016/679 (hereinafter “GDPR"), we inform you that processing of the data provided by you will be carried out using methods and procedures aimed at guaranteeing that the processing of Personal Data will be carried out respecting the fundamental rights and freedom and dignity of the data subject, with special concern for confidentiality and security, personal identity and right to protection of personal data.

We remind you that processing means any operation or set of operations, carried out with or without the use of automatic processes and applied to personal data or to the sets of personal data, such as collecting, recording, organising, structuring, retaining, adapting or modifying, extracting, using, communicating by transmission, dissemination or any other way of making them available, comparing or interconnecting, limiting, erasure or destruction (art. 4 GDPR).

1 - Subject matter of the processing

The data processed by Scuola Leonardo da Vinci s.r.l. refer to:

• Data collected automatically. The information systems and applications for operating this website, during their ordinary operation, acquire some personal data (transmission of which is implicit in the use of Internet communications protocols) which can potentially be associated with identifiable users. The data collected includes IP addresses or dominion names of computers used by users connecting to the website, addresses in URI (Uniform Resource Identifier) notation of the requested resources, time of request, method used to submit the request to the server, size of the file obtained in reply, numerical code indicating the state of the reply given by the server (successful, error, etc.) and other parameters referring to the operating system, browser and IT environment of the user. These data are used, for the time strictly needed, only to collect anonymous statistical information about use of the Websites and to check their proper operation. Provision of such data is obligatory since it is directly connected to the experience of web navigation.
• Data voluntarily provided by the user. Processing of the data you provide by filling out the form is subject to your express and unmistakeable consent, which you can give to the specific information notice for the form you are filling out (insert link to contact box information notice ).
  No further information notices or consent requests are needed if you want to send an email to our email addresses.
• Cookies. The website does not use/uses first party/third party technical/profiling cookies which can collect user navigation data. Provision of such data is optional and requires free and informed consent. Cookies are used to analyse the efficacy of the website and make it more user friendly through time. For further information, see our cookie policy (put in link to cookie policy).

2 - Legal grounds for processing

The legal grounds for the processing are to be found in:

1. your express and unmistakeable consent (pursuant to Art. 6.1, lett. a) of the GDPR);
2. the legitimate interest of the Data Controller (pursuant to art. 6.1 lett. f) of the GDPR.

3 - Purpose of the processing

The personal data are provided only to improve your navigation experience.

4 - Manner of processing

The personal data you provide will be processed in compliance with the above regulations and with the confidentiality obligations inspiring the Data Controller’s business. The data will be processed both with IT tools and on paper and on any other kind of suitable support, complying with the proper security measures laid down in art. 5 par. 1 lett. f) of the GDPR.

The processing is limited to the following operations and methods:

• collecting the data from the data subject;
• recording and processing on computer;
• organising the files in a mainly automatic manner.

The data will not be disseminated, but will or may be communicated to public or private parties acting within the context of the purposes described above.

5 - Data retention

The data will be retained for a time period no longer than that needed to achieve the purposes for which they are processed (“principle of limitation of retention”, art. 5 GDPR).

6 - Access to processing

The data will be made accessible, for the purposes under item No. 3:

• to employees/collaborators in their role as people in charge of handling, after suitable appointment;
• to third parties, partners of the Data Controller.

7 - Communication of the data

The data will not be communicated to unauthorised third parties or disseminated in any way. To this end, the data will be processed using security measures suitable for preventing unauthorised access to the data by third parties and guaranteeing confidentiality.

Without requiring express consent, the Data Controller may communicate your data for the purposes under item 3 to the following parties:

• collaborators and external company processors appointed to carry out data processing.

8 - Transfer of the data

The personal data will be processed and retained on servers located within the European Union belonging to the Data Processor and/or to third party companies appointed and duly named as Data Processors.
The data will not be transferred outside the European Union.

9 - Nature of the data provided and consequences of refusal to answer

Providing the data for the purposes under item 3 is obligatory. Lacking such data, it will not be possible to proceed with navigating on this site or accepting your request for information.

10 - Rights of the data subject

According to the provisions of the GDPR, the data subject has the following rights against the Data Controller:

• obtain confirmation that his data are being processed, and in such case, obtain access to the personal data (Right of access Art. 15);
• obtain rectification of inaccurate data concerning him without unjustified delay (Right to rectification Art. 16);
• obtain erasure of personal data without unjustified delay; the data Controller has the obligation to erase without unjustified delay the personal data, if certain conditions exist (so-called “right to be forgotten”, art. 17);
• obtain limitation of processing in certain cases (right to limitation of processing, art. 18);
• receive in a structured format, of common use and readable from an automatic device, the personal data which concern him and has the right to obtain direct transmission to another data Controller, without hindrance from the data Controller to whom he has provided the data, in certain cases (Right to data portability art. 20);
• object at any time for reasons related to your special situation, to processing of personal data concerning you (Right to object, Art. 21);
• receive without undue delay communication of breach of personal data incurred by the Data Controller (Art. 34);
• recall at any time the consent expressed (Conditions for consent art. 7).

Where applicable, you also have the rights under Articles 16-21 of GDPR (right to rectification, so-called “right to be forgotten”, right to limitation, right to portability of the Data, right to object), as well as the right to lodge complaint to the Authority for the Protection of Personal Data.

11 - How to exercise your rights

The data subject who wants to exercise his/her rights may contact the data Controller at the email address: This email address is being protected from spambots. You need JavaScript enabled to view it.

12 - Data Controller

The Data Controller is Scuola Leonardo da Vinci s.r.l. – Via Bufalini 3, 50122 Florence – Tel. 055-261181 – Tax Code 01454960483.

The list of data processors and of those in charge of processing can be consulted at the offices of the data controller as defined above.

13 - Updates to this information notice

This Information notice may undergo changes. Any substantial change will be notified to the data subjects by notice or publication on the website. 

Information updated on 2018 July 18th