Last updated: 2 November 2026

• 1. Who processes your data
• 2. What data, why and for how long
• 3. Who we share it with
• 4. Data outside the European Union
• 5. Cookies and external content
• 6. Your rights

This page explains how Accademia Lingua Italiana Assisi processes the personal data of people who visit the website, ask for information, enrol in courses or take part in activities. It is the information notice required by articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

1. Who processes your data

The data controller is Accademia Lingua Italiana Assisi s.a.s. di Chiuchiù Angelo & C., Via Tiberio d’Assisi, 10 – 06081 Assisi (PG), Italy, VAT no. 00780430542.

The contact person for data protection is Lorenzo Chiuchiù. For any question about your data write to [email protected] or come to the school office, Via Santa Maria delle Rose, 17 – 06081 Assisi.

2. What data, why and for how long

Browsing the website

The website is static: it has no accounts and uses no cookies. To count visits it uses Cloudflare Web Analytics, a statistics service that uses no cookies, does not follow you across other sites and builds no profiles. It counts page views, the referring page, the country, and the type of browser and device. It does not store your IP address in the statistics. The service that hosts the website, GitHub Pages, logs visitors’ IP addresses for the security of the service.

Legal basis: legitimate interest in keeping the website secure and working and in understanding how it is used (art. 6.1.f GDPR). Retention: according to GitHub’s rules, described in its privacy statement. The statistics are aggregated and anonymous. You can object by using a browser or an extension that blocks analytics. See the Cloudflare Web Analytics page.

Requests for information

If you write to us by email, WhatsApp or phone, we use your name, your contact details and what you tell us to reply and, if you ask, to prepare a quote.

Legal basis: steps taken at your request before a contract (art. 6.1.b). Retention: 24 months from the last contact, if you do not enrol.

Enrolment and course

To enrol we need your name, date of birth, nationality, contact details, level of Italian and course dates. During the course we process attendance, test results and assessments, to organise the classes, follow your progress and issue the certificates of attendance and assessment.

Legal basis: performance of the contract (art. 6.1.b). Retention: for the whole relationship and then 10 years, so that we can issue duplicate certificates.

Payments, invoices and accounts

We process the data needed to receive payments, issue receipts or invoices and keep our accounts. We do not see or store full payment card details: the bank or the payment service handles them.

Legal basis: contract and legal obligations (art. 6.1.b and 6.1.c). Retention: 10 years, as required by law (art. 2220 of the Italian Civil Code).

Study visa

If you ask us for the pre-enrolment certificate for your visa, we process your passport data and, if the visa is refused, the refusal document you send us for the refund.

Legal basis: contract (art. 6.1.b). Retention: as for enrolment data.

Accommodation

If you ask us for help with accommodation, we use your data and the dates of your stay to find a place and pass them to the landlord or the hotel. From then on your host processes the data as an independent controller, including for the registration of guests with the police required by law.

Legal basis: contract (art. 6.1.b). Retention: as for enrolment data.

Certification exams

If you register for a CILS or CERT.IT exam, we send the required data to the university that issues the certificate.

Legal basis: contract (art. 6.1.b). Retention: as for enrolment data; the university processes them as an independent controller.

University credits, scholarships, funding bodies

If you study through a program of your university, a scholarship or funding (for example CSN in Sweden), we give the body the information it needs, such as attendance and results, for that purpose only.

Legal basis: contract and, where needed, your consent (art. 6.1.b and 6.1.a).

Photos and videos

During lessons and activities we sometimes take photos and videos. We publish them on the website or on social media, where you can be recognised, only if you allow us to. You can withdraw your permission at any time: we remove the content from our channels.

Legal basis: consent (art. 6.1.a).

Minors

For students under 18, enrolment and consents are given by the person with parental responsibility.

Without the data required for enrolment we cannot organise the course. All other consents are optional and change nothing in the course.

3. Who we share it with

Your data is seen by the people at the Academy who need it: school office, teachers, management. It is also processed, on our behalf or as independent controllers, by:

• Google for the enrolment form and the student records (Google Forms and Sheets) and for the servers that host the Academy’s Moodle platform;
• GitHub for hosting the website;
• Zoom for online lessons;
• Wise, PayPal and Banca Monte dei Paschi di Siena for payments, including card payments;
• WhatsApp (Meta) if you choose to contact us that way;
• our accountant, for the accounts;
• the landlord or hotel where you stay, if you ask us for accommodation;
• the universities of the certification exams and the bodies of your study programs;
• the authorities, when the law requires it.

We do not sell your data and do not give it to anyone for advertising.

4. Data outside the European Union

Some of the services listed (Google, GitHub, Zoom, PayPal, Wise, Meta) may process data in the United States. The transfer is based on the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework), for the providers that take part in it, or on the standard contractual clauses approved by the Commission.

If you apply for a visa, your data reaches the Italian diplomatic mission in your country: this is necessary for the application (art. 49.1.b GDPR).

5. Cookies and external content

The website uses no cookies. Visit statistics are made with Cloudflare Web Analytics, which uses no cookies and does not identify you: this is why we show no cookie banner.

Some pages show content from other services:

• Google Maps map, at the bottom of the pages: the map loads only when you press the “Show the address on the map” button. Before the click, Google receives nothing. After the click, Google receives your IP address and may use its own cookies, according to its privacy policy.
• YouTube videos: the video loads only when you press the “Watch the video” button. Before the click, YouTube (Google) receives nothing. After the click, YouTube receives your IP address and may record data. We use privacy-enhanced mode (youtube-nocookie.com).

The fonts of the website are hosted on our own site. They are not loaded from Google.

The browser features the website uses to remember choices such as language or filters stay on your device and are not sent to us. You can delete cookies and site data in your browser settings.

6. Your rights

At any time you can ask us to:

• tell you what data we hold and give you a copy (art. 15);
• correct it (art. 16) or delete it (art. 17);
• restrict its use (art. 18);
• give it to you in a machine-readable format, to take it elsewhere (art. 20);
• stop processing based on legitimate interest (art. 21);
• withdraw a consent, without affecting what was done before (art. 7.3).

Just send an email to [email protected]. We reply within one month.

If you think we process your data incorrectly, you can lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of the country where you live or work.

This is a translation of the Italian text. If the two differ, the Italian text prevails.