Legal
Privacy notice
This notice explains what personal data we collect, why we collect it, how long we keep it and what you can ask us for. It is written under articles 13 and 14 of Regulation (EU) 2016/679, the GDPR, which applies to us because the controller is a company established in Italy. It applies to you wherever you live.
On this page
Whether the data protection law of your own country also applies to this processing, and what it adds, is a question for a lawyer in that country. We have not answered it and we do not guess at it here. Where we already know the answer, this notice says so on the version in that country's language.
1. Who processes your data
| Item | Value |
|---|---|
| Controller | BHBlasted S.r.l. Società Benefit |
| Registered office | via Boscofangone SNC, zona ASI lotto C8, 80035 Nola (NA), Italy |
| Italian VAT number | 08466861211 |
| Privacy contact | institucional@istitutobelmonte.com |
| Certified email (PEC) | to be published |
| Data protection officer | The name, or a statement that none has been appointed, is published here before enrollment opens |
2. What we collect, and where it comes from
| Category | What it includes | Where it comes from |
|---|---|---|
| Contact data | First name, last name, email, telephone, country, home institution | From the forms you fill in |
| Application data | Identity document or passport, date and place of birth, proof of current university enrollment, entry dossier | From you, during pre-enrollment |
| Stay data | Flight details, emergency contact, dietary and accessibility requirements | From you, on confirmation |
| Contract and payment data | Billing details, payment reference, tax documentation | From you, or from the institution enrolling you |
| Teaching data | Attendance, work submitted, outcome of the program | Generated during the program |
| Browsing data | IP address, pages viewed, device | Automatically, and the detail is in the cookie policy |
Dietary and accessibility requirements can reveal health data or religious beliefs, which article 9 of the GDPR protects in a special way. We ask for them only if you provide them, we use them only to organize the stay, we do not pass them to anyone who does not need them, and we delete them at the end of the program. The exact legal basis for this processing is published here before enrollment opens.
3. Why we process it, and on what legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering a request for information or a quotation | Pre-contractual measures, art. 6.1.b | [—] |
| Managing the application and the contract | Performance of the contract, art. 6.1.b | [—] |
| Organizing the stay and the safety of participants | Performance of the contract, and [—] for the special categories | [—] |
| Issuing the certificate and allowing a third party to verify it | Performance of the contract, and [—] for later verification | [—], and the certificate register has a retention of its own |
| Accounting and tax obligations | Legal obligation, art. 6.1.c | 10 years, as Italian law requires |
| Defending a legal claim | Legitimate interest, art. 6.1.f | [—] |
| Sending information about our programs | [—], consent or legitimate interest. The choice has not been made | [—], and in any case until you withdraw |
4. Who we share it with
This list is empty and we say so. The suppliers who will process data on our behalf depend on technical decisions that have not been taken. When they are, the list by category appears here, and the list by name is available on request at institucional@istitutobelmonte.com.
The foreseeable categories are these, and none of them is active yet: hosting and email provider, contact management platform, site statistics tool, payment provider, insurer, accommodation providers and transport providers, the companies and venues visited for access management, accountants and lawyers.
We also share with the institution that enrolls you, where it is the contracting party, the data needed to run the group, including attendance. And with public authorities, where a rule requires it.
We do not sell personal data to anyone, in any form.
5. Where the data goes
Data is processed inside the European Union. Some transfers to countries outside the Union are foreseeable, in particular to the countries the participants come from, in order to manage the relationship with the institutions and with the participants. The instrument that makes them lawful, whether an adequacy decision, the Commission's standard contractual clauses or one of the derogations in article 49, is stated here before the first transfer takes place.
6. What you can ask us for
You have the right to ask for access to your data, its rectification, its erasure, the restriction of processing, the portability of the data you gave us, and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time, and withdrawal does not affect what was done before.
How to do it. Write to institucional@istitutobelmonte.com with your name, a way to reach you, a copy of your identity document and the right you are exercising. We answer within one month, as article 12 of the Regulation requires, and if we need longer we tell you within that month and say why.
If you believe the processing breaches the Regulation you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the supervisory authority of the EU Member State where you live. If you live outside the European Union, whether your national authority is also competent is the question at the top of this page, and it is open.
7. What happens if you do not give us a piece of data
The data marked as required on the forms is what we need to do what you are asking us to do. Without a passport we cannot prepare the acceptance letter; without billing details we cannot issue the accounting document. The rest is optional and its absence changes nothing.
8. Automated decisions
We do not take automated decisions and we do not carry out profiling to assess an application. The assessment is an interview with a person.
9. Updates
This notice changes when something substantial changes, and it always carries the date of the latest version at the foot. Earlier versions can be requested at institucional@istitutobelmonte.com.
Last updated: 13 October 2026. Reviewed by [—].
This program does not lead to any qualification with legal validity. Istituto Belmonte is a private training institute. Its programs do not confer qualifications with legal validity in Italy or in any other country and carry no academic credits. A certificate of attendance stating hours and content is issued at the end.