Privacy policy

The data controller is Autoscuola Ugaglia di Ugaglia SNC di Carmela Savino & C., with its office at Via Nizza 346, 10127 Torino (TO), VAT number 12377330019 (hereinafter “Autoscuola Ugaglia” or “we”).

You can contact the controller with any question about the processing of your data by writing to autoscuolaugaglia@gmail.com, calling 011 6647484 or writing by post to our office address. No data protection officer has been appointed, as the conditions of Article 37 of the GDPR do not apply.

Browsing data

In the course of normal operation, the systems that run the website collect some data whose transmission is implicit in the use of the internet: IP address, browser type and operating system, the page requested, the date and time of the request and the outcome of the response. This data is used only to run the website, monitor its security and detect any faults. It is not linked to identified individuals, unless this is necessary to establish liability in the event of computer crime.

Data you send us through the contact form

By filling in the form on the Contact page, you give us your full name, phone number, email address (optional), the course or service you are interested in and, if you wish, a message. The form contains an invisible anti-spam field that collects no user data.

Data you give us by phone, email or WhatsApp

If you call us, write to autoscuolaugaglia@gmail.com or contact us via WhatsApp, we process the data you choose to give us, usually your name, contact details and the content of your request. WhatsApp is a service of WhatsApp Ireland Ltd (Meta group): messages pass through its systems under its own privacy policy, which we invite you to read before using it.

Students’ data in the student area

For enrolled students, the office creates restricted access to the website’s student area. It processes your full name, username and password (stored only in encrypted form), the licence category you are working towards, the number of driving lessons completed and planned, the dates of the theory and practical exams, any notes from the office on how the course is going, and the date of your last login.

Data collected at our office for enrolment and paperwork

To enrol you on a course, renew your licence or start any other procedure, we collect at our office the data required by law: personal and residence details, tax code, identity document, passport-size photographs, licence details and, where needed, the medical certificate of physical and mental fitness to drive issued by the doctor who sees patients at our office. The health data in the certificate is processed exclusively to meet the requirements of the Highway Code on fitness to drive, on the basis of your explicit consent and of the laws that require it (Article 9(2)(a) and (g) of the GDPR), and is never disclosed to anyone other than the competent authorities.

We process your data for the following purposes and on the following legal bases:

• Answering requests for information and quotes received through the website, by phone, email or WhatsApp. Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b)).
• Managing course enrolment and paperwork: theory classes and driving lessons, exam bookings with the Motorizzazione Civile office in Turin, renewals, duplicates, foreign licence conversions and other procedures. Legal basis: performance of the contract (point b) and compliance with legal obligations (point c), in particular the Highway Code and its implementing regulations.
• Running the student area reserved for students, showing course progress and study materials. Legal basis: performance of the contract (point b).
• Meeting the accounting, tax and record-keeping obligations that apply to driving schools. Legal basis: legal obligation (point c).
• Keeping the website and systems secure, preventing abuse and fraud, and establishing, exercising or defending legal claims. Legal basis: the controller’s legitimate interest (point f), which does not override your fundamental rights and freedoms.
• Showing the interactive Google Maps map on the Hours and location page. Legal basis: consent given through the cookie banner (point a), which you can withdraw at any time from the cookie policy.

We do not carry out profiling, we do not take decisions based solely on automated processing, and we do not use your data to send you unsolicited marketing. If in future we wish to tell you about new courses or promotions, we will first ask for your specific, separate consent.

Providing the data requested in the contact form is optional, but without a name and phone number we cannot reply to you. Providing the data needed for enrolment and paperwork, on the other hand, is required by law or by contract: without it we cannot enrol you on the course, book your exam or complete the requested procedure.

Data is processed using IT tools and, for paperwork, also on paper, by authorised and trained staff. We adopt technical and organisational measures appropriate to the risk, including:

• the website is served exclusively over an encrypted connection (HTTPS);
• access to the student area uses an httpOnly session cookie, which scripts cannot read and which is used only to recognise who has logged in;
• passwords are stored only in encrypted (hashed) form and are not visible even to the office staff;
• paper records are kept in rooms with controlled access;
• access to systems is limited to the staff who genuinely need it.

We keep data only for as long as necessary for the purposes for which it was collected, and in any case:

• Browsing data and security logs: up to 12 months, unless needed to investigate crimes.
• Information requests that do not lead to enrolment: up to 12 months from the last contact, after which they are deleted.
• Student data and student area login details: for the duration of the course and up to 24 months after it ends or after the last activity, so that certificates can be issued and any exam retakes managed; the account is then deactivated and deleted.
• Paperwork records and mandatory registers: for the period required by the rules on driving schools and by the Highway Code.
• Accounting and tax documents: 10 years, as required by Article 2220 of the Italian Civil Code.

When these periods expire, the data is deleted or anonymised.

Your data is not made public. It may be shared, solely for the purposes stated, with:

• authorised internal staff: office staff, driving instructors and theory teachers;
• the doctor who carries out the medical checks for licence renewals and first licences at our office, who acts as an independent controller;
• the Motorizzazione Civile office in Turin, the Ministry of Infrastructure and Transport and the other public authorities responsible for exams, renewals, duplicates and conversions;
• the suppliers who assist us and act as processors under Article 28 of the GDPR: the hosting provider of the website and the student area, our tax and accounting adviser, and the provider of the official quiz platform for students who choose to use it;
• judicial or police authorities, where required by law.

Data is stored on servers located in the European Union. Some third-party services built into the website (Google Maps and Google Fonts) are provided by Google Ireland Ltd and may involve the transfer of technical data, such as your IP address, to the United States. Such transfers take place on the basis of the European Commission’s adequacy decision on the EU-US Data Privacy Framework and of the standard contractual clauses adopted by Google. The map is loaded only after you give your consent.

Some courses, such as the A1 licence, are also open to under-18s, from the age of 16. A minor is always enrolled at our office by the person exercising parental responsibility, who receives this policy and gives any consent that may be needed. The website’s contact form and the student area are not intended for children under 14: if you believe a minor has sent us data without authorisation, write to us and we will delete it.

At any time, under Articles 15-22 of the GDPR, you have the right to:

• obtain confirmation of whether your data is being processed, and access your data and a copy of it;
• request the correction of inaccurate data or the completion of incomplete data;
• request the erasure of your data when there are no longer grounds for keeping it;
• request the restriction of processing in the cases provided for by Article 18;
• receive the data you have provided to us in a structured, commonly used format and transmit it to another controller (portability);
• object to processing based on legitimate interest, on grounds relating to your particular situation;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, write to autoscuolaugaglia@gmail.com stating your full name and contact details, or speak to the office at Via Nizza 346, 10127 Torino (TO) directly. We reply within one month of receiving your request; this period may be extended by two months for particularly complex requests, in which case we will let you know. Exercising your rights is free of charge, except for manifestly unfounded or excessive requests.

If you believe the processing of your data breaches the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it, or apply to the courts. We would nevertheless encourage you to contact us first: most issues can be resolved with a phone call or an email.

The website uses only technical cookies and storage; the Google Maps map loads only after you give your consent. You will find the full list, with durations and purposes, and the tools to change your choice in the cookie policy.

We may update this policy to reflect new regulations or changes to the services we offer. The version in force is always the one published on this page, with the date of the last update shown at the top. If there are substantial changes that affect enrolled students, we will also inform them through the student area or by email.

For opening hours and directions, see the Hours and location page.