• +39 0506396294
  • marlene.rocchi@archa.it
  • Via di Tegulaia 10/B , Pisa

Privacy Policy

1. Introduction

The protection of personal data is important for Archademy S.R.L.. This Privacy Policy describes the ways in which the personal data of users who visit the website are collected, used, stored and protected.

The information is provided pursuant to articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and concerns the personal data collected through the site www.archademy.net (hereinafter, the “Site”).

For any request relating to the processing of personal data, it is possible to contact the Data Controller using the contact details indicated at the end of this information.

2. Types of data processed

2.1 Navigation data

While browsing the site, the computer systems and software procedures responsible for its operation acquire some data whose transmission is implicit in the use of internet communication protocols.

These may include, by way of example:

  • IP address;

  • domain name of the device used;

  • operating system;

  • browser type and version;

  • device model and features;

  • network operator;

  • URI address of the requested resources;

  • date and time of the request;

  • method used to submit the request to the server;

  • file size obtained in response;

  • numerical code relating to the state of the response;

  • Additional parameters relating to the user’s operating system and computer environment.

These data are processed to allow the operation and security of the site, obtain statistical information on its use and identify any anomalies, malfunctions or attempts at unauthorized access.

Browsing data is not used directly to identify users, but could allow identification through processing and association with information held by third parties.

2.2 Data voluntarily provided by the user

The voluntary sending of communications by e-mail, telephone or forms on the site involves the acquisition of the data necessary to take charge and respond to the request.

These may include:

  • name and surname;

  • email address;

  • telephone number;

  • company, organization or organization to which they belong;

  • professional role;

  • course, project or training service of interest;

  • communication content;

  • any attached documents;

  • any other information provided voluntarily by the user.

The user is invited not to enter unnecessary personal data in the forms or communications with respect to the request made.

If data referring to third parties are transmitted, the user declares to be authorized to communicate their communication and to have fulfilled any information obligations provided for by the legislation.

3. Purpose of the processing

Personal data may be processed for the following purposes:

  • allow navigation and proper functioning of the site;

  • ensure the security of systems, networks and information;

  • Respond to requests transmitted through forms, telephone or e-mail;

  • provide information on courses and training services;

  • manage requests for contact, registration or participation in training activities;

  • design and organize courses, company courses and training interventions;

  • prepare quotes and commercial proposals;

  • provide information on funded training opportunities;

  • manage pre-contractual and contractual activities;

  • fulfill administrative, accounting, fiscal and regulatory obligations;

  • ascertain, exercise or defend a right of the holder;

  • elaborate statistics relating to the operation and use of the site;

  • send informative or commercial communications, exclusively in cases and according to the procedures permitted by law.

For registration and participation in specific training activities, additional or dedicated information may be provided.

4. Legal basis of processing

The processing of personal data is based, depending on the purposes pursued:

  • on the execution of pre-contractual measures adopted at the request of the interested party;

  • on the execution of a contract of which the interested party is a party;

  • on the fulfillment of legal obligations to which the Data Controller is subject;

  • on the legitimate interest of the Data Controller in the operation of the Site, in the security of the systems, in the management of requests and in the protection of their rights;

  • on the consent of the interested party, when required by current legislation.

The provision of data marked as mandatory in the forms is necessary to allow Archademy S.r.l. to manage the request. Failure to provide it may make it impossible to provide the requested feedback or service.

The provision of data for optional purposes, such as sending promotional communications, is free and the relative consent can be revoked at any time.

5. Methods of treatment

Personal data are processed with IT, telematic and, where necessary, paper tools.

Archademy S.R.L. adopts technical and organizational measures appropriate to the level of risk, aimed at protecting personal data from unauthorized access, loss, destruction, alteration, disclosure or illegal use.

The processing takes place in compliance with the principles of lawfulness, correctness, transparency, minimization, accuracy, integrity, confidentiality and limitation of conservation provided for by Regulation (EU) 2016/679.

6. Storage period

Personal data are kept for the time strictly necessary to pursue the purposes for which they were collected.

In particular:

  • The data contained in the requests for information are kept for the time necessary for their management and any commercial or contractual developments;

  • The data relating to registration and participation in training activities are kept for the period necessary for the course of the course and subsequently to fulfill administrative, accounting, tax and regulatory obligations;

  • The data relating to contractual relationships are kept for the duration of the relationship and, subsequently, for the period provided for by the applicable legislation;

  • The data processed on the basis of consent are kept until the revocation of the same or until the purpose for which they were collected was achieved;

  • The data necessary to protect the rights of the Data Controller may be kept until the applicable limitation periods expire;

  • The technical and safety data are kept for the period necessary to ensure the operation, protection and verification of the site.

At the end of the retention periods, the data is deleted, anonymised or made no longer identifiable, compatibly with the technical backup procedures.

7. Data recipients

Personal data can be processed by the staff of Archademy S.r.l. expressly authorized and adequately trained.

The data may also be communicated, within the strictly necessary limits, to subjects who provide services related to the activity of the Data Controller, including:

  • teachers, tutors and professionals involved in training activities;

  • Companies, organizations or organizations that are clients of the courses;

  • Financing bodies and subjects in charge of the management, control or reporting of training projects;

  • Tuscany Region and other competent public bodies;

  • providers of platforms for training and management of courses;

  • hosting service providers;

  • Companies in charge of IT management or maintenance;

  • cloud service providers;

  • e-mail providers and communication tools;

  • subjects in charge of the construction, management or maintenance of the site;

  • Administrative, fiscal, legal and technical consultants;

  • public authorities and other subjects to whom the communication is required by law or by an order of the authority.

These subjects operate, depending on the case, as independent data controllers or as data processors appointed pursuant to Article 28 of the GDPR.

The updated list of data processors is available upon request.

8. Data Sharing within the ViridiusLab Group

When necessary for administrative, organizational, management purposes or for the correct execution of the requested services, personal data can be shared with companies belonging to the ViridiusLab group.

Sharing takes place exclusively within the limits relevant to the purpose pursued and in compliance with Regulation (EU) 2016/679, on the basis of the execution of the contract, legal obligations, the consent of the interested party or the legitimate interest of the Data Controller, depending on the processing carried out.

The Group companies involved in the processing operate according to the privacy role attributed to them and take appropriate measures to ensure the protection of personal data.

9. Transfer of data outside the European Economic Area

Some IT, cloud, statistic or communication service providers may process personal data in countries located outside the European Economic Area.

In such cases, the transfer is carried out in compliance with Articles 44 and following of the GDPR, based on a decision of adequacy of the European Commission, the standard contractual clauses approved by the European Commission or another guarantee provided for by the applicable legislation.

More information on the guarantees adopted can be requested from the Data Controller.

10. Cookies and Tracking Tools

The site uses technical cookies and, with the prior consent of the user when required, statistical, functional, marketing cookies and other tracking tools.

To find out the types of cookies used, the respective purposes and the ways in which to modify or revoke the consent, it is possible to consult the site’s cookie policy.

11. Links to external sites

The Site may contain links to websites, platforms or services managed by third parties.

Archademy S.R.L. It does not control the ways in which these subjects process the personal data of users. Before using external services, the user is invited to consult the related privacy policies.

12. Rights of the interested party

The interested party may exercise, when applicable, the rights provided for in Articles 15-22 of Regulation (EU) 2016/679, including:

  • obtain confirmation whether or not a processing of personal data is in progress;

  • access their personal data;

  • obtain the correction of inaccurate data or the integration of incomplete ones;

  • request the deletion of personal data;

  • obtain the limitation of treatment;

  • oppose the treatment based on legitimate interest;

  • receive data in a structured, commonly used and automatic device-readable format;

  • request the transmission of data to another owner, where technically possible;

  • revoke consent at any time, without prejudice to the lawfulness of the processing carried out before the revocation;

  • not be subjected to a decision based solely on automated processing that produces legal effects or significantly affects one’s person.

Requests can be sent to the Data Controller using the contact details indicated in this information.

The interested party also has the right to lodge a complaint with Guarantor for the protection of personal data, pursuant to Article 77 of the GDPR, or to contact the competent judicial authority.

13. Data Controller

Archademy S.R.L. with sole shareholder

Via di Tegulaia, 10 / b
56121 Ospedaletto – Pisa (PI), Italy

Tax code and VAT number: 02264610508

R.E.A.: PI-193982

Phone: +39 050 6396294

Email: marlene.rocchi@archa.it

Website: www.archademy.net

14. Amendments to this information

Archademy S.R.L. You can update this Privacy Policy to adapt it to regulatory, organizational or related changes to the services offered through the Site.

The changes will be published on this page indicating the date of the last update.

Last update

September 2026.