The Data Controller is:
Castelli International School S.r.l.
Registered Office: Via degli Scozzesi no. 13 – 00046 Grottaferrata (RM) – Italy
E-mail: info@castelli-international.it
Certified e-mail (PEC): castelliinternational@pec.it
Personal data collected through this website may include:
- Contact details (first name, last name, e-mail address, telephone number) provided by the user
through contact forms;
- Usage and navigation data (IP addresses, logs, cookies, and technical data) automatically collected by the website;
- E-mail address voluntarily provided for the purpose of receiving updates, newsletters, and information about the School’s activities;
- Any other personal data included in messages freely sent by the user through the contact form.
The voluntary submission of e-mails to the addresses indicated on the website entails the subsequent acquisition of the sender’s address and of any personal data included in the communication, which are necessary to respond to the user’s request.
Personal data are processed for the following purposes:
1. Managing contact requests submitted through the website;
2. Sending updates, institutional communications, and newsletters about the School’s activities, subject to the user’s prior consent;
3. Complying with legal and regulatory obligations;
4. Protecting the Controller’s rights (e.g. legal defence, IT security, abuse prevention);
5. Producing website usage statistics (via Google Analytics with anonymised IP addresses).
Processing of personal data is carried out on the following legal bases (Art. 6 GDPR):
- Performance of a contract or pre-contractual measures, for the management of contact requests submitted via the online forms;
- Explicit consent, for the receipt of newsletters and communications;
- Legal obligation, for compliance with applicable laws and regulations;
- Legitimate interest of the Controller, such as ensuring the security of IT systems and defending its rights.
Data are processed using electronic tools and, where necessary, paper-based means, adopting adequate technical and organisational security measures to ensure personal data protection.
Data may be processed by:
- Authorised internal personnel;
- Technical service providers, hosting providers, IT companies, and professional consultants, all formally appointed as Data Processors pursuant to Art. 28 GDPR.
An updated list of appointed Data Processors is available upon request.
Data are processed at the Controller’s premises and through technology service providers located within the European Union or in non-EU countries ensuring an adequate level of protection in accordance with Articles 45–46 GDPR.
- Contact form data: retained for the time necessary to respond and manage the request, and in any case no longer than 12 months;
- Newsletter/updates data: retained until the user withdraws consent (opt-out);
- Technical and browsing data: retained as specified in the Cookie Policy.
In all cases, data may be retained for longer periods where required by law or necessary for legal defence purposes.
The user may exercise the rights granted under Articles 15–22 GDPR, including:
- Right of access, rectification, erasure, restriction, and objection to processing;
- Right to withdraw consent at any time;
- Right to data portability;
- Right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
To exercise these rights, the user may contact: info@castelli-international.it.
This website uses technical and analytical cookies (Google Analytics with anonymised IP addresses).
For further details, please refer to the Cookie Policy.
The Controller reserves the right to amend this Privacy Policy at any time by publishing updates on this
website.