Last updated: 29 September 2026

This Privacy Policy describes how we process the personal data of users who visit and use the website www.npvaredo.it (hereinafter referred to as the “Website”), in accordance with Regulation (EU) 2016/679 (“GDPR”), Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, and any further applicable provisions relating to the protection of personal data.

This privacy policy applies exclusively to the Website. It does not apply to any third-party websites, services or platforms that may be accessed via hyperlinks on the Website’s pages; such third parties operate in accordance with their own privacy policies.

1. Data controller

The data controller is:

NP Varedo
20 Viale Felice Rebuzzini
20814 Varedo (MB), Italy
Tel. 0362 580874
Fax 0362/576352
Email: info@npvaredo.it
Tax Code and VAT number 06988320963

For enquiries regarding this privacy policy, the processing of personal data or the exercise of rights under the GDPR, you may contact the Data Controller by writing to info@npvaredo.it, stating “Privacy request” in the subject line.

2. Types of data processed

Depending on how the Website is used, NP Varedo may process the following categories of personal data.

Browsing data

The IT systems and software procedures used to operate the Website collect, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols.

This category includes, by way of example:

• IP address and online identifiers;

• date and time of access;

• information about the browser, device and operating system used;

• pages visited, referring URLs and technical data relating to the session;

• technical logs, security data and information necessary for the proper functioning of the Website.

This data is used to ensure the proper functioning and security of the Website, to identify any technical faults and to compile aggregated statistical information on the use of the pages.

Data provided voluntarily by the user

The user may voluntarily provide personal data when:

• fill in a contact form;

• requests information about courses, activities, fees, admission, venue hire or other services;

• requests a quote;

• submit an application via the “Careers” section;

• subscribes to the newsletter;

• contact NP Varedo by email, telephone, WhatsApp or any other contact details published on the website;

• submit a request or make a booking via any systems integrated into the Website.

The data processed may include first name, surname, email address, telephone number, the content of the enquiry, information relating to the service in question and any further data provided voluntarily by the user.

Users are asked not to provide, unless specifically required and at the Data Controller’s request, special categories of data within the meaning of Article 9 of the GDPR, such as data relating to health, religious beliefs, political opinions or other sensitive data.

Information on cookies and tracking

The Website may use cookies and similar technologies to ensure it functions properly, to remember your preferences, to analyse its performance and, subject to your consent, to measure the effectiveness of marketing campaigns and communications.

For further information, please refer to the Cookie Policy: https://www.npvaredo.it/cookie-policy/.

3. Purposes and legal bases

NP Varedo processes personal data for the purposes and on the legal grounds set out below.

The provision of data when submitting enquiries via the forms on the Website is optional. However, failure to provide such data may make it impossible to respond to the enquiry or to provide the requested service.

Consent to receive marketing communications and newsletters is optional and may be withdrawn at any time.

4. Newsletters and marketing

If the user subscribes to the newsletter or consents to receiving marketing communications, NP Varedo may send updates by email regarding the centre’s courses, activities, promotions, services, events, initiatives and news.

NP Varedo can use the platform to manage communications and distribution lists MailUp. MailUp may process personal data on behalf of the Data Controller in accordance with the applicable agreements and, where applicable, in its capacity as Data Processor pursuant to Article 28 of the GDPR.

You may withdraw your consent and unsubscribe at any time:

• by clicking on the unsubscribe link included in every email you receive;

• by sending a request to info@npvaredo.it.

The withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.

5. Cookies, Google Tag Manager and tracking tools

The Website uses cookies and other tracking technologies. Technical or strictly necessary cookies are used to ensure the Website functions properly and do not require the user’s consent, subject to the obligation to provide appropriate information.

Profiling cookies and other non-technical tracking tools may only be enabled once the user’s free, specific, informed and unambiguous consent has been obtained.Data Protection Officer+1

Depending on the settings currently in use, the Website may use:

• Google Tag Manager, to centrally manage tags, scripts and measurement tools;

• web analytics tools, such as Google Analytics 4, if configured;

• advertising and conversion tracking tools, such as Meta Pixel, Google Ads or equivalent services, if configured;

• tools for managing consent and storing cookie preferences;

• third-party content or services, such as maps, videos, fonts, social networks and external widgets, where applicable.

Google Tag Manager is a tag management tool and does not independently determine the purposes of data processing: individual tags loaded via this system may process data only in accordance with their respective configurations and, for non-technical purposes, only after the user’s consent has been obtained.

You can accept, reject or change your preferences regarding non-technical cookies via the cookie banner or the dedicated preferences centre available on the Website.

For details regarding cookies, the technologies used, third parties, purposes, retention periods and how to manage your preferences, please refer to the Cookie Policy: https://www.npvaredo.it/cookie-policy/.

6. Recipients of personal data

Personal data may be processed by NP Varedo staff who have been expressly authorised and instructed by the Data Controller.

The data may also be disclosed to or made available to external parties who provide services necessary for the management of the Website and related activities, including:

• hosting and cloud services providers;

• providers of maintenance, development and technical support for the website;

• email and newsletter service providers, including MailUp where used;

• providers of web analytics, tag management, digital marketing and consent management tools;

• booking system providers, where applicable;

• IT, administrative, tax or legal advisers;

• public authorities, bodies or entities to whom the data must be disclosed in accordance with a legal obligation.

These parties may act, as appropriate, as data processors within the meaning of Article 28 of the GDPR or as independent data controllers, in accordance with their respective privacy policies.

7. Data transfers to countries outside the EEA

The use of certain technology providers, cloud services, newsletters, analytics or marketing tools may involve the transfer of personal data to countries outside the European Economic Area.

In such cases, NP Varedo applies the safeguards provided for under the GDPR, by verifying the existence of an adequacy decision by the European Commission or, where necessary, by using standard contractual clauses approved by the European Commission and any appropriate additional measures.

8. Retention period

Personal data is retained for the period strictly necessary to fulfil the purposes for which it was collected, in accordance with the principles of data minimisation and storage limitation.

Specifically:

• Data submitted via enquiries regarding contact, information, quotes or availability are retained for as long as is necessary to process the enquiry and, in the absence of any further dealings, for a period not exceeding 24 months;

• Data relating to the newsletter is retained until consent is withdrawn, the user unsubscribes or the list is deleted in accordance with the Data Controller’s internal procedures;

• Data relating to applications are retained for a period not exceeding 12 months from the date of receipt, unless the candidate consents to their retention for a longer period;

• Browsing data and technical logs are retained for as long as is necessary to ensure the security, operation and maintenance of the Website, unless required for the purposes of establishing liability or to comply with legal obligations;

• Data processed to fulfil legal obligations are retained for the period specified by the applicable legislation;

• Cookie preferences are stored for the period specified in the Cookie Policy and in the consent management platform’s settings.

9. Rights of the data subject

The data subject may exercise, vis-à-vis the Data Controller and within the limits set out in the applicable legislation, the rights recognised under Articles 15 et seq. of the GDPR, including:

• the right to obtain confirmation as to whether or not personal data concerning him or her exist;

• the right of access to one’s personal data;

• the right to have inaccurate data rectified or incomplete data completed;

• the right to have personal data erased, in the cases provided for by law;

• the right to restriction of processing;

• the right to data portability, where applicable;

• the right to object to processing based on the data controller’s legitimate interests;

• the right to withdraw consent at any time, without this affecting the lawfulness of any processing carried out prior to the withdrawal;

• the right to lodge a complaint with a competent supervisory authority.

The GDPR grants data subjects the rights of access, rectification, erasure, restriction, data portability and objection, which may be exercised by contacting the data controller.ratioiuris+1

To exercise their rights, users may write to info@npvaredo.it, stating “Privacy request” in the subject line of the message.

10. Complaint to the Data Protection Authority

The user has the right to lodge a complaint with the Data Protection Commissioner, without prejudice to any other administrative or judicial remedies.

Data Protection Commissioner
11 Piazza Venezia
00187 Rome
Website: www.garanteprivacy.it

11. Changes to the privacy policy

NP Varedo may update this Privacy Policy at any time to bring it into line with changes to legislation, technical requirements, organisational arrangements or the services offered via the Website.

The updated version will be published on this page, along with the date of the last update. Users are therefore advised to check this policy from time to time.