1. Data Controller
The Data Controller responsible for the processing of personal data through this website is:
Alessandro Vigo
Corso Italia 57
10019 Strambino (TO)
Italy
VAT number: IT113191690018
Email: hello@AlessandroVigo.com
For any question regarding the processing of personal data or to exercise your rights under applicable data protection legislation, you may contact the Data Controller at the email address above.
2. Personal Data We Collect
Depending on how you use this website, we may process the following personal data:
Contact forms
When you contact us through the website, we may collect:
- first and last name;
- email address;
- telephone number;
- the content of your message.
The information submitted through the contact form is used solely to respond to your request and provide assistance.
The information submitted through the contact form is not intentionally stored in the website database by Forminator. It is transmitted to the Data Controller by email.
Account registration and appointment booking
When you create an account or book a coaching session, we may collect:
- first name;
- last name;
- country/region;
- tax identification number, where required;
- street address;
- postal code;
- town/city;
- province/state;
- telephone number;
- email address;
- booking and appointment information;
- information relating to the selected service and payment.
This information is required to manage the appointment, process the payment, issue any required accounting or tax documentation, and provide the requested service.
Payments
Payments are processed through third-party payment providers, currently Stripe and PayPal.
Payment information required to process a transaction may be transmitted to the relevant payment provider. The website does not intentionally store complete payment card details.
Stripe and PayPal process personal data according to their own privacy policies and applicable data protection requirements.
Online coaching sessions
Coaching sessions are provided online using Zoom.
When a coaching session is booked, information necessary to arrange and conduct the session may be processed by Zoom. Zoom processes personal data in accordance with its privacy and data protection documentation.
3. Purposes of Processing
Personal data may be processed for the following purposes:
- responding to contact requests;
- creating and managing user accounts;
- managing appointment bookings;
- providing coaching services;
- processing payments;
- communicating with clients regarding appointments and services;
- issuing invoices and fulfilling accounting and tax obligations;
- complying with legal obligations;
- protecting the rights and legitimate interests of the Data Controller.
4. Legal Bases for Processing
Depending on the specific processing activity, personal data may be processed on the basis of:
- the performance of a contract or the taking of steps at the request of the data subject before entering into a contract;
- compliance with legal obligations applicable to the Data Controller;
- the legitimate interests of the Data Controller, where applicable and where such interests are not overridden by the rights and freedoms of the data subject;
- consent, where consent is legally required.
Where processing is based on consent, consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
5. Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected.
Personal data relating to bookings, customer accounts and transactions may be retained for the period necessary to manage the contractual relationship and provide the services.
Personal data contained in accounting records, invoices and other documents subject to statutory retention obligations is retained for the period required by applicable Italian civil and tax law.
Where applicable, accounting and tax records may therefore be retained for the legally required period, including the statutory ten-year retention period for accounting records and related documents.
Other personal data is deleted or anonymised when it is no longer necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
6. WooCommerce and Customer Accounts
The website uses WooCommerce to manage services, bookings, orders and payments.
WooCommerce may store information associated with customer accounts and orders, including customer identification and billing information, order details and payment method information.
Customers may exercise their applicable privacy rights in relation to personal data processed through their account and orders.
Where legally permissible, personal data contained in orders may be deleted or anonymised when it is no longer required for contractual, accounting, tax or legal purposes.
7. Payment Providers
The website currently uses:
- Stripe;
- PayPal.
Payment providers may receive personal data necessary to process and authenticate payments and to prevent fraud and comply with applicable financial regulations.
Stripe and PayPal act independently in relation to certain processing activities and may process personal data in accordance with their own privacy policies and applicable legal requirements.
8. Hosting and Email
The website is hosted using services provided by Aruba.
Email communications relating to the website and its services are handled through the email services used by the Data Controller.
Personal data may therefore be processed by hosting and email service providers to the extent necessary to provide their services.
9. Zoom
Coaching sessions are conducted through Zoom.
When a coaching session is scheduled, information necessary to organise and conduct the session may be processed by Zoom.
Zoom provides information concerning its processing of personal data and its GDPR-related safeguards in its privacy documentation.
10. Cookies and Similar Technologies
This website uses cookies and similar technologies that are necessary for the operation, security and functionality of the website, including functions related to user accounts, bookings and WooCommerce.
Where non-essential cookies or other tracking technologies are used, they are managed through the website’s cookie consent mechanism.
The website does not currently use Google Analytics, Google Ads, Meta Pixel, TikTok Pixel, newsletter tracking or other advertising or behavioural profiling systems.
For detailed information about the cookies used on this website, please refer to the Cookie Policy.
11. Recipients of Personal Data
Personal data may be accessed or processed, to the extent necessary, by:
- the Data Controller;
- hosting and technical service providers;
- WooCommerce and WordPress services necessary to operate the website;
- payment providers such as Stripe and PayPal;
- booking and appointment management services;
- Zoom, for online coaching sessions;
- professional advisers or service providers where necessary;
- public authorities where required by law.
Third parties receive only the information necessary for the relevant purpose, where applicable.
12. International Transfers
Some service providers used by the website may process personal data outside the European Economic Area.
Where personal data is transferred outside the EEA, the transfer is carried out in accordance with applicable data protection legislation and appropriate safeguards where required.
13. Data Security
The Data Controller adopts appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.
No transmission or storage system can be guaranteed to be completely secure, but reasonable measures are taken to protect the information processed through the website.
14. Rights of Data Subjects
Where applicable under the GDPR and other relevant data protection legislation, you have the right to:
- obtain confirmation as to whether your personal data is being processed;
- access your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of personal data where legally applicable;
- request restriction of processing;
- object to certain processing activities;
- request data portability where applicable;
- withdraw consent where processing is based on consent;
- lodge a complaint with a competent supervisory authority.
To exercise your rights, contact:
hello@AlessandroVigo.com
15. Supervisory Authority
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent data protection supervisory authority.
For Italy, the competent authority is:
Garante per la protezione dei dati personali
The relevant information is available on the official website of the Italian Data Protection Authority.
16. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes to the website, the services provided, applicable legislation or the way personal data is processed.
The latest version will always be published on this page.