Privacy Policy
Privacy and Data Protection Information
Data Controller
vival.institute Srl
Via Ressel 2F, 39100 Bolzano, Italy
VAT No. IVA IT02863280216
info@vival.institute
Contact Information for the Data Protection Officer
info@vival.institute
Dear Visitor,
We are pleased to inform you about how your personal
data is processed when you visit our website. This privacy policy also explains
the rights you may exercise as a data subject.
Your personal data will be processed in accordance with Regulation (EU)
2016/679 (General Data Protection Regulation – GDPR) and applicable national
data protection legislation.
By using this website, you accept this privacy policy. If you do not agree with
it, please discontinue your use of this website.
We would also like to inform you that the links provided on our website have
been carefully selected and checked. However, as linked websites may be updated
without our knowledge and their content may change continuously, we accept no
responsibility for their content.
Purposes of Processing Personal Data
To ensure the functionality of the website and for statistical purposes, technical data that may potentially be linked to an individual is processed, such as the IP address, time of access, domain name and similar data. Furthermore, the website operator has a legitimate interest (Art. 6f GDPR) in providing a visually appealing website and a pleasant user experience. Subject to your consent (Art. 6a GDPR), user profiles may also be created for marketing purposes.
The primary purpose of data processing is to provide
our website and its content and to respond to user requests.
Personal data is also processed in order to provide various services.
Transmission of Special Categories of Personal Data
Please do not submit sensitive data (special categories of personal data pursuant to Art. 9 and Art. 10 GDPR) via the website, for example through the contact form. Sensitive data should always be transmitted using appropriately secure methods, for example by password-protected transmission or by delivering it in person.
Legal Basis for Data Processing
The principal legal bases for processing are Art. 6b GDPR (performance of pre-contractual/contractual measures), Art. 6f GDPR (website functionality), as well as your consent, where provided (Art. 6a GDPR).
Cookies
A cookie is a small text file that the website you
visit stores on your device and that is sent back to the website when you visit
it again.
There are four categories of cookies:
- Strictly necessary cookies (essential) – required for the basic functionality of the website.
- Functional cookies (essential) – used to ensure optimal website performance, for example by saving your language selection.
- Performance cookies (optional) – used to improve the user experience and process information about website usage, for example to measure loading times.
- Marketing cookies (optional) – used to collect information about user behaviour and interests for marketing purposes, for example to display personalised advertising.
Click here to view our Cookie Policy.
Provision of Data
Providing personal data is voluntary (with the exception of the processing of browsing data) and is not required by law. However, failure to provide certain data may limit your ability to use the website and the services offered.
Transfer of Data to Third Parties
Your data may be transferred to third parties where necessary, but only within the scope of our business relationship, for example to fulfil your request, process payments through third parties where applicable, or comply with legal obligations. Your data will not be transferred to countries outside the EU without your explicit consent. The same applies to profiling and automated decision-making.
Website Hosting
This website is hosted by an external service provider (“hosting provider”). For this purpose, the external hosting provider receives personal data collected through the website. The legal basis for this processing is Art. 6b GDPR – pre-contractual measures – and Art. 6f GDPR (proper operation of the tools used on our website).
SSL Encryption
This website uses SSL encryption to ensure secure data transmission, for example when submitting information through contact forms. Active SSL encryption is used to encrypt the transmission of data sent to us.
Minors
This website is not intended for use by minors. We therefore do not knowingly collect or store data relating to visitors who are minors, except where this occurs unintentionally.
Data Retention Period
The retention period is determined by statutory retention requirements and other legal obligations applicable to us, unless a specific retention period is stated in this privacy policy. Data relevant for tax purposes will be retained for 10 years.
Rights of Data Subjects
You have the right to withdraw your consent at any time.
You have the right to obtain confirmation from the data controller as to whether or not personal data concerning you is being processed and, where this is the case, you have the right of access to your personal data (Art. 15 GDPR).
You have the right to request that the data controller rectify inaccurate personal data concerning you without undue delay and, where necessary, complete incomplete personal data (Art. 16 GDPR).
You have the right to request the deletion of personal data concerning you without undue delay where one of the grounds set out in Art. 17 GDPR applies, for example where the data is no longer necessary for the purposes for which it was collected (right to erasure).
You have the right to request that the data controller restrict the processing of your personal data where one of the conditions set out in Art. 18 GDPR applies, for example where you have objected to the processing.
You have the right to receive the personal data concerning you that you have provided to a data controller in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to whom the personal data was provided, for example where the processing is based on your consent and is carried out by automated means (right to data portability, Art. 20 GDPR).
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you. The data controller will no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims (Art. 21 GDPR).
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. In Italy, the competent supervisory authority is the Garante per la protezione dei dati personali.
This privacy policy may be updated at any time. Last updated 21 August 2026.
Dear Customers and Suppliers,
We would like to inform you about how we process your personal data. This privacy notice also explains the rights you may exercise.
What Personal Data Is Processed and for What Purpose?
In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable national data protection legislation, the following personal data, among others, may be processed:
Customers:
- Company data, e.g. company information and business contact details.
- Contract data, e.g. tax code, VAT number, project information, invoicing and payment details.
- Personal data of employees/contact persons, e.g. name, contact details such as email address/telephone number and position within the company.
- Data relating to training participants, including personal data such as name, contact details such as email address/telephone number, tax code, date and place of birth, professional title, gender and language, as well as data required for the organisation and delivery of training courses, such as learning progress and support requests.
Suppliers:
- Company data, e.g. company information and business contact details.
- Contract data, e.g. tax code, VAT number, project information, invoicing and payment details and bank details.
- Personal data of employees/contact persons, e.g. name and contact details such as email address/telephone number.
The purpose of processing this data is to manage and fulfil our business relationship and related pre-contractual measures, for example preparing quotations, providing access to courses, providing technical support, issuing certificates of attendance, invoicing, etc.
Providing this data is voluntary. However, if the required data is not provided, we may be unable to provide our services.
Who Will My Personal Data Be Shared With?
Your data will not be publicly disclosed and will be treated confidentially and solely for the purpose of fulfilling pre-contractual and contractual measures. However, in order to comply with legal requirements, protect our rights, provide our services and manage our business relationship, it may be necessary to transfer personal data to third parties, such as:
- our tax advisor,
- legal representatives,
- public authorities.
In certain circumstances, external service providers, such as external IT service providers, may also have access to personal data. Where required, these service providers are appointed in writing as data processors pursuant to Art. 28 GDPR.
What Are the Legal Bases for Processing Personal Data?
The legal bases include, for example:
- Pre-contractual/contractual measures (Art. 6.1 b GDPR), e.g. responding to requests, managing the business relationship, providing technical support and activating courses.
- Compliance with legal obligations (Art. 6.1 c GDPR), e.g. transferring data to our tax advisor and complying with documentation requirements.
- Legitimate interests (Art. 6.1 f GDPR), e.g. processing data within our internal systems and sending relevant informational communications.
How Long Is This Data Retained?
The retention period for your personal data is determined by statutory obligations and the duration of our business relationship. Data relevant for tax purposes is retained for 10 years.
Is Data Transferred to Countries Outside the EU or Used for Profiling?
Your data will not be transferred to countries outside the EU. No automated decision-making processes, including profiling, are used.
What Are My Rights?
You may exercise your rights free of charge at any time, including right of access (Art. 15 GDPR), right to rectification (Art. 16 GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 GDPR), right to data portability (Art. 20 GDPR), right to object (Art. 21 GDPR).
To exercise your rights, please contact the data controller specified above. You also have the right to lodge a complaint with the Italian data protection supervisory authority, the Garante per la protezione dei dati personali.
This privacy policy may be updated at any time. Last updated 21 August 2026.