Skip to content

Privacy Policy

Privacy Information Notice

What Does This Information Notice Apply To?

This Information Notice applies to the personal data of students (“Student”, “you”, “your”) of Rome Business School S.r.l., with registered offices at Via G. Montanelli, 5, 00195 Rome, Italy, registered with the Companies Register of Rome (VAT No. 12303901008), acting as the Data Controller (“RBS”, “we”, “us”, “our”). You can contact RBS at: romebusinessschool@legalmail.it

Which Categories of Personal Data Do We Collect?

We may collect the following categories of personal data:
  1. Identifying information (name, surname, date and place of birth, residential address, ID/passport number, etc.).
  2. Contact details (mailing address, email address, phone number).
  3. Educational and professional information (qualifications, profession).
  4. Payment information (IBAN, bank account number).
  5. Income information.
  6. Navigation data (IP address, domain name, request details, browser/device information, operating system, and technical information relating to website usage).
  7. Any other information voluntarily provided by the student.
Providing personal data is optional, but it may be necessary for us to provide our services or respond to your requests. Failure to provide certain information may prevent us from fulfilling these purposes.

How Do We Collect Your Personal Data?

We collect personal data that you voluntarily provide when:
  • Applying for a Master’s or Bachelor’s programme.
  • Completing the admission process.
  • Participating in academic activities.
  • Using career services or entrepreneurship programmes.
  • Attending bootcamps, webinars, open days, or other RBS events.
  • Contacting us through our website, email, telephone, or paper forms.

Why Do We Process Your Personal Data?

We process your personal data for the following purposes:
  1. Managing your relationship with RBS throughout your academic journey.
  2. Responding to your requests for information.
  3. Sending marketing communications about RBS products, services, and events (with your consent).
  4. Sharing your data with Grupo Planeta companies for marketing purposes (with your consent).
  5. Complying with legal and regulatory obligations.
  6. Protecting or defending legal rights.
  7. Using photographs, video, or audio recordings from company events (with your consent).

Legal Basis for Processing

  • Purposes 1 & 2: Necessary for the performance of a contract (Article 6(1)(b) GDPR).
  • Purposes 3, 4 & 7: Based on your consent.
  • Purpose 5: Necessary for compliance with legal obligations (Article 6(1)(c) GDPR).
  • Purpose 6: Based on RBS’s legitimate interests (Article 6(1)(f) GDPR).
The list of Grupo Planeta companies is available at: www.planeta.es These companies operate in sectors including publishing, education, culture, leisure, insurance, textiles, retail, jewellery, telecommunications, banking, finance, travel, technology, and legal services.

Image and Video Consent

Where applicable, your consent also authorizes RBS to use photographs, video, and audio recordings in accordance with the Italian Civil Code and Italian Copyright Law. These materials may be reproduced, edited, published, distributed, and communicated to the public without territorial or time limitations and without financial compensation. If you do not wish your image or voice to appear in recordings during events, please notify the event photographer or videographer and refrain from participating in the recording.

How Long Will We Keep Your Data?

  • Student relationship data: During your relationship with RBS and for 10 years after it ends.
  • Information requests: Until your request has been completed.
  • Marketing data: Up to 2 years.
  • Images and videos: Until consent is withdrawn.
  • Other data: As long as necessary to fulfil legal or operational requirements.

Who May Receive Your Personal Data?

Your personal data may be shared with:
  • Companies within Grupo Planeta.
  • Employees and authorised personnel.
  • Service providers acting as data processors.
  • Parties where disclosure is required by law or contract.
If recipients are located outside the European Economic Area (EEA), transfers will be protected using the Standard Contractual Clauses under Article 46 of the GDPR where applicable. For additional information about these safeguards, contact: info@romebusinessschool.ng

Your Rights

Under Articles 7(3) and 15–22 of the GDPR, you have the right to:
  1. Be informed about how your personal data is processed.
  2. Access your personal data.
  3. Correct inaccurate or incomplete information.
  4. Request deletion of your personal data where applicable.
  5. Request restriction of processing.
  6. Object to processing based on legitimate interests.
  7. Receive your personal data in a portable format and request its transfer where technically feasible.
  8. Withdraw consent at any time where processing is based on consent.
To exercise your rights, email: info@romebusinessschool.ng You also have the right to lodge a complaint with the Italian Data Protection Authority.

Google Advertising and Measurement Services

If you consent through our cookie banner or consent management platform, Google may process certain personal data for purposes such as advertising personalization, conversion measurement, and performance analytics. This processing may involve international data transfers in accordance with applicable data protection laws. For more information, visit: Google Business Data Responsibility