Read the Cookie PolicyPRIVACY POLICY — CIAO! BY ISU
Website: https://ciaoisu.it — Update: October 20, 2026
1. DATA CONTROLLER AND SCOPE
The data controller is Unimedia Srl, VAT no. 05292761003, Via Angelo Poliziano 51, 00184 Rome, Italy. For information and to exercise rights: info@isucentrostudi.it.
This policy concerns the current preview of ciao! by ISU. The orientation and "My ciao" are demo: they do not create an account or a registration. Payments, newsletters, or contact collection forms are not active. The notices will be updated before introducing services that involve new processing activities.
2. NAVIGATION AND SECURITY
The distribution of the website and the iChef component involves technical requests to the respective servers, which may include IP address, date and time, requested resource, browser information, and data necessary for security. The purposes are to make the pages available, resolve errors, and prevent abuses. The legal basis is the controller's legitimate interest in the availability and security of the service (art. 6.1.f GDPR), in compliance with the rights of visitors.
Google Analytics, Google Ads, Meta Pixel, or other advertising measurement tools are not installed. The website does not perform advertising profiling.
3. PREFERENCES AND DEVICE ACTIVITY
Website language, objective, source language, self-assessment, and completion of the demo exercise are stored exclusively in the browser via localStorage. They are not sent by the application code to the controller, to iChef, or to an AI tutor, and they are not synchronized between devices. They serve to maintain the language and path requested by the user and to resume the demo (art. 6.1.b GDPR, for the provision of requested functionalities). Saving does not attest to a certified level.
The keys are ciaoisu:site-language, ciaoisu:concept:v1, and ciaoisu:lesson:v1. They do not have an automatic expiration: they remain until deleted by the user or the browser. The "Preview Privacy" command allows you to delete preferences; deleting site data in browser settings also eliminates other local storage. If local memory is not available, functionalities that do not require saving remain usable.
The service worker saves copies of static resources to allow offline consultation. The cache is replaced by website updates or deleted via browser settings; it does not contain accounts or conversations sent to a remote service.
4. AUDIO AND DEMONSTRATIVE DIALOGUE
The dialogue uses pre-prepared responses and predefined choices; it does not send conversations to an artificial intelligence model. The microphone is not accessed. Listening starts only by pressing the audio commands and uses the text-to-speech of the browser or the operating system. Depending on the available voice, the device provider may remotely process the example text and technical data of the request, according to its own settings and policies. The transcript is always available; it is not necessary to turn on the audio.
5. ICHEF AND TECHNICAL PROVIDERS
iChef, managed by VISIBILITY S.L.U., provides the "Cookies and Privacy" panel and the published notices. The component retrieves the website configuration without attaching educational preferences. With the current inventory of technical services only, it does not record fictitious acceptance or refusal choices and does not save a local iChef consent.
The website and iChef are provided via OpenAI Sites on Cloudflare infrastructure. Technical providers and authorized persons access the data necessary for hosting, maintenance, and security activities, according to applicable roles and agreements. Local learning preferences are not sent to such providers by the website code. Data is not sold.
Technical requests follow the retention periods and security policies of the services used; the controller can provide information on providers, applicable times, and guarantees for any transfers outside the European Economic Area. Any transfers must comply with chapter V of GDPR. Exclusive processing within the European Union is not guaranteed.
6. RIGHTS
In the cases provided for by the GDPR, you can request access, rectification, deletion, limitation, and portability, as well as object to processing based on legitimate interest. Write to info@isucentrostudi.it indicating the website and the elements necessary to identify the request. For preferences stored only on your device, also use the deletion commands or browser settings.
You can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali - https://www.garanteprivacy.it) or the competent authority. No solely automated decisions with legal or similarly significant effects are adopted.