Privacy Policy

Data controller

The data controller is Formacontinua S.r.l., VAT number 06288620658, which runs the marketplace in coordination with formacontinua.it. To exercise your rights under the GDPR or for any request regarding the processing of your data, contact the privacy officer via https://formacontinua.it/contattaci/.

Data collected

• Browsing data and technical logs (IP address, browser type, pages visited) automatically collected by the server and by statistical tools in aggregate form
• Data voluntarily submitted through the "Request information" form (full name, email, phone number, course of interest, optional message)
• UTM parameters from marketing campaigns, if present in the URL
• Login credentials for the restricted "/admin" area, reserved to authorized staff of formacontinua.it

We do not process special categories of data (Art. 9 GDPR) or data relating to criminal convictions. The site is not directed at children under 16 and we do not knowingly collect data from minors.

Purpose and legal basis

• Responding to requests for information about courses: legal basis is consent given by submitting the form (Art. 6.1.a GDPR) and pre-contractual measures requested by the user (Art. 6.1.b GDPR).
• Site security and abuse prevention (e.g. rate limiting on requests): legitimate interest of the controller (Art. 6.1.f GDPR).
• Aggregate statistics on traffic and catalog usage: legitimate interest for the cookieless tools that are always active (Cloudflare Web Analytics); user consent for any tools that use cookies (Plausible or Google Analytics), activated only after acceptance in the cookie banner. See the Cookie Policy for details on each tool.
• Compliance with legal obligations (e.g. tax, accounting, or at the request of the authorities): legal obligation (Art. 6.1.c GDPR).

Providing your data in the information request form is necessary for us to get back to you: without it we cannot process your request. Providing the optional message field is not mandatory.

Recipients and data processors

Data may be accessed by authorized staff of Formacontinua S.r.l. and formacontinua.it, and shared, to the extent strictly necessary and under a data processing agreement (Art. 28 GDPR) where applicable, with the following providers:

• Hosting and database provider (Hostinger), for storing the site and the leads collected through the form
• Email/SMTP service provider, used to send internal notifications of new leads to formacontinua.it
• Cloudflare, for content delivery (CDN) and cookieless traffic statistics
• If active, the providers of the analytics tools listed in the Cookie Policy (Plausible Analytics or Google Analytics)

Data is not sold or shared with third parties for their own independent marketing purposes.

International data transfers

Some of the providers listed above (e.g. Google, for Google Analytics, if configured) may process data outside the European Economic Area. In such cases, the transfer takes place on the basis of Standard Contractual Clauses approved by the European Commission or another adequate safeguard under Chapter V of the GDPR. You can request more information by contacting the privacy officer indicated in this notice.

Retention

• Data collected through the "Request information" form is kept for as long as necessary to handle the request and, unless consent is withdrawn earlier, for a maximum of 24 months from the last contact, after which it is deleted or anonymized.
• Server technical logs are kept for a maximum of 6 months, unless needed to investigate computer crimes.
• Statistical data collected by analytics tools activated with consent is kept according to the terms set out in the Cookie Policy.
• Different retention periods may apply where required by specific legal obligations (e.g. tax/accounting record-keeping).

Processing methods and security

Processing is carried out using electronic tools, with logic strictly related to the purposes indicated, and with appropriate technical and organizational measures to ensure the security and confidentiality of data (restricted access to the admin area protected by authentication and a signed session cookie, encrypted HTTPS connections, minimization of the data collected).

Cookies

The site uses technical cookies and equivalent tools (local storage) necessary for its operation, plus cookieless statistical tools that are always active. Analytics cookies that use persistent identifiers (e.g. Google Analytics) are only activated after consent given via the cookie banner. For the full list, duration and how to manage your preferences, see the Cookie Policy.

Your rights

As a data subject, within the limits and conditions set out in Articles 15-22 of the GDPR, you can exercise the rights of: access to your data, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interest, and withdrawal of consent at any time (without affecting the lawfulness of processing carried out before withdrawal). Requests can be sent to the privacy officer indicated above.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy — www.gpdp.it), or with the supervisory authority of your EU country of residence, if you believe the processing of your data infringes applicable law.

Changes to this notice

This notice may be updated to reflect regulatory or site changes. The last update date is shown at the bottom of the page; please check it periodically.