Privacy Policy
Last updated: November 20, 2025
1. Data Controller
The data controller is L'Alternativa Cooperativa Sociale, with its registered office at Via Umberto I, 72 – 84087 Sarno (SA), Italy.
Contact Information:
Email: info@lalternativasociale.org
Phone: +39 081 3412403
VAT Number: 05236100653
2. Types of Data Processed
When you use this website, we collect and process the following categories of personal data:
- Browsing data: IP addresses, browser type, operating system, pages visited, session duration
- Contact information: first name, last name, email address, phone number (provided voluntarily via a form)
- Course information: details provided during registration or when requesting information about language training courses
- Technical and analytical cookies: information collected through cookies (see Cookie Policy)
3. Purposes of the Processing and Legal Basis
The personal data collected is processed for the following purposes:
a) Contractual and Precontractual Purposes
- Respond to inquiries about courses
- Manage Registrations and Reservations
- Provide training and support services
Legal basis: Art. 6(1)(b) of the GDPR—performance of a contract or precontractual measures
b) Legitimate Interest Purposes
- Improving Website Usability
- Aggregate Statistical Analysis of Traffic
- Fraud Prevention and Cybersecurity
Legal basis: Art. 6(1)(f) of the GDPR—legitimate interests of the data controller
c) Purposes based on consent
- Sending promotional communications and newsletters (subject to explicit consent)
- Use of marketing cookies (subject to consent)
Legal basis: Art. 6(1)(a) of the GDPR—consent of the data subject
4. Data Retention
Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected:
- Browsing data: up to 12 months
- Contact information for inquiries: 24 months since the last contact
- Data related to contracts and registrations: 10 years for tax and accounting purposes
- Marketing Consent: Until Consent Is Withdrawn
5. Sharing with Third Parties
Personal data may be disclosed to third parties only in the following cases:
- Technical service providers: hosting, server maintenance, cloud services (data processors pursuant to Article 28 of the GDPR)
- Analytics tools: Google Analytics (in anonymized form)
- Competent authorities: when required by law or to protect the data subject’s rights
Data is not disclosed to third parties for commercial purposes and is not transferred outside the European Union without adequate safeguards (standard contractual clauses).
6. Rights of the Data Subject (GDPR)
Pursuant to Articles 15–22 of the GDPR, the data subject has the right to:
- Access (Art. 15): Obtaining confirmation that data processing is taking place and accessing one’s own data
- Correction (Art. 16): Correcting Inaccurate or Incomplete Data
- Deletion (Art. 17): Request the deletion of data ("right to be forgotten")
- Restriction (Art. 18): Requesting a restriction on processing
- Data Portability (Art. 20): Receiving data in a structured and machine-readable format
- Objection (Art. 21): to object to processing on legitimate grounds
- Withdrawal of Consent (Art. 7): Withdraw consent at any time
- Complaint (Art. 77): File a complaint with the Personal Data Protection Authority
7. How to Exercise Your Rights
To exercise their rights, the data subject may submit a written request to:
Email: info@lalternativasociale.org
Subject: "Request to Exercise GDPR Rights"
The Data Controller will respond within 30 days of receiving the request, providing a response and, if necessary, stating the reasons for any denial.
8. Changes to the Privacy Policy
This Privacy Policy is subject to change. In the event of substantial changes, we will notify the individuals concerned via a notice on the website.
We recommend checking this page periodically for any updates.
Supervisory Authority: Italian
Data Protection Authority Website: www.garanteprivacy.it
