PRIVACY POLICY AND COOKIE POLICY

I - INFORMATION RELATING TO THE PRIVACY POLICY OF THE SITE

This policy describes how the Piazza Copernico website is managed with regard to the processing of personal data of users who visit it or use its available services.

This information is provided pursuant to Art. 13 of Regulation (EU) 2016/679 ("GDPR") on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

This information is provided exclusively for the site:

www.piazzacopernico.it

and any subdomains directly attributable to Piazza Copernico, and not for other websites that may be consulted via links on the site.

The purpose of this document is to provide information on the methods, purposes, timing, and nature of the information collected during navigation and use of the services available on the site.

This policy may be subject to changes or updates due to regulatory changes, technological advancements, or changes to the services offered. Users are therefore encouraged to consult this page periodically.

If the user is under 14 years of age, pursuant to Article 8 of Regulation (EU) 2016/679 and Article 2-quinquies of Legislative Decree 196/2003, the processing of personal data will be lawful only with the prior consent of the person exercising parental responsibility.

II – DATA CONTROLLER AND CONTACTS

1 – Data Controller

The Data Controller is:

Copernico Square Srl
Via Francesco Gentile 135 – 00173 Rome
Email: pbussadori@pcopernico.it

The Data Controller determines the purposes and methods of processing the personal data collected through the site.

2 – Data controller

Data processing may also be carried out by external parties formally appointed as Data Processors pursuant to Art. 28 of the GDPR, who operate on behalf of the Data Controller.

Such subjects include, but are not limited to:

hosting service providers;
cloud service providers;
LMS platforms;
email marketing platforms;
technical support providers;
IT companies;
consultants and professionals.

3 – Data Protection Officer (DPO)

If appointed pursuant to Articles 37 et seq. of the GDPR, the Data Protection Officer may be contacted at:

pbussadori@pcopernico.it

4 – Place of processing

The processing operations connected to the website's web services take place at the Data Controller's operational headquarters and at the data centers of the technology providers used.

The data is processed exclusively by authorized personnel or by persons in charge of occasional maintenance operations.

III – TYPE OF DATA COLLECTED

1 – Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This data includes:

IP address;
browser type;
operating system;
name of the Internet Service Provider (ISP);
date and time of access;
origin and exit page;
information on browsing behavior.

This information is processed in aggregate and anonymous form for:

ensure the correct functioning of the site;
improve the browsing experience;
obtain statistics on site usage;
ensure system security.

The legal basis for the processing is the legitimate interest of the Data Controller pursuant to Art. 6, paragraph 1, letter f) of the GDPR.

2 – Data provided voluntarily by the user

The optional, explicit, and voluntary sending of messages to the contact addresses on the site, as well as the completion of contact forms, registration, demo requests, webinar registration, or content downloads, entails the acquisition of the data provided by the user.

The data collected may include:

name and surname;
email address;
telephone number;
company of belonging;
professional role;
contents of the message sent;
CVs possibly sent.

The data will be processed exclusively to respond to requests received or provide the requested services.

3 – Data collected via LMS platform

In the case of use of online courses, webinars, training activities or LMS platforms, additional data may be collected relating to:

to participate in the courses;
to educational progress;
to the results of the checks;
at the time of use;
to the activities carried out on the platform.

This data is processed for the purposes of training management, provision of educational services, monitoring of training activities, and administrative compliance.

IV – PURPOSE AND LEGAL BASIS OF THE PROCESSING

Personal data may be processed for the following purposes:

Purpose	Legal basis
Navigation and operation of the site	Legitimate interest
Contact request management	Execution of pre-contractual measures
Provision of training services	Contractual performance
Webinar and event management	Contractual performance / consent
Sending newsletters and marketing communications	Consent
Regulatory and tax compliance	Legal obligation
Cybersecurity and abuse prevention	Legitimate interest
Aggregate statistical analysis	Legitimate interest

V – NEWSLETTER AND MARKETING COMMUNICATIONS

1 - Purpose of the treatment

With the user's explicit consent, Piazza Copernico may use the personal data provided to send:

informative newsletters;
updates on courses and services;
communications relating to webinars and events;
teaching materials;
editorial content;
promotional and commercial initiatives.

Communications may be sent via email or automated communication tools.

2 – Legal basis

The legal basis for processing is the data subject's consent pursuant to Art. 6, paragraph 1, letter a) of the GDPR.

Providing data is optional.

3 – Registration methods

To subscribe to the newsletter, complete the form on the website.

The user can revoke consent at any time:

via the unsubscribe link in the communications;
writing to: pbussadori@pcopernico.it

The revocation does not affect the lawfulness of the processing carried out before the revocation itself.

4 – Statistical analysis of communications

Newsletters may contain statistical tracking tools that allow the following to be detected in aggregate form:

email openings;
click on links;
interactions with content.

This data is used exclusively to improve the quality of communications and evaluate interest in the proposed content.

5 – Data retention

The data collected for newsletter purposes will be retained until consent is revoked or a request for deletion is made.

VI – COOKIE POLICY

1 – What are cookies?

Cookies are small text files that websites send to your device, where they are stored before being re-sent to the same websites on your next visit.

Cookies improve your browsing experience, store your preferences, and collect statistical information.

2 – Types of cookies used

The site uses:

technical cookies

Necessary for the proper functioning of the site and the provision of the requested services.

Anonymized analytical cookies

Used to collect aggregate statistical information on site usage.

The site uses Google Analytics 4 with IP address anonymization functionality where applicable.

Third-party Cookies

The site may integrate third-party services such as:

Google;
YouTube;
LinkedIn;
Facebook/Meta;
Vimeo;
webinar platforms;
marketing and automation services.

These entities may install independent cookies according to their own privacy policies.

3 – Cookie consent management

The site uses a consent management system (CMP) that allows the user to:

accept or reject specific categories of cookies;
change your preferences at any time;
revoke the consent previously given.

Non-technical cookies are installed only with prior consent.

4 – Disabling cookies via browser

The user can also manage or disable cookies through their browser settings.

Official guides:

Google Chrome: https://support.google.com/chrome/answer/95647
Mozilla Firefox: https://support.mozilla.org/it/kb/Gestione%20dei%20cookie
Safari: https://support.apple.com/it-it/guide/safari/sfri11471/mac
Microsoft Edge: https://support.microsoft.com/it-it/microsoft-edge

VII – DATA STORAGE

Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected.

In particular:

contact data: maximum 24 months from the last interaction;
newsletter data: until consent is revoked;
Administrative and contractual data: according to legal obligations;
Technical and security logs: limited and proportionate period.

VIII – DATA TRANSFER OUTSIDE THE EU

Some services used by the site may involve the transfer of personal data to countries located outside the European Economic Area.

Such transfers take place in compliance with Articles 44 et seq. of the GDPR through:

European Commission adequacy decisions;
Standard Contractual Clauses (SCC);
EU-US Data Privacy Framework, where applicable.

IX – SECURITY OF TREATMENT

The Data Controller adopts adequate technical and organizational measures to guarantee the security of personal data and prevent:

unauthorized access;
data loss;
illicit uses;
unauthorized disclosure;
accidental alterations or destruction.

Processing is carried out using IT and telematic tools with logic strictly related to the indicated purposes.

X – RIGHTS OF THE INTERESTED PARTY

Pursuant to Articles 15-22 of the GDPR, the user may exercise the following rights at any time:

access to personal data;
rectification of inaccurate data;
data deletion;
limitation of processing;
opposition to processing;
data portability;
withdrawal of consent;
complaint to the Italian Data Protection Authority.

Requests can be sent to: