Information notice for the processing of personal data of this website pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
In compliance with the transparency obligations set out in Articles 12, 13, and 14 of Regulation (EU) 2016/679 (GDPR), this is to inform you that Ms. Alessia Scano (hereinafter: the Professional), with registered office in Milan, VAT number 13923860962; e-mail: alessia.scano.coach@gmail.com; PEC: alessia_scano@pec.it, is the data controller for the personal data processing carried out through this website, hereinafter referred to as the “Site” concerning the following categories of data subjects:
- Visitors (A “Visitor” is the person who engages in browsing activities and interacts with the functions of the website);
- Social media users who interact with the profiles and social media pages indicated in the footer of the Site;
All of them, hereinafter collectively referred to as ‘Data Subjects’.
The updated contact details of the Professional are available in the footer of the Site, through which the data subject can obtain clarifications regarding the activities carried out on personal data, as well as exercise their rights.
1. Collected Personal Data
The personal data collected by the Professional consists of:
A) Data generated by visitors’ browsing activity: this data originates from the use of IT systems and software procedures necessary for the Site operation. Such data—defined as personal data by law—is not collected with the intent to identify a specific visitor; however, by nature, it could potentially allow identification through processing and combination with third-party data. This data is used, in an anonymous or anonymized form, exclusively for statistical purposes regarding Site usage and to verify its proper functioning.
B) Data provided by visitors for interaction with the Site specifically, this includes name, surname, and e-mail contact.
C) Data generated by users through interactions with social media profiles and pages (e.g., comments, direct message, etc.).
2. Data processing activities carried out: legal basis, purpose, and duration
For the data processing activities referred to in point A, please refer to the Cookie Policy available in the footer of the Site.
The data processing activities referred to in point B consist of:
- Responding to information requests | Legal basis: the execution of pre-contractual measures adopted at data subject request Art. 6.1(b) GDPR) | Duration: 12 months;
- Providing quotes | Legal basis: the execution of pre-contractual measures adopted at data subject request. Art. 6.1(b) GDPR) | Duration: 12 months;
- Responding to visitors’ comments on the blog | Legal basis: legitimate interest (Art. 6.1(f) GDPR) | Duration: until cancellation request;
- Follow-up after providing a quote/Customer Care | Legal basis: the execution of pre-contractual measures adopted at data subject request (Art. 6.1(b) GDPR) | Duration: 12 months;
The data processing activities referred to in point C consist of:
- Interactions through social network platforms | Legal basis: the execution of the contract (Art. 6.1(f) GDPR) | Duration: until the end of the contractual relationship (platform registration);
Please refer to the specific privacy policy of each social platform ( LinkedIn).
3. Obligation to provide data
For activities based on the legal basis of the execution of pre-contractual or contractual measures, or otherwise for the fulfillment of legal obligations, providing the data is mandatory. In case of failure to provide or of incomplete or inaccurate data, it will not be possible to establish or continue the relationship with the Professional.
4. Recipients of data and communication
Personal data subject to processing may be shared with internal and external parties that the Data Controller uses to carry out its activities, such as:
- Service providers;
- Consultants (e.g., accountant, occupational physician, labor consultant, etc.);
- Technical support;
- ISPs;
- Possible parties involved in the performance of the contract;
The parties listed above have been selected by the Data Controller from those who provide adequate guarantees and security measures to ensure compliance with data protection regulations.
5. Transfer of Data Abroad
The personal data provided to the Professional will not be transferred outside the European Union to non-European Union countries, or international Organizations which do not ensure an adequate level of protection, as recognized under Article 45 of the GDPR, based on an adequacy decision by the EU Commission.
Data subjects are informed that, for the provision of the services of this Site, through plug-ins or other IT elements released by third parties, it may be necessary to transfer personal data to non-EU countries or international Organizations, for which the Commission has not adopted an adequacy decision under Article 45 of the GDPR. In such a case, the transfer will only take place if the recipient Country or Organization provides adequate safeguards in accordance with Article 46 of the GDPR and on the condition that data subjects have enforceable rights and effective legal remedies.
In the absence of an adequacy decision by the Commission, under Article 45 of the GDPR, or adequate safeguards under Article 46 of the GDPR, including standard contractual clauses and binding corporate rules, cross-border data transfer will only occur if one of the conditions set out in Article 49 of the GDPR is met.
6. Data Subject Rights
Pursuant to Articles 15 et seq. of the GDPR, the Data Subject has the right to request from the Professional: access to their personal data, rectification or integration of inaccurate or incomplete data; the erasure of personal data that are no longer necessary, for which consent has been withdrawn, or for which there is no other legal basis for processing (so-called “Right to be Forgotten”); and the restriction of processing, in the cases provided for by Article 18 of the GDPR.
The Data Subject also has the right to request the transmission of their data, in a commonly used format that is also machine-readable, to another Data Controller (so-called “data portability”), furthermore, they have the right to object, at any time for reasons related to their particular situation, to the processing of their personal data where such processing is based on legitimate interest.
For processing based on consent or legitimate interest, the Data Subject has the right to withdraw the consent given or to exercise their right to object. It is specified that the withdrawal of consent or the exercise of the right to object does not affect the lawfulness of processing carried out prior to such withdrawal or objection.
Requests concerning the Data Subject’s rights under Articles 15 et seq. of the GDPR, will be fulfilled as soon as possible and without undue delay by the Professional in any case within one month.
The aforementioned rights may be exercised either directly, or through an authorized representative or legal professional, in accordance with the forms provided for by the GDPR.
For more information on exercisable rights: https://www.garanteprivacy.it/Regolamentoue/diritti-degli-interessati.
For any requests or further information regarding their rights, the Data Subject may contact the Professional at the following address: alessia.scano.coach@gmail.com.
7. Right to lodge a complaint
Without prejudice to any administrative or judicial remedy, the Data Subject who believes that the processing of their data infringes the GDPR, has the right to lodge a complaint with the supervisory authority (Data Protection Authority https://www.garanteprivacy.it).
8. Right to compensation and liability
Any person who suffers material or immaterial damage, caused by a violation of the GDPR has the right to seek compensation from the Professional provided that they demonstrate that the Professional failed to fulfill the prescribed obligations.
The Professional is exempt from liability if they prove that the damaging event is not attributable to them in any way.
Last updated March 2025