Privacy Policy

1. Data Protection Principles

Eterna Education Srl, as a data controller, processes student personal data in line with GDPR principles:

• Lawfulness & Transparency: Data is processed for legitimate educational purposes with your knowledge
• Purpose Limitation: Data is collected only for specified educational, administrative, and legal purposes
• Data Minimisation: Only necessary personal data is collected and retained
• Accuracy: Personal records are kept accurate and updated
• Integrity & Confidentiality: Data is protected against unauthorized access or loss
• Accountability: Records of data processing are maintained and available for audit

2. Personal Data Handling

Data Collected:

• Identity information (name, email, phone number)
• Educational records (assessments, grades, attendance/engagement metrics)
• Financial information (payment records, invoicing)
• Communication records (email, forum posts, support tickets)
• Technical data (login history, IP addresses for security purposes)
• Accessibility and accommodation needs (optional, for support purposes)

Data Usage:

• Educational Delivery: Content provision, assessment, and grading
• Student Support: Academic and welfare assistance
• Administrative Functions: Enrolment management, billing, certification
• Quality Assurance: Programme evaluation and continuous improvement
• Legal Compliance: Regulatory reporting and compliance with authorities
• Communication: Course updates, policy notifications, important announcements

Secure Communication:

• Personal data should not be transmitted by email unless necessary
• Sensitive information (financial data, medical information) must be encrypted or sent through secure channels
• Do not include unnecessary personal details in forum posts or public communications
• Use the secure Student Portal for sensitive transactions

3. Data Retention

• Active Enrolment: Data is retained during your active participation in the programme
• After Programme Completion: Records are retained for 7 years in accordance with regulatory requirements
• Upon Withdrawal: You may request deletion of non-essential data; some records are retained for audit purposes
• Right to Erasure: Subject to legal and contractual obligations, you have the right to request deletion of your data

4. GDPR Rights:

As a student, you have the following rights:

• Right of Access: Request a copy of the personal data Eterna Education Srl holds about you
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of data (subject to legal exceptions)
• Right to Restrict Processing: Request that processing be limited in certain circumstances
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Object: Object to processing for direct marketing or other purposes
• Right to Lodge a Complaint: Contact the relevant data protection authority if you believe your rights have been violated

5. Requests & Inquiries

To exercise your data protection rights or file a complaint:

• Contact: Email the support address
• Response Time: Requests will be responded to within 30 days
• Appeals: If unsatisfied, you may escalate to the Italian Data Protection Authority (Garante per la protezione dei dati personali)

6. Monitoring, Logging & Access by the Institution

Eterna Education Srl reserves the right to:

• Security Monitoring: Log and monitor data access for operational, security, and compliance purposes
• Authorized Access: Content and account access occurs only in defined circumstances:
  • Legal obligation or court order
  • Investigation of serious misconduct or academic integrity violations
  • Security incidents or fraud prevention
  • Student welfare concerns or safeguarding issues
• Proportionality: Monitoring is conducted with respect for privacy and data minimisation principles
• Documentation: All access is documented and reviewed for compliance