Privacy Policy

1. Data Controller

The Data Controller for personal data processing is:

2. Types of Data Collected

The personal data collected through this website may include:

• Identification data: name, surname, title
• Contact data: email address, phone number
• Fiscal data: fiscal code, VAT number, billing address (for course registrations only)
• Navigation data: IP address, browser type, pages visited (collected automatically)
• Cookie data: technical and analytics cookies (see our Cookie Policy)

3. Purposes of Processing

Your personal data is processed for the following purposes:

a) Contact form and information requests

To respond to your inquiries about courses and services.

Legal basis: consent (Art. 6(1)(a) GDPR)

b) Course registration and billing

To manage course registrations, issue invoices, and process payments.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR)

c) Email communications

To send registration confirmations, payment instructions, and course-related information.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR)

d) Analytics and website improvement

To analyze website usage and improve user experience through anonymized statistical data.

Legal basis: consent (Art. 6(1)(a) GDPR)

4. Data Retention

Personal data is retained for the following periods:

• Contact form data: up to 24 months from the last contact
• Registration and fiscal data: 10 years as required by Italian fiscal law
• Navigation data: up to 14 months
• Cookie data: as specified in the Cookie Policy

5. Data Sharing

Your personal data may be shared with:

• Service providers: hosting, email delivery, and payment processing services that act as data processors on our behalf
• Professional advisors: accountants and legal advisors for fiscal and legal obligations
• Public authorities: when required by law or legal proceedings

Personal data is not sold, rented, or otherwise disclosed to third parties for their own marketing purposes.

6. International Data Transfers

Some of our service providers may process data outside the European Economic Area (EEA). In such cases, we ensure adequate safeguards are in place, such as EU Standard Contractual Clauses or adequacy decisions by the European Commission, in compliance with Chapter V of the GDPR.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15) - obtain confirmation of processing and a copy of your data
• Right to rectification (Art. 16) - correct inaccurate or incomplete data
• Right to erasure (Art. 17) - request deletion of your data ("right to be forgotten")
• Right to restrict processing (Art. 18) - limit how your data is used
• Right to data portability (Art. 20) - receive your data in a structured, machine-readable format
• Right to object (Art. 21) - object to processing based on legitimate interest
• Right to withdraw consent (Art. 7) - withdraw consent at any time without affecting prior processing

To exercise any of these rights, please contact us at: federicoceroni@me.com

8. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali):

9. Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption in transit (HTTPS/TLS), secure server infrastructure, access controls, and regular security reviews.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.