Notice on the use of Cookies and similar tracking technologies
Last revised: July 23, 2026
1. Introduction and regulatory references
This notice sets out the main information relating to the processing of personal data and the use of cookies within this site.
This notice is addressed to anyone who accesses or uses this site, describing how the user’s personal data may be collected, used and protected through cookie and similar technologies, as well as the rights granted by law.
These provisions do not concern other websites, pages or online services accessible through external links that may be present on the site, in respect of which you are invited to consult the relevant privacy notices.
This notice is provided in compliance with the principal national and international regulations on the protection of personal data, including:
- Regulation (EU) 2016/679 (GDPR) and Directive 2002/58/EC, known as the ePrivacy Directive
- UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018, Privacy and Electronic Communications Regulations (PECR) and Data (Use and Access) Act 2025 (DUAA)
- Swiss Federal Act on Data Protection (nFADP / FADP)
- Canadian Personal Information Protection and Electronic Documents Act (PIPEDA)
- Other regulations that may be applicable.
2. Who manages your data and how can you contact us?
Your personal data is processed by:
AMERICAN SCHOOLS ABROAD INC
Via del Carota 23/25 - 50012 Bagno a Ripoli (FI)
americanschoolsabroad@pec.it
VAT ID: IT04029390483
For any information concerning the processing of personal data or to exercise the rights granted by law, data subjects may contact the Data Protection Officer (DPO) appointed by the Data Controller.
The DPO can be reached at the following contact details:
Email: dpo@isfitaly.org
The DPO acts as a point of reference for matters relating to the protection of personal data, ensuring compliance with the applicable legal provisions and providing support to users and supervisory authorities.
3. What data do we collect when you visit the site?
When you browse this site, we may collect certain information through cookies, related tools and tracking technologies. The main types of data that may be recorded include:
- Technical and navigation information: IP address, identifiers of the device in use, information about the browser and operating system, date and time of accesses, pages visited, technical commands necessary for the correct display of content, system errors.
- User preferences: choices made in relation to cookies and privacy settings, collected through panels, banners or similar tools.
- Statistical and usage data: information used to assess and improve the functioning of the site, for example the frequency of visits or the most consulted areas. This data may be processed in aggregated or anonymised form where the tool used allows it; in other cases the related processing takes place according to the preferences expressed by the user and as indicated in the detailed list of cookies.
- Interactions with integrated external services: technical data shared when the site integrates third-party services (e.g. fonts, maps, image display), always in accordance with the rules of the operators involved.
For details on the processing of data provided through contact forms, service requests or other features, we invite you to consult our Personal Data Policy.
4. What types of cookies (and similar) exist?
In general, there are several categories of cookies and similar technologies (web beacons, local storage and equivalent technologies). Below is a description of the categories that can generally be used; the list of those actually present on this site is set out in the following section “Detailed list of cookies”.
- Strictly necessary cookies: essential for the technical functioning of the site, they allow, for example, access to protected areas, session management or remembering essential preferences.
- Cookies for preferences and personalisation: they serve to store display choices, such as language, text size or viewing mode, in order to offer you an interaction closer to your preferences.
- Analytics and performance cookies: they help us understand how the site is used. They can be treated as technical cookies only when they are configured so as to reduce their identifying power and are used exclusively for aggregated statistics; in other cases they are activated only with the user’s prior consent.
- Cookies for promotional or advertising activities: used to offer personalised commercial content and to monitor the effectiveness of advertising campaigns.
- External components and services: by interacting with social plugins, analytics tools or third-party platforms, cookies or comparable systems managed directly by external parties may be installed.
5. How can you give or refuse consent to the use of cookies?
Jurisdictions EU, United Kingdom, Switzerland, or in any case in countries with legislation similar to the GDPR:
- The use of cookies and similar technologies that are not strictly necessary requires the prior consent of the user, freely given and specific, which is collected through a dedicated cookie banner.
- The user can manage and modify their preferences at any time, withdraw the consent granted and access the “Manage cookie preferences” function.
Canada PIPEDA and equivalent regulations:
- The user has the right to opt out of the collection, sale and sharing of personal data with third parties for marketing, behavioural advertising and profiling purposes.
Operational details:
On first access to the site, a banner is displayed that allows you to manage preferences relating to cookies and tracking tools.
Through the banner, the user can choose whether to:
- Accept all cookies: by clicking the dedicated button, all non-essential cookies will be activated.
- Customise the settings: you can select in detail which cookies to authorise and which to keep disabled.
- Reject optional cookies: by pressing the reject button or closing the banner without giving consent, only the technical cookies necessary for the functioning of the site will be activated.
The preferences expressed through the banner are retained for a period of 180 days by means of a technical cookie. If you access from a different device or browser, you will need to reconfigure your preferences.
The user may, in any case, at any time modify the choices made by accessing the dedicated functionality, identifiable by the icon or the link dedicated to consent management.
6. On what legal bases do we process the data collected through cookies and related technologies?
The installation of cookies and the use of tracking tools are based on different legal bases depending on the category of the tool and the applicable legislation. In general:
- Technical cookies and strictly necessary tools: they are used without the user’s consent, as they are necessary to carry out the transmission of a communication over an electronic communications network or to provide an information society service expressly requested by the user. This category includes, for example, cookies necessary for the functioning of the site, session management, security, the storage of consent preferences and, where the conditions are met, certain analytics cookies configured so as to reduce their identifying power.
Where personal data is processed through cookies, the related processing is based on the legal bases provided for by the GDPR, such as, depending on the case, the user’s consent, the performance of a requested service, the fulfilment of legal obligations or the legitimate interest of the Data Controller, for example to ensure the security of the site and prevent abuses.
Refusing or withdrawing consent to the use of certain cookies may limit access to some personalised features of the site.
7. How is your data protected?
The personal data collected through this site by means of cookies and tracking tools is processed by electronic means in accordance with the principles of lawfulness, fairness, minimisation, integrity and confidentiality.
In particular, communications between the user’s browser and the site are protected by HTTPS encryption, a measure aimed at reducing the risk of interception or manipulation of the data transmitted during browsing.
The Data Controller also adopts further technical and organisational measures appropriate to ensure a level of security suited to the risk. For details of such measures, please refer to the Personal Data Policy on this site.
8. Where can your data be processed and transferred?
Some of the cookies and third-party tools listed in the following section “Detailed list of cookies” are provided by parties that may process the data in countries other than the one in which you reside, including foreign countries.
The data collected through cookies and tracking tools is processed, as a rule, within the European Union / European Economic Area (EEA). Where a supplier processes personal data in third countries, the transfer takes place only where an applicable adequacy decision exists, such as the EU-U.S. Data Privacy Framework for US suppliers that are actually certified, or on the basis of appropriate safeguards pursuant to Articles 44 et seq. of the GDPR, including, where applicable, the Standard Contractual Clauses adopted by the European Commission.
For transfers to third countries subject to the UK GDPR, the basis consists of the adequacy determinations recognised by the United Kingdom (including, for the US, the UK Extension to the EU-US Data Privacy Framework – “UK-US Data Bridge” for certified suppliers) or by appropriate safeguards such as the International Data Transfer Agreement (IDTA) or the UK Addendum to the SCCs, subject to a transfer risk assessment (TRA).
9. Who can receive your data?
The personal data collected through cookies and tracking tools may be processed by the Data Controller, by authorised persons and by technical service providers or third parties involved in the provision of the services on the site.
Such parties may act, depending on the case, as Data Processors, independent Data Controllers or, where applicable, joint Data Controllers. The related information is indicated, where available, in the detailed list of cookies and in the privacy notices of the individual suppliers.
With reference to the applicable US and Canadian regulations, the sharing of data with third-party providers of profiling or advertising cookies may constitute a “sale” or “sharing” of personal data: in such cases the user can exercise the right to opt out as described in this notice.
The updated list of suppliers can be consulted in the table in section 10 and is also available on request at the Data Controller’s contact details.
10. Detailed list of cookies
Google Analytics
Google Analytics is a web analytics service provided by Google Ireland Limited ("Google"). Google uses the collected personal data to track and examine the usage of this website, compile reports on its activities, and share them with other Google services. Google may use your personal data to contextualize and personalize the ads of its advertising network. This integration of Google Analytics anonymizes your IP address. The data sent is collected for the purposes of personalizing the experience and statistical tracking. You can find more information on the "More information on Google's handling of personal information" page.
Place of processing: Ireland - Privacy Policy
Google Tag Manager
Google Tag Manager is a tag management service provided by Google Ireland Limited. The data sent is collected for the purposes of personalizing the experience and statistical tracking. You can find more information on the "More information on Google's handling of personal information" page.
Place of processing: Ireland - Privacy Policy
Crazy Egg
Crazy Egg is a heat mapping service provided by Crazy Egg, Inc.
Place of processing: United States - Privacy Policy
Facebook Like button and social widgets
The Facebook Like button and social widgets are used to interact with the Facebook social network and are provided by Facebook Ireland Ltd.
Place of processing: Ireland - Privacy Policy
Facebook Remarketing
Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook Ireland Ltd. This service is used to link the activity of this website with the Facebook advertising network.
Place of processing: Ireland - Privacy Policy
Google Ads conversion tracking
Google Ads conversion tracking is an analytics service provided by Google Inc. that is used to connect data from the Google Ads advertising network with actions performed on this Site.
Place of processing: Ireland - Privacy Policy
Google Fonts
Google Fonts is a service used to display font styles operated by Google Ireland Limited and serves to integrate such content into its pages.
Place of processing: Ireland - Privacy Policy
Gravatar
Gravatar is an image visualisation service provided by Automattic Inc. that allows this Website to incorporate content of this kind on its pages.
Place of processing: United States - Privacy Policy
Hotjar Heat Maps & Recordings
Hotjar is a session recording and heat mapping service provided by Hotjar Ltd.
Place of processing: Malta - Privacy Policy
Microsoft Clarity
Clarity is a session recording and heat mapping service provided by Microsoft Corporation.
Place of processing: United States - Privacy Policy
Pinterest Conversion Tag
Pinterest Conversion Tag is an analytics service provided by Pinterest, Inc. that connects data from the Pinterest advertising network with actions performed on this Website.
Place of processing: United States - Privacy Policy
TikTok Analytics
TikTok Analytics is a web analysis service provided by TikTok Technology Limited.
Place of processing: Ireland - Privacy Policy
TikTok Remarketing
TikTok Remarketing is a remarketing and behavioural targeting service provided by TikTok Technology Limited that connects the activity of this Website with the TikTok advertising network.
Place of processing: Ireland - Privacy Policy
11. How long do we keep your data and preferences?
The preferences expressed on the use of cookies and tracking technologies through the banner or the consent management platform are retained for a period of 180 days.
For the retention, duration and methods of deletion of data other than those mentioned, you can consult the specific provisions set out in the Personal Data Policy on this site
12. What are your rights regarding the data collected?
In relation to the data collected through cookies and tracking tools, the user can exercise at any time the rights granted by the applicable legislation.
In particular, the right most directly connected to cookies is the right to withdraw the consent previously given to the use of non-technical cookies and to modify one’s preferences at any time, through the dedicated consent management function identifiable by the icon or the dedicated link, without this affecting the lawfulness of processing based on the consent given before the withdrawal.
Users in the United Kingdom have the right to lodge a complaint directly with the Data Controller regarding data protection: the Data Controller will respond within 30 days. This is without prejudice to the right to approach the Information Commission (formerly the Information Commissioner’s Office – ICO).
With reference to the applicable US and Canadian regulations, the user can exercise at any time the right to opt out of the sale or sharing of their personal data for marketing, profiling and behavioural advertising purposes, through the dedicated functions of the banner, the browser settings or equivalent signals (e.g. Global Privacy Control).
The user also has, under the applicable legislation, the further rights granted to data subjects — including access, rectification, erasure, restriction, objection to processing, data portability and lodging a complaint with the competent supervisory authority. For a full description of these rights and the methods of exercising them, please refer to the Personal Data Policy on this site.
13. How to delete cookies
Each browser provides different procedures to prevent the use of cookies or to remove them. You can act from the settings of your browser to block and/or delete them. Below you will find references to the official guides of the main browsers on how to manage and delete cookies:
- instructions for Google Chrome
- instructions for Safari
- instructions for Mozilla Firefox
- instructions for Microsoft Edge
If you use a browser other than those indicated, consult the support section of the official website of the relevant manufacturer.
14. How do we inform you of changes to this notice?
This notice is subject to periodic revision to reflect regulatory changes or modifications to the services offered through the site. Any significant change will be communicated through this page.
Last revised: July 23, 2026
