EDITION No. I.1.1
Revision date: 06/01/2025
Responsible person:
Laura Corrado

PRIVACY POLICY

Information on the processing of personal data of users of the www.hoschool.it website Articles 13 and 14 of Regulation 2016/679/EU (hereinafter referred to as “GDPR”).

1. The Controller
1.1 ITALIAN HOSPITALITY SCHOOL S.R.L., with the registration number RM1598544 is an autonomous body that offers an advanced training model and, as Data Controller, is committed to respecting and protecting your privacy and wants you to feel safe both during the simple navigation of the site.
1.2 On this page, the Data Controller intends to provide some information on the processing of personal data relating to subjects (hereinafter “Users”) who visit, consult or interact with the website at the address http://www.hoschool.it. The information is provided only for the website of the Data Controller, and for all sub-sites/sections referable to it, but not for other websites that may be consulted by those who visit it through links made available (for which reference is made to the respective privacy policies).
1.3 The reproduction or use of pages, materials and information contained within the Site, by any means and on any medium, is not permitted without the prior written consent of ITALIAN HOSPITALITY SCHOOL S.R.L. Copying and/or printing of the contents of the site is permitted for exclusively personal and non-commercial use (for requests and clarifications, please contact the Data Controller at the addresses indicated below). Other uses of the content, services and information on this site are not permitted.
1.4 With regard to the contents offered and the information provided, ITALIAN HOSPITALITY SCHOOL S.R.L will make sure to keep them reasonably updated and revised, without offering any guarantee on the adequacy, accuracy or completeness of the information provided, explicitly declining any responsibility for any errors or omissions in the information shown on the Site.

2. Categories of personal data
2.1 ITALIAN HOSPITALITY SCHOOL S.R.L. processes personal data of data subjects only to the minimum necessary extent.
2.2 Categories of Personal data that ITALIAN HOSPITALITY SCHOOL S.R.L. mostly but not exclusively collects and processed
2.2.1 identification data – for example, name, surname, personal identification number, date of birth, data from a personal identification document (passport or ID card), photo;
2.2.2 contact information – such as address, phone number, email address;
2.2.3 professional data – for example, position, workplace;
2.2.4 data on education and skills – for example, duration of education, educational institution, educational program, received evaluations, attendance, language proficiency data;
2.2.5 data on work experience – for example, data included in CVs and motivation letters, data on occupation;
2.2.6 data on employment legal relations and wages – for example, information on the employment contract and its amendments, data on sick leaves and vacations, data on calculated and paid wages;
2.2.7 social data – for example, data on gender, age group, citizenship, employment, data on the status of a low-income, poor person;
2.2.8 special categories of personal data – for example, data on health, type of disability, nationality;
2.2.9 financial data – for example, bank account details, study and tuition fees, scholarships, rewards, compensation and other payment data;
2.2.10 data related to participation in events or projects – for example, data on participation in seminars, conferences, summer schools, projects, events, photo and video materials, stories of experience;
2.2.11 data regarding visits to ITALIAN HOSPITALITY SCHOOL S.R.L. websites (www.hoschool.it), such as data flows and any other communication information, technical information, including cookies (see Cookies Policy);
2.2.12 satisfaction data, such as responses to survey questions;
2.2.13 photos, videos, as well as voice recordings taken on the premises of the ITALIAN HOSPITALITY SCHOOL S.R.L. or at events organized by it outside the premises of the ITALIAN HOSPITALITY SCHOOL S.R.L.

3. Processing Data for Following Purposes
3.1 ITALIAN HOSPITALITY SCHOOL S.R.L. processes data closely connected and necessary for the management of contact or information requests;
3.1.1 For pre-contractual and contractual obligations related to the request for participation in courses, training or institutional events, open-days, seminars, social activities and or other activities of the Entity that may be of interest to the User;
3.1.2 Collect information relating to the user’s choices during web browsing in order to send communications in line with the preferences expressed;
3.1.3 Related to the fulfilment of obligations provided for by EU and national legislation, the protection of public order, the detection and repression of crimes as well as to comply with European and national legislation and the provisions of the Guarantor Authority;
3.1.4 To improve the quality of communications sent by ITALIAN HOSPITALITY SCHOOL S.R.L. by detecting the User’s interest in the contents of the news-letters and, more generally, in the communication model adopted by the Entity.
3.1.5 Personal data may also be processed by employees/consultants and by those who collaborate with ITALIAN HOSPITALITY SCHOOL S.R.L. who, authorized, are specifically instructed and appointed as Data Processors pursuant to Article 29 of the GDPR and Article 2 of the Code.

4. Commercial Communications
4.1 ITALIAN HOSPITALITY SCHOOL S.R.L. may send commercial communications relating to products and/or services similar to those already supplied, pursuant to Article 130, paragraph 4 of Legislative Decree 196/03 (hereinafter the “Code”), using the e-mail coordinates indicated by the User on such occasions, to which he/she may object using the methods and contact details indicated in the Rights of Data Subjects section.

5. Recipients of Personal Data
5.1. Italian Hospitality School may transfer personal data to recipients in accordance with personal data processing agreements, as well as to other recipients where there is a valid legal basis for doing so.
5.2. When transferring personal data, Italian Hospitality School takes all necessary measures to ensure that recipients process the data in accordance with Italian Hospitality School ’s instructions and in compliance with applicable data protection laws and regulations, including the General Data Protection Regulation (EU Regulation 2016/679 – GDPR). Italian Hospitality School also requires that recipients implement appropriate technical and organizational security measures to protect the data.
5.3. Recipients of personal data may include, but are not limited to:
5.3.1. Law enforcement authorities;
5.3.2. The Italian Ministry of Education and Merit (Ministero dell’Istruzione e del Merito);
5.3.3. The Italian National Agency for the Evaluation of the University and Research Systems (ANVUR);
5.3.4. Erasmus+ National Agencies and associated academic coordination centers;
5.3.5. Regional and national educational quality assurance bodies;
5.3.6. The National Institute for the Evaluation of the Education and Training System (INVALSI);
5.3.7. The Italian Agency for Development Cooperation and international mobility services (e.g., related to Erasmus+);
5.3.8. The Italian Revenue Agency (Agenzia delle Entrate);
5.3.9. Employment services such as the Agenzia Nazionale Politiche Attive del Lavoro (ANPAL);
5.3.10. Auditors, legal service providers, postal and courier service providers, cooperation partners involved in fulfilling Italian Hospitality School ’s educational and administrative functions, and other personal data processors;
5.3.11. Website hosting and analytics service providers that monitor and maintain Italian Hospitality School ’s online platforms;
5.3.12. The European Commission (Directorate-General for Education, Youth, Sport and Culture);
5.3.13. The Italian Ministry of Culture (Ministero della Cultura);
5.3.14. EU or national foundations and programs supporting social inclusion and education (e.g., Society Integration Foundation or equivalents at the EU level). 5.3.15. INAPP – National Institute for Public Policy Analysis
5.3.16. INDIRE – National Institute for Documentation, Innovation and Educational Research (Erasmus+ National Agency)
5.3.17. INPS – National Institute of Social Security
5.3.18. ANPAL – National Agency for Active Labour Policies
5.3.19. Regional authorities (e.g., Regione Lazio – Department of Education and Training)
5.3.20. Chamber of Commerce and other professional bodies involved in certification or internships
5.3.21. Europass and EU vocational transparency platforms
5.3.22. Judicial authorities and public bodies as required by law

6. Methods, processing logics, storage times and security measures
6.1 ITALIAN HOSPITALITY SCHOOL S.R.L., processing is also carried out with the aid of electronic or automated means and is carried out by the Data Controller and/or third parties.
6.2 ITALIAN HOSPITALITY SCHOOL S.R.L., may use to store, manage and transmit the data through data controller.
6.3 The processing of data will be carried out with the logic of organization and processing of the User’s personal data, also relating to the logs originating from the access and use of the services made available via the web, of the contents and services used related to the purposes indicated above and, in any case, in such a way as to guarantee the security and confidentiality of the data.
6.4 The personal data processed will be stored for the time provided for by the applicable legislation (10 years from the termination of the data for data that originate a contractual relationship, until the withdrawal of consent or until the request to stop sending for news-letters, 12 months for data processed for profiling activities, as well as for a maximum, as a rule, 30 days in relation to navigation data collected for the operation and maintenance of the site).
6.5 Precisely with reference to the security and protection aspects of personal data, the user is invited, pursuant to Article 33 of the GDPR, to report to ITALIAN HOSPITALITY SCHOOL S.R.L. circumstances or events from which a potential “personal data breach may arise” in order to allow an immediate assessment and the adoption of any actions aimed at countering such an event by sending a communication to study@hoschool.it.

7. Areas of communication and data transfer.
7.1 ITALIAN HOSPITALITY SCHOOL S.R.L. may communicate and have processed, in Italy and abroad, the personal data of users to third parties with whom it has relationships, where these third parties provide services at our request or collaborate in their realization. We will only provide these third parties with the information necessary to perform the services requested and take all measures to protect your personal data.
7.2 The data may be transferred outside the European Economic Area if this is necessary for the management of your contractual relationship or to offer you a service requested by you.
7.3 Personal data may be communicated to the competent public bodies and authorities for the purposes of compliance with regulatory obligations or to ascertain responsibility in the event of computer crimes against the site, as well as communicated to, or allocated to, third parties (as data processors or, in the case of providers of electronic communication services, of independent data controllers), which provide IT and telematic services (e.g.: hosting services, management and development of websites) which ITALIAN HOSPITALITY SCHOOL S.R.L. uses to carry out tasks and activities of a technical and organisational nature that are instrumental to the operation of the website.

8. Rights of the data subjects
8.1 ITALIAN HOSPITALITY SCHOOL S.R.L., are granted the rights referred to in art. 15 to 22 of the GDPR.
8.2 In particular, the data subject has the right to revoke consent to the processing of data at any time, request its rectification, updating, transformation into anonymous form, limit its use, even partially, request its portability, where applicable to the processing carried out by the Data Controller, and any deletion as well as not to be subject to a fully automated decision, including profiling.
8.3 The rights can be exercised to the extent that the processing is not mandatory by legal provisions or regulations.
8.4 In addition, the Data Subject may lodge a complaint with the Supervisory Authority pursuant to art. 77 of the GDPR.
8.5 If the Data Subject wishes to exercise the rights recognized by law, he or she may send, without any formality, an e-mail to the study@hoschool.it address or send to the ITALIAN HOSPITALITY SCHOOL S.R.L., ref. Privacy – DPO, at the address of Viale di Trastevere 209, 00153 Rome, specifying their request and providing the information necessary to identify the applicant.

9. The Data Controller and the Data Protection Officer
9.1 The data controller is ITALIAN HOSPITALITY SCHOOL S.R.L. – Viale di Trastevere 209, 00153 Rome.
9.2 The Data Protection Officer (DPO) can be contacted at the addresses above point 8.1.
9.3 The use of the Website, including use with tablets and/or smartphones, by the User implies full knowledge and acceptance of the content and any indications included in this version of the information published by the Data Controller at the time the site is accessed. ITALIAN HOSPITALITY SCHOOL S.R.L. advises that this information may be modified without notice and therefore recommends that it be read periodically.

10. Other terms
10.1 ITALIAN HOSPITALITY SCHOOL S.R.L., is entitled to make changes or additions to this privacy policy by publishing the current version of the privacy policy on the ITALIAN HOSPITALITY SCHOOL S.R.L. websites (www.hoschool.it).