paolaitalian.com
Privacy policy
This website is a simple one-page presentation of my Italian lessons. It collects as little personal data as possible. This page explains what is processed, by whom, and what your rights are under the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and Italian law.
Who is responsible for your data
The data controller is Paola Altobello, online Italian language tutor, Verona, Italy, VAT No. (Partita IVA) 05055240237. You can contact me by email at paola.altobello.it@gmail.com, or through my Preply profile.
What this site does not do
- It has no contact forms, accounts, newsletters or comment features, so you cannot enter personal data on it.
- It does not use analytics, advertising pixels, tracking scripts or marketing cookies.
- It sets no cookies of its own. Because only strictly necessary technical processing takes place, no cookie banner is shown, in line with the guidance of the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Hosting and server logs
The site is hosted on Cloudflare's global network (Cloudflare, Inc., USA, with EU operations through Cloudflare Germany GmbH and Cloudflare Portugal). When you load a page, Cloudflare's servers automatically receive technical data needed to deliver it: your IP address, the date and time, the page requested, your browser type and the referring page. Cloudflare keeps these logs for a limited period for security, abuse prevention and performance, under its own privacy policy. The legal basis is my legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR). I do not have access to individual visitor logs.
Fonts
The page's typefaces are loaded from Google Fonts (Google Ireland Ltd). When the page loads, your browser requests the font files from Google's servers, which receive your IP address and browser details. Google states that it does not use these requests to set cookies or build profiles. See Google Fonts privacy information. Legal basis: legitimate interest in presenting the site consistently (Art. 6(1)(f) GDPR).
Embedded video
My introduction video is hosted on YouTube (Google Ireland Ltd). Nothing is loaded from YouTube until you press the play button. When you do, the video player is loaded from YouTube's privacy-enhanced domain (youtube-nocookie.com), and YouTube receives your IP address and may set cookies or store data in your browser for playback purposes. By pressing play you consent to this (Art. 6(1)(a) GDPR). Details are in Google's privacy policy.
Links to other websites
The site links to my profiles on Preply, Instagram, Facebook and LinkedIn. These are ordinary links, not embedded widgets, so those services receive no data from you until you click through. Once you leave this site, each service's own privacy policy applies. In particular, lessons are booked and paid for on Preply, which processes your account, payment and lesson data as an independent controller under the Preply privacy policy.
Transfers outside the EU
Cloudflare and Google are US companies. Transfers to them are covered by the EU-US Data Privacy Framework and the European Commission's standard contractual clauses, as described in their respective privacy policies.
Your rights
Under Articles 15 to 22 GDPR you have the right to access the personal data held about you, to have it corrected or erased, to restrict or object to its processing, and to data portability where applicable. Since this site holds no personal data about you itself, requests about hosting logs, fonts or video playback are best directed to Cloudflare or Google; I will help where I can. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority in your own EU country.
Changes
If the site gains new features that process personal data, such as a contact form or analytics, this policy will be updated first and the date at the top changed.