Last updated: 23 October 2026

This notice explains how we process the personal data of people who visit cclitaly.it and of people who contact us or send us documents through the forms on the site, in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 (“Privacy Code”).

1. Data controller

[company name to be completed]
Via Machiavelli 13/A – Piazza Vittorio, 00185 Roma (RM)
VAT / Tax code: [to be completed]
Email: cclroma001@cclitaly.com
Telephone: 06 4576 3590

2. What data we process, why, and for how long

a) Browsing data

When you visit the site, the server that hosts it automatically records some technical data: IP address, date and time of the request, page visited, browser and operating system. We use it only to run the site, keep it secure (for example to block attacks) and find errors.
Legal basis: our legitimate interest in the security and proper working of the site (Art. 6(1)(f) GDPR).
Retention: as long as the hosting provider keeps server logs, normally no more than a few months, unless needed to investigate a crime.

b) “Contact” form

If you write to us through the contact form, we process your name, email address, telephone number (optional) and your message, to answer your request and, if you wish, to book an appointment.
Legal basis: steps taken at your request before providing a service (Art. 6(1)(b) GDPR).
Retention: up to 24 months after the last contact; if your request leads to a service, the data is kept as described in point c).

c) “ISEE / ISEEU online” service

To prepare your ISEE or university ISEE we process: name, surname, tax code (codice fiscale), email and telephone; the documents you upload (identity document and tax codes, including those of your household members, average balance and balances of accounts and cards, rental or mortgage contract, vehicle details, study documents) and, only if you upload it, your disability certificate, which contains health data (a special category of data, Art. 9 GDPR).
Purpose: to prepare the Single Self-Declaration (DSU), obtain the ISEE certificate and communicate with you about it.
Legal basis: providing the service you request (Art. 6(1)(b) GDPR) and complying with the legal obligations linked to the DSU (Art. 6(1)(c) GDPR). For health data the legal basis is your explicit consent (Art. 9(2)(a) GDPR), which we ask for with a specific checkbox in the form. You can withdraw it at any time; this does not affect processing already carried out.
Retention: uploaded documents are kept for as long as needed to complete your application and then for no more than 12 months; data the law requires us to keep is kept for the period set by the applicable rules.

Other people’s data. If you send us data about other members of your household (including children), you must be entitled to do so and tell them about this notice.

d) Contact by email, telephone and WhatsApp

If you contact us directly, we process the data you give us to reply and to provide the service you ask for, on the same legal bases and for the same periods described above.

3. Do you have to give us your data?

Fields marked with an asterisk are required: without them we cannot answer your request or prepare your application. The disability certificate and optional fields are not required.

4. How we protect your data

The site uses an encrypted connection (HTTPS). Documents uploaded through the ISEE form are stored in an area of the server that cannot be reached from the web, and only authorised staff can view them, with personal credentials. We do not carry out profiling or decisions based solely on automated processing.

5. Who may receive your data

• our authorised and instructed staff and collaborators;
• Hostinger International Ltd. (Larnaca, Cyprus, EU), which provides website and email hosting and acts as data processor (Art. 28 GDPR);
• INPS and other competent public bodies, when necessary for the service you asked for (for example to submit the DSU);
• public authorities, when required by law.

Your data is never published or sold to third parties.

6. Transfers outside the European Union

As a rule your data is processed within the European Union. If a provider processes data outside the EU, it will do so only with the safeguards set out in Articles 44–49 GDPR (for example an adequacy decision or standard contractual clauses). For third-party content that loads only after you click (for example Facebook videos), see the Cookie policy.

7. Your rights

At any time you can ask for access to your data, rectification, erasure, restriction of processing and data portability, and you can object to processing based on legitimate interest (Articles 15–22 GDPR); you can also withdraw any consent you gave. To exercise your rights, write to cclroma001@cclitaly.com: we will reply within one month.

If you believe the processing breaks the law, you can complain to the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or to the authority of the EU country where you live or work.

8. Cookies

This site uses technical cookies only. All the details are in the Cookie policy.

9. Changes

We may update this notice; the current version is always published on this page with the date of the last update. If the language versions differ, the Italian text prevails.