Scholarship Privacy Policy – Updated on 07/01/2026

Istituto Marangoni S.r.l., as Data Controller, wishes to inform you about what data it collects and how, in order to guarantee your fundamental rights and freedoms, with particular reference to the confidentiality and security with which the data is processed.

Istituto Marangoni S.r.l. collects and stores your data:

• Personal and identification data (such as name, surname, residential address, email address, courses of interest, nationality, gender, place and date of birth, telephone number, copy of identity document);
• Curriculum vitae and Cover letter;
• Diploma/Certificate Grades;
• Project portfolio

We may ask social media channels to send information about our courses based on their users' profiles and in accordance with their data processing policies, but we are not aware of your name.

Istituto Marangoni S.r.l. uses your data for the following purposes:

a)To manage your application for a scholarship.

In relation to the purposes referred to in the point 3 a) the processing is necessary for the performance of pre-contractual measures (Art. 6, para. 1, letter b) of the GDPR).

b) Exercising the rights of the Data Controller

In relation to the purpose referred to in point b), processing is necessary for the pursuit of legitimate interests (Art. 6, para. 1, letter f) of the GDPR).

c) To send you information about campuses, scholarships, courses and events that may be of interest to you .

d) To send you information and updates about Istituto Marangoni and your enrolment via WhatsApp

e) For profiling purposes

In relation to the purposes referred to in points c), d) and e), the legal basis for processing is your consent (Art. 6, para. 1, letter a) of the GDPR).

For the purposes referred to in point 3 (a), we retain your personal data for the entire duration of the contractual relationship and even beyond the ten-year limitation period from the termination of the relationship in order to comply with legal obligations and for judicial protection purposes.

For the purposes referred to in point (b), we retain your data for a period not exceeding 12 months from collection.

For the purposes referred to in points (c), (d) and (e), we retain your data for up to 3 years, without prejudice to your right to withdraw your consent at any time.

Once the retention period has expired, the data will be destroyed or anonymised.

N.B. If, in the event of a dispute, it is necessary to ascertain, exercise or defend the rights of the Data Controller, the retention period of the data collected for the above purposes may be extended due to the possibility that it may be necessary to prepare defensive elements during that period. In this case, the data will be retained only until the conclusion of the dispute.

Your data will be processed using tools that guarantee its confidentiality, integrity and availability. The processing may be carried out on paper or using computerised and/or automated systems and will include all the operations or set of operations provided for in Article 4 of the GDPR and necessary for the processing in question, including communication to the persons in charge of the processing. The data in question will not be disclosed; however, it will or may be communicated to public or private entities operating within the scope of the purposes described above.

Only persons authorised within the scope of the tasks assigned by Istituto Marangoni S.r.l. may access your data, including at locations outside the European Union.
Istituto Marangoni S.r.l. is part of Galileo Global Education Italia. Authorised employees of Galileo Global Education Italia may also have access to some of your data.
Non-economic public bodies (e.g. MIUR, Lombardy Region) may also have access to some of your data when communication is necessary for the performance of the institutional functions of the requesting body.
Personal data will not be disclosed in any way, but may be communicated and processed by third parties duly appointed as Data Processors, such as external collaborators and companies that provide specific instrumental services.
Personal data may also be accessible or communicated to parties whose right to access your personal data is recognised by law or secondary or EU legislation.

Your personal data will be managed and stored on servers located within the European Economic Area (EEA) and belonging to the Data Controller and/or third-party companies appointed and duly identified as Data Processors .

Your data may also be processed by other companies belonging to the Istituto Marangoni group, located outside the European Economic Area (EEA), adopting appropriate security measures to ensure an adequate level of protection.

In addition, some third-party companies appointed as Data Processors may transfer your personal data to servers located outside the European Economic Area (EEA). In this case, this will be done in accordance with Articles 44 et seq. of the GDPR, using appropriate safeguards to ensure protection. Further information on these safeguards can be requested from the Data Controller .

The provision of your data referred to in point 3 (a) is necessary to enter into and execute the contract (to manage your application for the scholarship). For the purposes referred to in point 3 (c), (d), (e), it is optional; if you do not consent, you will not be able to find out about our initiatives, events and courses.

In accordance with the provisions of the GDPR, Istituto Marangoni S.r.l. guarantees the following rights:

• Right to withdraw consent [Art. 7, para. 3, of the EU Regulation] (right to withdraw consent given. Note: withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal) ;
• Right of access by the data subject [Art. 15 of the EU Regulation] (right to obtain confirmation of the existence or otherwise of personal data concerning him/her and a copy thereof in an intelligible form);
• Right to rectification [Art. 16 of the EU Regulation] (right to rectify inaccurate personal data concerning him/her);
• Right to erasure ("right to be forgotten") [Art. 17 of the EU Regulation] (right to erasure of one's data. Note: if the data has already been disseminated, i.e. made available to an indeterminate number of recipients - for example, through publication on the Istituto Marangoni S.r.l. website - it may be impossible for Istituto Marangoni S.r.l. to erase/destroy it; therefore, if it is impossible to proceed with the erasure of the data for the reasons indicated above, Istituto Marangoni S.r.l. will inform you of the reasons why it is impossible to do so in this case and will pursue the right to be forgotten);
• Right to restriction of processing [Article 18 of the EU Regulation] (right to obtain restriction of processing, for example, in the event of a dispute over the accuracy of the data or in the event of unlawful processing);
• Right to data portability [Art. 20 of the EU Regulation] (right to receive personal data concerning him/her provided to Istituto Marangoni S.r.l. in a structured, commonly used and machine-readable format and right to transmit those data to another data controller without hindrance from Istituto Marangoni S.r.l. where the processing is based on consent and is carried out by automated means) ;
• Right to object [Art. 21 of the EU Regulation] (right to object to the processing of one's personal data);
• Right not to be subject to automated decision-making [Art. 22 of the EU Regulation] (right not to be subject to a decision based solely on automated processing).

The above rights may be exercised in writing by sending an email toprivacy@istitutomarangoni.com ordpo@istitutomarangoni.com . Further information regarding the processing of personal data may be requested at any time using the same contact details. It should also be noted that the exercise of one's rights must not prejudice and/or infringe on the rights and freedoms of others.

Istituto Marangoni S.r.l. undertakes to respond to requests within one month, except in the case of particularly complex requests, for which a maximum of three months may be required. In any case, Istituto Marangoni S.r.l. will explain the reason for the delay within one month of the request.

The outcome of the request will be provided in writing (at the request of the data subject) or in electronic format (and, in this case, free of charge). Istituto Marangoni S.r.l. specifies that a contribution may be requested from the data subject if their requests are manifestly unfounded, excessive or repetitive: in this regard, Istituto Marangoni S.r.l. will keep track of requests.

Istituto Marangoni S.r.l., in accordance with Article 19 of the EU Regulation, undertakes to inform the recipients to whom the data subject's personal data have been disclosed of any corrections, deletions or restrictions on processing requested by the data subject, where possible.

If the data subject believes that their rights have been compromised or infringed , or that the processing of their data is contrary to the legislation in force, they have the right to lodge a complaint with the Data Protection Authority in accordance with the procedures indicated by the Authority itself at the following Internet address: https://www.garanteprivacy.it/i-miei-diritti.

The Data Controller is: Istituto Marangoni S.r.l. – Via Meravigli, 7 20123 Milan MI
Email: privacy@istitutomarangoni.com
The Data Protection Officer can be contacted at the following email address: dpo@istitutomarangoni.com

This policy is subject to change. Any substantial changes will be communicated to you by email or through our website.