Privacy Policy

Last updated: 26/04/26

This Privacy Policy describes how the website www.puntoevirgolaschool.it collects, uses and protects the personal data of users who browse the website, fill in contact forms, request information about courses or interact with the school’s online services.

This notice is provided pursuant to Regulation (EU) 2016/679, the “GDPR”, and the applicable Italian legislation on the protection of personal data.

1. Data Controller

The Data Controller is:

Puntoe Virgola School di Teresa Cavallo
Registered office: Via Giacomo Leopardi 18
VAT No.: 03206750733
Email: info@puntoevirgolaschool.it
Website: www.puntoevirgolaschool.it

For any request concerning the processing of personal data, users may contact the Data Controller at the email address indicated above.

2. Types of data collected

The following categories of personal data may be collected through the website.

Data voluntarily provided by the user

When users fill in a contact form on the website, either in Italian or English, the following data may be collected:

name;
city;
telephone number;
email address;
content of the free message field.

The voluntary sending of messages through the website forms involves the acquisition of the data necessary to reply to the request.

Technical browsing data

While browsing the website, certain technical data may be collected automatically, such as:

IP address;
data relating to the browser and device used;
pages visited;
date and time of the visit;
technical information relating to the proper functioning of the website;
data collected through cookies or similar technologies, according to the preferences expressed by the user.

These data are mainly used to ensure the proper functioning of the website, improve its security, analyse traffic and, where consent is required, measure the performance of advertising campaigns.

3. Purposes of processing

Personal data collected through the website may be processed for the following purposes:

a) Replying to users’ requests

The data entered in the contact forms are used to reply to requests for information about courses, school services, proposed activities or other communications voluntarily sent by the user.

b) Managing requests relating to the school’s courses and services

The data may be used to provide information about Italian language courses, participation methods, available dates, related activities and the services offered by Puntoe Virgola School.

c) Sending informative, promotional communications and newsletters

With the user’s prior consent, the data may be used to send email communications relating to courses, events, initiatives, promotions, updates and informative content from the school.

The user may withdraw consent at any time, for example by using the unsubscribe tools included in the communications received or by writing to info@puntoevirgolaschool.it.

d) Marketing activities and advertising campaigns

The website is connected to tools such as Google Ads, Google Analytics and Google Search Console. These tools may be used to analyse traffic, measure conversions, improve advertising campaigns and understand the effectiveness of promotional activities.

Where required by law, these processing activities take place only after the user has given consent through the cookie banner or the consent management tools available on the website.

e) Security and spam prevention

The website uses technical and security tools, such as Cloudflare/Turnstile, to protect contact forms, prevent spam, abuse, unwanted access or improper use of the website.

f) Technical management and website maintenance

Technical data may be processed to ensure the proper functioning of the WordPress website, perform maintenance, updates, backups, troubleshooting and security management.

4. Legal basis of processing

The processing of personal data is based on the following legal grounds:

performance of pre-contractual or contractual measures, when the user requests information about the school’s courses or services;
user consent, for newsletters, promotional communications, non-technical cookies and marketing activities where required;
legitimate interest of the Data Controller, to ensure website security, prevent abuse, manage requests received and improve the services offered;
legal obligations, when processing is necessary to comply with tax, administrative, accounting or regulatory obligations.

5. Processing methods

Personal data are processed using IT, electronic and, where necessary, organisational tools, adopting appropriate measures to protect them against unauthorised access, loss, alteration, disclosure or misuse.

The data collected through the website are not publicly disclosed and are not sold to third parties.

However, some data may be processed by external service providers who support the Data Controller in the technical, communication, statistical or promotional management of the website.

6. Tools, plugins and services used

The website is built with WordPress and uses several technical tools and plugins, including:

Contact Form 7, for managing contact forms;
Flamingo, for storing messages sent through forms;
WP Mail SMTP, for managing email delivery from the website;
Brevo, for email marketing, newsletters and communications;
GDPR Cookie Compliance, for cookie consent management;
LiteSpeed Cache, for optimisation and performance;
Polylang, for multilingual website management;
Spectra, for page building;
Yoast SEO, for SEO optimisation;
Pages with category and tag;
Yoast Duplicate Post.

The website is hosted by Hostinger, while email services are managed through Aruba.

The website also uses services connected to:

Google Ads;
Google Analytics;
Google Search Console;
Cloudflare/Turnstile.

These services may process technical data, browsing data, statistical data or information relating to the user’s interactions with the website and advertising campaigns, according to their respective privacy policies.

7. Recipients of the data

Personal data may be accessed, within the limits necessary for carrying out their respective activities, by:

staff or collaborators authorised by the Data Controller;
technical and hosting service providers;
email and newsletter service providers;
security and anti-spam service providers;
analytics and advertising service providers;
consultants or professionals, where necessary for administrative, tax or legal obligations;
competent authorities, in the cases provided for by law.

Personal data are not publicly disclosed.

8. Transfer of data outside the European Union

Some services used by the website, such as Google tools, Brevo, Cloudflare or other technology providers, may involve the processing of data outside the European Economic Area.

In such cases, the transfer takes place in accordance with the safeguards provided by the GDPR, such as adequacy decisions, standard contractual clauses or other instruments recognised by the applicable legislation.

9. Data retention

Personal data are retained for the time necessary to achieve the purposes for which they were collected.

In particular:

data sent through contact forms are retained for the time necessary to manage the request and any subsequent communications;
data relating to course enquiries may be retained for the time useful to manage the relationship with the user;
data used for newsletters and marketing are retained until consent is withdrawn or deletion is requested;
technical and security data are retained for the time necessary to ensure the proper functioning and protection of the website;
any data relevant to tax, administrative or legal obligations are retained for the periods required by applicable law.

10. Newsletters and promotional communications

Users may choose to receive informative, promotional communications or newsletters from Puntoe Virgola School.

Subscription to these communications takes place only when the user gives consent or when another valid legal basis provided for by law exists.

Users may withdraw their consent at any time by writing to:

info@puntoevirgolaschool.it

or by using any unsubscribe links included in the communications received.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11. Cookies and tracking tools

The website may use technical cookies, which are necessary for the functioning of the website, and analytics, marketing or profiling cookies, where present and subject to the user’s consent when required.

Consent management is carried out through the GDPR Cookie Compliance plugin.

Through the cookie banner, users may accept, reject or modify their preferences regarding non-essential cookies.

For detailed information about the cookies used by the website, users are invited to consult the dedicated Cookie Policy, if available, or the cookie management section in the website banner.

12. Provision of data

The provision of data through the contact forms is optional, but necessary to allow the Data Controller to reply to the user’s requests.

Failure to provide the data required in the forms may prevent the request from being sent or the user from receiving a reply.

Consent for newsletters, marketing and non-technical cookies is optional and may be withdrawn at any time.

13. Rights of the data subject

As a data subject, the user may exercise the rights provided for by the GDPR, including:

the right to access their personal data;
the right to rectify inaccurate data;
the right to erasure of data;
the right to restriction of processing;
the right to object to processing;
the right to data portability, where applicable;
the right to withdraw consent given;
the right to lodge a complaint with the Supervisory Authority for the protection of personal data.

To exercise their rights, users may write to:

info@puntoevirgolaschool.it

Users also have the right to lodge a complaint with the Italian Data Protection Authority, according to the procedures indicated on the Authority’s official website.

14. Minors

The services offered through the website are mainly intended for people interested in the school’s courses and activities.

If data relating to minors are collected, processing will take place in compliance with applicable legislation and, where necessary, with the consent or authorisation of the person exercising parental responsibility.

15. Changes to this Privacy Policy

The Data Controller reserves the right to modify or update this Privacy Policy at any time, including as a result of regulatory, technical or organisational changes.

Users are invited to consult this page periodically to check for any updates.