Privacy Policy

This notice describes how personal data of users browsing this website is processed, pursuant to Regulation (EU) 2016/679 ("GDPR") and Italian data protection law.

1. Data Controller

The Data Controller is FastSchool S.R.L., in the person of Davide Stigliani.
VAT: 02173860764
Address: Tolve (PZ), Italy
Email: rdstigliani@gmail.com

2. Types of data collected

The personal data collected through this site are:

• Data voluntarily provided by the user via the contact form and call booking system: first name, last name, email address, phone number, company, request subject, message content, and date/time of the call.
• Navigation data collected automatically by IT systems (e.g. IP addresses, system logs) for proper site operation.

3. Purposes and legal basis

Data is processed for the following purposes:

• to respond to contact requests and manage consultation bookings (legal basis: art. 6.1.b GDPR — performance of pre-contractual measures);
• to comply with legal obligations (legal basis: art. 6.1.c GDPR);
• to ensure the security and proper functioning of the site (legal basis: art. 6.1.f GDPR — legitimate interest).

4. Processing methods

Google Ads measurement uses technical browsing data, advertising identifiers and completed requests or bookings to measure and improve ads. In regions requiring consent it relies on consent (GDPR art. 6.1.a), withdrawable from the Cookie Policy. Contact services remain available without it. We do not send names, email addresses or phone numbers to Google for matching and do not enable advertising personalization.

Data is processed using electronic tools by authorised personnel, applying technical and organisational measures suitable to ensure the security, integrity and confidentiality of the data and to prevent unauthorised access or unlawful processing.

5. Retention period

Contact and booking data is kept for as long as strictly necessary to fulfil the request and, thereafter, for a maximum of 24 months, unless longer retention is required by law.

6. Data recipients

Data may be shared with technical service providers (hosting, database, email delivery) acting as Data Processors appointed under art. 28 GDPR. In particular the site relies on cloud infrastructure managed by Supabase Inc. (via Lovable Cloud) for storing data collected through the forms.

7. Non-EU transfers

Google receives permitted measurement data. Local attribution lasts up to 90 days; when linked to a request it follows that request's retention. Choices, dates and notice version remain in the browser with evidence of any earlier acceptance. Preferences and details are in the Cookie Policy; see Google's privacy information.

Some providers may be based or have servers outside the European Union. In such cases, transfers occur under appropriate safeguards provided by art. 44 et seq. GDPR (e.g. Standard Contractual Clauses approved by the EU Commission).

8. Data subject rights

The user can exercise at any time the rights provided by art. 15-22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent. To exercise these rights write to rdstigliani@gmail.com.

The user also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

9. Changes to this notice

This notice may be updated at any time. The date of the latest update is shown at the top of the document.