Privacy Policy en - FLF Scuola di Lingue

privacy policy

Data Controller

FLF Language School

Piazza Fabrizio De André 54038, Montignoso (MS)

VAT number: 01402910457

Email address of the Controller: info@flfscuoladilingue.it

Discover how our courses can make learning English an enjoyable and effective experience!

Types of Data Collected

Among the Personal Data collected by this Application, either independently or through third parties, there are: email; usage data; name; phone number; tracking tools; number of users; session statistics.

Detailed information on each type of Personal Data collected is provided in the dedicated sections of this privacy policy or through specific information texts displayed prior to the collection of such Data.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Application.

Unless otherwise specified, all Data requested by this Application are mandatory. If the User refuses to provide them, it may be impossible for this Application to provide the Service. In cases where this Application specifically states that some Data are optional, Users are free not to communicate such Data without affecting the availability or operation of the Service.

Users who have doubts about which Data are mandatory are encouraged to contact the Controller.

The possible use of Cookies – or other tracking tools – by this Application or by the owners of third-party services used by this Application is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.

The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Application.

Methods and place of processing the collected Data

Processing methods

The Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

The processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Controller, in some cases, other parties involved in the organization of this Application (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) may have access to the Data, if necessary, as Data Processors appointed by the Controller. The updated list of Processors can always be requested from the Data Controller.

Place

The Data is processed at the operational offices of the Controller and any other location where the parties involved in the processing are located. For further information, contact the Controller.

The User’s Personal Data may be transferred to a country other than the one where the User is located. To obtain further information about the location of the processing, the User can refer to the section concerning the details on the processing of Personal Data.

Retention period

Unless otherwise indicated in this document, Personal Data is processed and stored for as long as required by the purpose for which it was collected and may be stored for a longer period due to any legal obligations or based on the consent of the Users.

Purposes of Processing the Collected Data

User Data is collected to allow the Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), identify any malicious or fraudulent activities, and for the following purposes: Contacting the User, Statistics, and Displaying content from external platforms.

To obtain detailed information on the purposes of the processing and on the Personal Data processed for each purpose, the User can refer to the section “Details on the Processing of Personal Data.”

Details on the Processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Contacting the User

Contact form (this Application)

By filling in the contact form with their Data, the User consents to its use for responding to requests for information, quotes, or any other requests indicated in the form’s header.

Personal Data processed: Usage Data; email; name; phone number.

Statistics

The services contained in this section allow the Data Controller to monitor and analyze traffic data and track User behavior.

Google Analytics 4 (Google Ireland Limited)

Google Analytics is a statistics service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compile reports, and share them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the ads of its own advertising network. In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is stored in any data center or server. To learn more, you can consult Google’s official documentation. To understand how Google uses the Data, please review their partner policy and commercial data page.

Personal Data processed: Usage Data; number of Users; session statistics; Tracking Tools.

Place of processing: Ireland – Privacy Policy – Opt Out.

Displaying content from external platforms

This type of service allows content hosted on external platforms to be viewed directly from the pages of this Application and to interact with them. These services are often referred to as widgets, which are small elements embedded in a website or application. They provide specific information or perform a particular function and often allow interaction with the user. This type of service may still collect web traffic data related to the pages where the service is installed, even when users do not use it.

Google Fonts (Google Ireland Limited)

Google Fonts is a font style display service managed by Google Ireland Limited that allows this Application to integrate such content into its pages.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: Ireland – Privacy Policy

Google Maps Widget (Google Ireland Limited)

Google Maps is a map display service managed by Google Ireland Limited that allows this Application to integrate such content into its pages.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: Ireland – Privacy Policy

Cookie Policy

This Application uses Tracking Tools. For more information, Users can consult the Cookie Policy.

Additional information for users

Legal basis of the processing

The Controller processes Personal Data related to the User if one of the following conditions applies:

•The User has given consent for one or more specific purposes.

•The processing is necessary for the performance of a contract with the User and/or for pre-contractual measures.

•The processing is necessary to comply with a legal obligation to which the Controller is subject.

•The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.

•The processing is necessary for the legitimate interests pursued by the Controller or by a third party.

It is always possible to request the Controller to clarify the specific legal basis of each processing activity and, in particular, to specify whether the processing is based on the law, required by a contract, or necessary to conclude a contract.

Additional information on the retention period

Unless otherwise indicated in this document, Personal Data is processed and stored for as long as required by the purpose for which it was collected and may be retained for a longer period due to legal obligations or based on the Users’ consent.

Therefore:

•Personal Data collected for purposes related to the performance of a contract between the Controller and the User will be retained until the contract has been fully performed.

•Personal Data collected for purposes connected to the legitimate interest of the Controller will be retained until such interest is satisfied. The User may obtain further information regarding the legitimate interest pursued by the Controller in the relevant sections of this document or by contacting the Controller.

•When the processing is based on the User’s consent, the Controller may retain the Personal Data for a longer period until the consent is withdrawn. Additionally, the Controller may be required to retain the Personal Data for a longer period to comply with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, after this period, the right to access, delete, rectify, and the right to data portability can no longer be exercised.

User rights under the General Data Protection Regulation (GDPR)

Users may exercise certain rights regarding their Data processed by the Controller. In particular, within the limits provided by law, the User has the right to:

•Withdraw consent at any time. The User can withdraw consent to the processing of their Personal Data previously given.

•Object to the processing of their Data. The User can object to the processing of their Data when it is carried out on a legal basis other than consent.

•Access their Data. The User has the right to obtain information about the Data processed by the Controller, certain aspects of the processing, and to receive a copy of the Data being processed.

•Verify and request rectification. The User can verify the accuracy of their Data and request that it be updated or corrected.

•Obtain the restriction of processing. The User can request the restriction of the processing of their Data. In this case, the Controller will not process the Data for any other purpose than storage.

•Obtain the deletion or removal of their Personal Data. The User can request the deletion of their Data by the Controller.

•Receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transferred to another controller without any hindrance.

•Lodge a complaint. The User can lodge a complaint with the competent data protection authority or take legal action.

Users have the right to obtain information regarding the legal basis for Data transfers to a foreign country, including any international organization governed by public international law or set up by two or more countries, such as the UN, and regarding the security measures adopted by the Controller to protect their Data.

Details about the right to object

When Personal Data is processed in the public interest, in the exercise of official authority vested in the Controller, or for the legitimate interests pursued by the Controller, Users may object to such processing for reasons related to their particular situation.

Users are informed that, if their Data is processed for direct marketing purposes, they can object to the processing at any time, free of charge, and without providing any justification. If Users object to processing for direct marketing purposes, their Personal Data will no longer be processed for such purposes. To find out whether the Controller processes Data for direct marketing purposes, Users can refer to the relevant sections of this document.

How to exercise rights

Any requests to exercise User rights can be addressed to the Controller using the contact details provided in this document. These requests are free of charge and will be addressed by the Controller as soon as possible, in any case within one month, providing the User with all information required by law. Any rectifications, deletions, or limitations of processing will be communicated by the Controller to each of the recipients, if any, to whom the Personal Data has been disclosed, unless this proves impossible or involves a disproportionate effort. The Controller will inform the User about such recipients if the User so requests.

Additional information for users

Defense in court

The User’s Personal Data may be used by the Controller in legal proceedings or in the stages leading to possible legal action arising from improper use of this Application or the related Services. The User declares to be aware that the Controller may be required to reveal the Data upon request of public authorities.

Specific information

Upon request of the User, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

System logs and maintenance

For operational and maintenance purposes, this Application and any third-party services it uses may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User’s IP address.

Information not contained in this policy

More details concerning the collection or processing of Personal Data may be requested from the Controller at any time using the contact information provided.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, within this Application as well as, if technically and legally feasible, by sending a notification to Users via any contact information available to the Controller. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

If the changes affect processing activities carried out on the basis of the User’s consent, the Controller will collect new consent from the User, where required.

Definitions and Legal References

Personal Data (or Data)

Personal Data means any information that, directly or indirectly, including in connection with any other information, such as a personal identification number, makes a natural person identified or identifiable.

Usage Data

Information collected automatically through this Application (or third-party applications integrated in this Application), which may include: the IP addresses or domain names of the computers used by the User who connects with this Application, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various time details per visit (e.g., the time spent on each page), and the details about the path followed within the Application, with particular reference to the sequence of pages visited, as well as other parameters about the User’s operating system and IT environment.

User

The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor (or Processor)

The natural person, legal entity, public authority, or any other body which processes Personal Data on behalf of the Controller, as described in this privacy policy.

Data Controller (or Controller)

The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.

This Application

The hardware or software tool by which the Personal Data of the Users is collected and processed.

Service

The service provided by this Application as described in the relevant terms (if available) on this website/application.

European Union (or EU)

Unless otherwise specified, any reference to the European Union in this document includes all current member states of the European Union and the European Economic Area (EEA).

Cookies

Cookies are Tracking Tools that consist of small pieces of data stored in the User’s browser.

Tracking Tool

Tracking Tool means any technology, for example, Cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting, that allows tracking of Users, for instance, by collecting or storing information on the User’s device.

Legal References

Unless otherwise specified, this privacy policy only concerns this Application.

Last updated: October 4, 2024