Privacy Policy

Pursuant to Regulation EU 2016/679 (GDPR) and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, Schola Mastro provides the following information on the processing of personal data. The Italian version is the authoritative legal text.

Last updated: 29/04/2026

1. Data Controller

The Data Controller is:

3. Types of data processed

3.1 Navigation data

IP addresses, browser type, operating system, URLs and timestamps collected for security and anonymous statistics.

3.2 Contact data

Name, email, phone, region and course of interest collected via the contact form and WhatsApp.

3.3 Enrolment data

Tax code, date and place of birth, full personal details and identity document for enrolment and certificate issuance.

3.4 Assessment data

Exam results, grades, attendance and placement hours processed to certify programme completion.

3.5 Certificate register data

Certificate holder name, course, date of issue and unique code registered in the public verification system.

4. Legal basis and purposes

Processing is based on the following legal grounds under Art. 6 GDPR:

• Contact data: pre-contractual measures (Art. 6.1.b) or consent (Art. 6.1.a).
• Enrolment data: performance of contract (Art. 6.1.b).
• Assessment and certificate data: legal obligation (Art. 6.1.c).
• Certificate register: legitimate interest (Art. 6.1.f).
• Navigation data: legitimate interest (Art. 6.1.f).

5. Processing methods

Data is processed with automated and manual tools, with appropriate technical and organisational security measures.

6. Retention periods

Data is retained as follows:

• Navigation logs: max 6 months.
• Contact data: 24 months from last contact.
• Enrolment and training data: 10 years.
• Certificate register: indefinitely.

8. International transfers

Transfers outside the EEA are protected by:

• EC adequacy decisions (Art. 45 GDPR).
• Standard Contractual Clauses (Art. 46 GDPR).

9. Your rights

Under Arts. 15-22 GDPR you have the right to:

• Access (Art. 15)
• Rectification (Art. 16)
• Erasure (Art. 17)
• Restriction (Art. 18)
• Portability (Art. 20)
• Objection (Art. 21)
• Withdraw consent (Art. 7.3)

To exercise these rights, write to:

privacy@schola-mastro.it

10. Right to complain

You may lodge a complaint with the Garante per la Protezione dei Dati Personali.

Garante per la Protezione dei Dati Personali — www.garanteprivacy.it

11. Automated decision-making

Schola Mastro does not carry out automated decision-making or profiling under Art. 22 GDPR.

12. Cookies

For details on cookies and tracking technologies, please refer to the Cookie Policy.

13. Changes

Schola Mastro reserves the right to modify this policy. The date of last update is shown at the top of the page.