Privacy Policy

Effective date: 15 January 2026

1. Who we are

GIANNI DA ROS provides structured art education for learners across Canada. We are established in Italy and act as the Data Controller for personal data processed through this website.

• Legal entity: GIANNI DA ROS
• Registered address: Via Liguria, 5, 20090 Buccinasco, Italy
• Contact email: [email protected]
• Jurisdiction: Italian law and the EU General Data Protection Regulation (GDPR)

2. Scope of this policy

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you browse our website, request information about courses, communicate with us, or participate in our educational programs.

3. The data we collect

3.1 Information you provide

• Identification and contact details: full name, email address, and telephone number.
• Course preferences: selected course, preferred learning format, and related choices.
• Communications: messages or comments you send to us and any attachments you choose to provide.
• Consent records: your consent choices and the time and method they were given.

3.2 Information collected automatically

• Technical data: IP address, device and browser type, operating system, and basic diagnostic data captured by our hosting environment for security and reliability.
• Cookies: essential cookies needed to operate this site. No advertising profiles are created. For details, see our Cookie Policy.

We do not require payment card details on this website and do not sell products directly online.

4. Purposes and legal bases

• Responding to requests for information and communicating about courses (legal bases: consent; steps prior to entering a contract).
• Managing participation in educational programs, schedules, and related communications (legal basis: performance of a contract).
• Ensuring site security, reliability, and fraud prevention (legal basis: legitimate interests in operating a secure service).
• Maintaining business records and meeting legal obligations (legal basis: compliance with Italian legal requirements).

5. Retention of personal data

• General inquiries and correspondence: up to 12 months after our last communication, unless a longer period is reasonably required for a potential enrollment or dispute.
• Enrollment and administrative records: up to 10 years to meet accounting and legal retention obligations in Italy.
• Technical and security logs: up to 12 months, unless a security investigation requires a longer period.
• Cookies: see specific durations in our Cookie Policy.

6. Sharing and disclosures

We may share personal data with:

• Service providers that support our operations, such as secure hosting, email delivery, and IT maintenance. These providers process data only under our instructions.
• Professional advisers and authorities where required to protect our rights, comply with legal obligations, or respond to lawful requests.
• Successors in the event of a business reorganization, subject to continued protection of personal data.

We do not sell personal data.

7. International transfers

We are established in Italy. Where data is processed or accessed outside the European Economic Area, we implement appropriate safeguards, such as Standard Contractual Clauses, and apply additional measures when needed. Email communications with participants located in Canada may be processed by email infrastructure outside the EU; we limit such data to what is necessary for communication.

8. Your rights under GDPR

Subject to conditions under applicable law, you have the right to:

• Access your personal data and receive a copy.
• Request rectification of inaccurate or incomplete data.
• Request erasure of data in the situations allowed by law.
• Restrict processing under certain circumstances.
• Object to processing based on legitimate interests.
• Data portability, where technically feasible and legally applicable.
• Withdraw consent at any time where processing relies on consent.
• Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

To exercise your rights, contact us at [email protected]. We will verify your identity as required and respond within one month, or inform you if additional time is needed for complex requests.

9. Cookies and similar technologies

We use essential cookies to operate this website and improve your browsing experience. We do not create advertising profiles. For details on the types of cookies we use, purposes, and retention periods, see our Cookie Policy.

10. Security

We apply appropriate technical and organizational measures to protect personal data, including transport-layer encryption (HTTPS), access controls, and security monitoring. No method of transmission or storage is entirely secure; we continually review and improve our safeguards.

11. Children’s privacy

Our educational content is intended for adults and general learners. We do not knowingly collect personal data from children under the age of 18. If you believe a child has provided personal data to us, please contact us so we can take appropriate action.

12. Third-party links

Our website is designed with clear navigation and does not include hidden external links or deceptive redirects. Where we reference policies on this site, they are available through internal links only.

13. Changes to this policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. We will post the updated version on this page with a new effective date. Continued use of the website after changes indicates your acknowledgment of the updated policy.

14. Contact us

For matters related to this Privacy Policy, please include “Privacy Request” in your email subject line and specify the right you wish to exercise.