Privacy Policy

This notice is provided under Article 13 of Regulation (EU) 2016/679 ("GDPR") to users who browse https://scuolascibormio.com/ or use the online services connected with Scuola Nazionale Sci & Snowboard Bormio.

The Data Controller is SCUOLA NAZIONALE SCI E SNOWBOARD BORMIO, VAT/Fiscal code 01106880147, fiscal address Via Battaglion Morbegno 17, 23032 Bormio (SO), Italy. Privacy requests may be sent to info@scuolascibormio.com.

Navigation data

The IT systems acquire technical data required for website operation, such as IP addresses, request logs, technical identifiers, browser type, operating system, access times and pages viewed.

Data provided voluntarily by the user

This category includes data sent by email, contact forms, questionnaires, course enrolments, Claud-IA conversations and booking requests: name, contact details, request content, course preferences, level, age or information required to provide the requested service.

Data are processed to answer user requests and manage contacts, quotations, enrolments, bookings, assistance, questionnaires and operational communications. The legal bases are pre-contractual or contractual measures requested by the data subject, compliance with legal obligations, consent where required and legitimate interest in website security, abuse prevention and orderly request management.

Processing is carried out with electronic tools and organisational procedures proportionate to the purposes described. The website does not use automated decisions producing legal effects for the user. Claud-IA provides information support and does not autonomously finalise bookings, payments, changes or cancellations.

Claud-IA is an artificial intelligence assistant using OpenAI APIs. The chat is intended for adults and requires an adult declaration before sending, without collecting documents or a date of birth; this is not certified age verification. A parent or guardian should handle contact for minors. Its use is optional: you can contact the office directly by email or phone. Answers can contain mistakes: confirm prices, availability and conditions with the office or on BeeBeeBoard. The assistant does not confirm bookings or payments or decide admission to courses.

When you send a message, the website sends OpenAI a context limited to the last 8 messages, up to 800 characters each, together with official school information. Do not enter health data, documents, passwords, payment details or identifying information about children. A callback request only needs the adult requester’s name and email; the user must check and send the prepared email themselves.

The office also uses AI to classify enquiries and prepare email drafts. The submitted context is limited and filtered to reduce contact details and links; this does not guarantee anonymity. Attachments are not sent to the model. Recognised sensitive requests are routed to a person. Drafts require human review and sending.

Providers involved include OpenAI for AI processing, Vercel for the website and Google for office email. Under OpenAI API terms, content is not used to train models by default unless the customer explicitly opts into sharing. Website calls disable stored completions (store: false); this does not exclude provider security logs, normally retained for up to 30 days, subject to legal or security exceptions. The code does not configure the service for EU-only residency. For information about providers, transfer safeguards and your rights, contact info@scuolascibormio.com.

Data may be processed by authorised staff and technical providers required to operate the website and services, including web hosting and infrastructure, email, booking management, communication delivery, AI assistance tools and administrative services. Data may also be disclosed to consultants, authorities or public bodies when required by law or necessary to protect rights.

Some technology providers may process data outside the European Economic Area. In such cases the Controller requires transfers to rely on adequacy decisions, standard contractual clauses or other safeguards under Articles 44 et seq. GDPR.

Data are retained for the time necessary to manage the request or service. Chat history stays in page memory and is cleared from the browser by reloading the page or choosing “New conversation”; closing the chat window does not clear it. The website does not archive chat text in its database. This action does not erase logs already processed by providers. Emails and drafts remain in the office mailbox to manage enquiries for the periods applicable to the service and legal obligations. Data relating to bookings, enrolments, payments and administrative documents are retained for the periods required by civil, tax and accounting law. Technical logs are kept for periods proportionate to website security.

The website uses cookies and similar technologies as described in the Cookie Policy, which forms an integral part of this notice.

Under Articles 15-22 GDPR, the data subject may request access, rectification, erasure, restriction, objection to processing, data portability where applicable and withdrawal of consent without affecting processing lawfully carried out before withdrawal.

Requests may be sent to info@scuolascibormio.com. The data subject also has the right to lodge a complaint with the Italian Data Protection Authority, www.garanteprivacy.it.