Privacy Policy

The data controller is Abbas Alloul — EduItalia, an independent education consultancy based in Italy.

Email: info@eduitalia.eu
Location: Italy

No Data Protection Officer has been appointed. For any privacy question, write to the email above.

When you submit the Free Profile Evaluation form, we collect:

• Full name, email and WhatsApp / phone number
• Country of residence
• Current education level, desired study level and field of study
• GPA / grade and language level (optional)
• Preferred city and approximate budget (optional)
• Target intake and your message
• Your acknowledgement that you have read this Privacy Policy, and the date and time of your submission

We also receive any information you choose to send us directly by email or WhatsApp.

The form does not ask for special categories of personal data (for example health information, religious beliefs, political opinions, or ethnic origin). Please do not include such information, or identity or financial documents, in the form or your message. If documents are needed later for a specific service, we will tell you what is required and how to share it.

• To review your profile and assess possible study options in Italy
• To respond to your enquiry and communicate with you about it
• To provide education consultancy and support that you request
• To prepare or discuss relevant services when you ask us to

We do not use your information for newsletters, promotional marketing or advertising, and we do not sell it.

We may contact you using the details you provide, by email and/or WhatsApp, only in relation to your enquiry and the services you request.

• Steps at your request before a possible agreement (Art. 6(1)(b) GDPR): reviewing your profile, answering your enquiry and discussing services you ask about. This is the main legal basis. The checkbox on the form confirms you have read this policy. It is not a request for marketing consent.
• Performance of an agreement (Art. 6(1)(b) GDPR): where you decide to use EduItalia's services.
• Legal obligations (Art. 6(1)(c) GDPR): where we must keep or disclose information to comply with the law.
• Legitimate interests (Art. 6(1)(f) GDPR): limited to keeping records needed to protect our rights or handle a dispute, and keeping the website secure.

We do not currently rely on consent for any processing. If that changes, we will ask for it separately and you will be able to withdraw it at any time.

We keep your information only for as long as reasonably necessary for the purpose it was collected for. That includes answering your enquiry and providing any services you request. It also includes meeting legal obligations, handling disputes, or other legitimate purposes where applicable. After that, it is deleted or anonymised. You can ask us to delete your enquiry at any time (see section 10).

Your information is accessed only by EduItalia. We also use the following service providers, which are needed to run the website and our communications:

• Lovable (website hosting and the database where form submissions are stored). Lovable runs on infrastructure from its own sub-processors, including Supabase (database) and Cloudflare (hosting and network delivery).
• Google Fonts (Google). Typefaces on the website are loaded from Google's servers, which receive your IP address and browser information when a page loads.
• Google Gmail. Our mailbox info@eduitalia.eu uses Gmail, so emails you exchange with us are processed by Google.
• WhatsApp (Meta). Used only if you choose to message us on WhatsApp, or we reply to you there.

Submissions are not automatically forwarded to any other service. We may share information with universities, scholarship providers, landlords/agencies or authorities only when you ask us to as part of a service. We may also share it when the law requires it.

Some of these providers (Google, Meta, Cloudflare and Lovable's infrastructure providers) may process data outside the European Economic Area, including in the United States. Where this happens, transfers rely on the safeguards each provider offers, such as the EU-U.S. Data Privacy Framework where the provider is certified, and/or the European Commission's Standard Contractual Clauses. You can contact us for more information.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected (rectification);
• have your data deleted (erasure);
• restrict how we use your data;
• object to processing based on legitimate interests;
• receive your data in a portable format (data portability);
• withdraw consent at any time, where consent is the legal basis, without affecting earlier processing;
• lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or the authority in your EU country of residence.

To use any of these rights, email info@eduitalia.eu. We may ask you to confirm your identity.

Form submissions are sent over an encrypted connection (HTTPS) and stored in a database that only EduItalia can access after signing in. No online system is completely secure, but we take reasonable steps to protect your information.

For information about technologies stored on your device, see the Cookie Policy. We may update this policy, and the "Last updated" date at the top will always show the current version.