Privacy Notice – Web Site User


With this document, as required by current legislation (Article 13 of the General Data Protection Regulation, also referred to as RGPD), we provide users who access our website with information on the processing of their data.


The data controller is Rosario Gagliardi Srl, Via Cairoli 20, Syracuse - VAT 01826720896


Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information are not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of the computers used by users connecting to the website, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user's computer environment.

Data provided directly by the user

This category includes all personal data provided by the user in an optional way (so, for example, when requesting information by calling the numbers indicated on the website or by writing to the e-mail addresses listed on the site). We collect personal identifiers and contacts (such as name, surname, home address, email address and your preferences in our courses) and any other information relating to you which you may provide, in the following cases:

filling out our on-line contact form in the section “contact us” of our website;

during all MADE Program events organized in our Academy or in other sites.

We can also ask to social networks to send you information about our courses according to your interests, but we don't know your personal data.


Navigation data: purposes and legal bases

The navigation data are used to obtain anonymous statistical information on the use of the website, for purposes of site security and to check its correct functioning and could be used to ascertain responsibility in case of any computer crimes to the detriment of the site web.

The legal basis of the processing of such data is the legitimate interest and, in the case of requests by the Authorities, the legal obligation.

For the use of cookies or pixels for specific purposes, please refer to the cookie information that can be consulted by the site's footer.

Data provided directly by the user: purposes and legal bases

The personal data provided by the user in an optional way are used only to process any requests made and to implement the legal obligations and / or pre-contractual obligations and / or contractual obligations arising from the relationship in the case set up.

The legal bases for the processing of such data are therefore: the legal obligation and the execution of pre-contractual and contractual obligations.

In the areas of the site dedicated to certain services, specific information is reported, which the user must view before giving the data, which details all information on the processing of data.


The collected data are processed with IT tools and only in a residual way with paper methods. Appropriate security measures are adopted to prevent data loss, illicit or incorrect use and unauthorized access.

For the processing of data related to the services of the website the owner uses servers located within the European territory and computer systems located at the premises of the owner himself. The use of some services could involve the transfer of data outside the EU territory (so in the case of the newsletter to which the user can register through the appropriate form on the site), which however takes place in compliance with the necessary guarantees provided for by the law. All the details are provided to the user by means of the specific information made available during the provision of data for specific services.

The data provided directly by the interested party are kept for the time strictly necessary to process the requests of the interested party and then cancelled, except in cases of registration to courses or initiatives (against which the data may be kept for the duration of the relationship and according to legal obligations) and defensive needs (which may require further conservation).

The navigation data do not persist for more than seven days and are deleted immediately after their aggregation, without prejudice to any need to establish criminal offenses by the judicial authorities.

Regarding the data acquired through Google Analytics and other services that use cookies and similar tools, please refer to what is indicated in the cookie policy of these services.


Except for the navigation data necessary to run the IT and telematic protocols, the provision of data by users through the various methods made available is free and optional.

However, failure to provide the data will result in the inability to proceed with the requests forwarded or that the user intends to forward.


The data will be processed by the staff of the owner authorized to process. The data may also be known by consultants or by companies providing IT supply and assistance services for the purposes related to the indicated supply and assistance activities and by the consultants for the management of litigation and for legal assistance in the event of any disputes regarding where their involvement is necessary.

The interested party can request the list of external subjects who carry out their activities as data controllers


The law grants the interested party the right to request the data controller to access personal data and to correct or cancel it or limit its processing or to oppose its processing, in addition to the right to data portability.

The interested party can assert his rights at any time, without formalities, by contacting the owner through the email address

Below are detailed the rights recognized by current legislation regarding the protection of personal data.

• The right of access, i.e. the right to obtain from the data controller confirms whether or not a personal data treatment is being processed and in this case, to obtain access to personal data and the following information: 

a) the purposes of the processing; 

b) the categories of personal data in question; 

c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations; 

d) where possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period; 

e) the existence of the right of the interested party to request the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their treatment; 

f) the right to lodge a complaint with a supervisory authority; 

g) if the data are not collected from the data subject, all information available on their origin; 

h) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject. Where personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the existence of adequate guarantees relating to the transfer.

• The right of rectification, i.e. the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.

• The right to cancel, i.e. the right to obtain from the data controller the cancellation of personal data concerning him without undue delay if:

a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;

b) the interested party revokes the consent on which the treatment is based and if there is no other legal basis for the processing;

c) the interested party opposes the processing carried out because it is necessary for the execution of a task of public interest or connected to the exercise of public authority for which the holder is invested or for the pursuit of legitimate interest and there is no legitimate overriding reason to proceed with processing, or opposes processing for direct marketing purposes;

d) personal data have been processed unlawfully;

e) personal data must be deleted to fulfil a legal obligation under Union or Member State law to which the controller is subject;

f) personal data have been collected in relation to the provision of information society services to minors.

However, the cancellation request can not be accepted if the treatment is necessary:

a) for exercising the right to freedom of expression and information;

b) for the fulfilment of a legal obligation requiring treatment under Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority of which the data controller is invested;

c) for reasons of public interest in the public health sector;

d) for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, insofar as the cancellation risks making it impossible or seriously prejudices the achievement of the objectives of such treatment;

e) for the assessment, exercise or defense of a right in court.

• The right of limitation, i.e. the right to obtain that the data are processed, except for storage, only with the consent of the interested party or for the assessment, exercise or defence of a right in court or for protect the rights of another natural or legal person or for reasons of significant public interest of the Union or a Member State if:

a) the interested party disputes the accuracy of personal data for the period necessary for the data controller to verify the accuracy of such personal data;

b) the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited;

c) although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to verify, exercise or defend a right in court;

d) the interested party opposed the processing carried out because it was necessary for the performance of a task carried out in the public interest or in connection with the exercise of official authority vested in the holder or for the pursuit of the legitimate interests of the data controller or third parties, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

• The right to portability, i.e. the right to receive, in a structured, commonly used and automatically readable form, personal data concerning him / her provided to the holder and has the right to transmit such data to another holder without impediments by the the holder to whom he has provided them, as well as the right to obtain direct transmission of personal data from one holder to another, if technically feasible, if the processing is based on consent or on a contract and the processing is done by automated means. This right is without prejudice to the right to cancellation.

• The right to object, that is, the right of the interested party to oppose at any time, for reasons connected with his particular situation, the processing of personal data concerning him or her as necessary for the performance of a public or related task. 'exercise of public authority for which the holder is invested or for the pursuit of the legitimate interest of the data controller or third parties. If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him / her for such purposes, including profiling in so far as it is related to such direct marketing.

The interested party is then informed that, if he / she considers that the processing of his / her personal data takes place in violation of the provisions of the RGDP, he / she has the right to lodge a complaint with the Guarantor, as foreseen by art. 77 of the Regulation itself or to take appropriate judicial offices (Article 79 of the Rules).


Accademia di Belle Arti Legalmente Riconosciuta “Rosario Gagliardi”
Rosario Gagliardi Srl

Via Cairoli, 20
96100 Siracusa

VAT n. 01826720896

Privacy notice - Website user
Cookies policy

© 2019, All right reserved.