Who the controller is
Valerio Nicolai, Via Ruggero Fiore 38, 00136 Roma , info@valerionicolai.com .
What data, why and for how long
- Contact form. Name, email address, company, message and, where supplied, sector, tools and deadline. I use these to reply and, on request, prepare a proposal. The legal basis is pre-contractual steps you request (Article 6(1)(b) GDPR) or a legitimate interest in responding to business enquiries (Article 6(1)(f) GDPR). Enquiries that do not lead to an engagement are automatically deleted from the website database after 24 months. Automated notifications contain only the enquiry reference and a link to the private admin area, without the message or the sender’s contact details.
- Course account. Name, email address, a hashed password and lesson progress. These let you take the course and record its completion. The legal basis is performance of the service you request (Article 6(1)(b) GDPR). I retain them while your account exists; you can request deletion at any time.
- Technical data. The server logs IP addresses, dates and requested pages for security and troubleshooting. The legal basis is a legitimate interest in website security (Article 6(1)(f) GDPR). I do not use these data for advertising or profiling.
Technical website logs rotate daily, with 14 archives retained. Production database backups are checked daily: copies older than 30 days are deleted.
Who processes data on my behalf
- Website hosting: Hetzner Online GmbH
- Email inbox provider: Aruba
- Automated email delivery: Brevo
- Lesson videos: Wistia, Inc. (United States), on pages restricted to registered students. The player is configured to disable viewing-session tracking. Wistia privacy notice
For transfers to the United States, Wistia states that it participates in the EU-U.S. Data Privacy Framework and provides for standard contractual clauses as an alternative mechanism in its data processing agreement. Wistia data processing agreement
I do not sell your data or use it to train AI models. The listed providers process it to deliver the services the website needs. I do not make automated decisions about individuals.
Your rights
You can request access, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interest, by writing to the controller's address. If you believe the processing infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante). garanteprivacy.it