1. Data Controller
This website is operated by:
Giulia Goldoni
Email: goldoni.giulia4@gmail.com
Business address: Modena, Italy
If you have any questions about this Privacy Policy or the processing of your personal data, you can contact the Data Controller at the email address above.
2. Personal Data Collected
Through this website, the Data Controller may collect and process the following personal data provided directly by users:
- name
- email address
- current language level
- learning goals
- previous learning experience
- information about learning methods, difficulties, and preferences
- time availability
- support needs and any other information voluntarily submitted through the application form
The website may also process limited technical data necessary for its functioning, including data collected through cookies or similar technologies, as described in the Cookie Policy.
3. Purposes of Processing
Personal data may be processed for the following purposes:
- to review and assess your request submitted through the website
- to understand your needs, goals, and learning profile
- to determine whether the services offered are suitable for your situation
- to contact you in relation to your request
- to provide information, proposals, or next steps related to potential collaboration
- to manage and deliver services if a professional relationship is established
- to comply with legal, tax, or administrative obligations where applicable
4. Legal Basis for Processing
Your personal data are processed on the following legal bases:
- to take steps at your request prior to entering into a contract, where you submit an application or contact request in order to evaluate a possible collaboration
- to comply with legal obligations, where processing is necessary for accounting, tax, or other legal requirements
- your consent, only where this is specifically requested for optional purposes
Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Nature of the Provision of Data
Providing the data requested in the application or contact form is voluntary. However, fields marked as required are necessary for the Data Controller to assess your request and respond appropriately. If such data are not provided, it may not be possible to review your application or contact you.
6. Methods of Processing
Personal data are processed using electronic and digital tools, in accordance with the principles of lawfulness, fairness, transparency, data minimisation, and confidentiality.
The Data Controller adopts appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction.
7. Tools and Service Providers
The Data Controller uses the following tools and services for the management and processing of personal data:
- WordPress, for website and form management
- Email communication systems, for receiving and managing user requests and communications
- Google services (including email, cloud storage, and document management), for storing and organizing information related to user requests and service delivery
- Stripe, as an independent payment service provider, for handling payments and related transaction data
Personal data may also be stored on secure local devices owned and used by the Data Controller (e.g. personal computer), with appropriate technical and organisational measures in place to prevent unauthorised access, disclosure, or loss.
These service providers may process personal data on behalf of the Data Controller where necessary for the purposes described in this Privacy Policy and in accordance with applicable data protection laws.
8. Recipients and Categories of Recipients
Personal data may be processed by service providers acting on behalf of the Data Controller, strictly for the purposes described above. These may include providers of:
- website hosting and website management services
- email and cloud storage services
- document management and productivity tools
- payment processing services
- technical support or administrative tools necessary for the operation of the business
Where relevant, such providers act as data processors under applicable data protection law.
9. International Data Transfers
Some service providers used by the Data Controller may process personal data outside the European Economic Area.
Where personal data are transferred outside the EEA, such transfers are carried out in accordance with applicable data protection law and, where required, on the basis of appropriate safeguards, including the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism.
You may request further information on these safeguards by contacting the Data Controller.
10. Data Retention
Personal data are retained only for as long as necessary for the purposes for which they were collected.
In particular:
- data submitted through the application or contact form, where no client relationship follows, may be retained for up to 12 months from the last relevant interaction
- data relating to clients may be retained for the duration of the professional relationship and thereafter for the period required by applicable legal, tax, and accounting obligations
- data processed on the basis of consent for optional purposes are retained until consent is withdrawn or until they are no longer necessary for the relevant purpose
11. Data Subject Rights
Under the GDPR, you have the right to:
- obtain confirmation as to whether your personal data are being processed
- access your personal data
- request rectification of inaccurate or incomplete data
- request erasure of your data, where applicable
- request restriction of processing, where applicable
- object to processing, where applicable
- receive your data in a structured, commonly used, and machine-readable format, where applicable
- withdraw your consent at any time, where processing is based on consent
- lodge a complaint with the competent supervisory authority
12. Right to Lodge a Complaint
If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the Italian supervisory authority:
Garante per la protezione dei dati personali
You may also contact the supervisory authority of the EU Member State in which you reside or work, where applicable.
13. Automated Decision-Making
No solely automated decision-making, including profiling producing legal effects or similarly significant effects, is carried out through this website.
14. Updates to this Privacy Policy
This Privacy Policy may be updated from time to time in order to reflect legal, technical, or organisational changes. The updated version will be published on this website with the relevant revision date.
Last updated: 1/04/2026