GDPR Arts. 13–14
Privacy notice
How your personal data is handled when you use and buy courses on Scuola Video.
MUNDIDA di Flerida Silvana Novillo, sole Controller.
Account, purchases, course progress, support.
Access, rectification, erasure, portability and more.
For Scuola Video, MUNDIDA di Flerida Silvana Novillo is the sole Data Controller. Vendors (payments, video, email, AI support) act as appointed Processors or as independent controllers for their own part (e.g. the payment networks).
01 Controller & contacts
MUNDIDA di Flerida Silvana Novillo, [registered address], Torbole Casaglia (BS). Privacy contact: [email]. PEC: [pec]. A DPO is not currently appointed unless otherwise assessed [to confirm].
02 Categories of data
Identity and contact data, credentials, purchase and billing data, course playback and progress, support-assistant interactions, technical logs and cookies. Full card data is handled directly by the payment networks; we do not store it.
03 Purposes & legal bases
Each processing rests on a specific legal basis.
| Purpose | Legal basis |
|---|---|
| Account creation & delivering purchased courses | Contract |
| Payments, invoicing & tax duties | Contract / legal obligation |
| Customer support (incl. AI assistant) | Contract / legitimate interest |
| Security & fraud prevention | Legitimate interest |
| Newsletter, marketing & non-essential cookies | Consent |
| Aggregate site-visit statistics, without cookies and without an IP address | Legitimate interest (GDPR art. 6(1)(f)) |
We measure site visits in aggregate, without cookies and without storing the IP address. The data is not linked to your account and is not shared with third parties. Retention: 13 months in pseudonymous form, with a daily key that is destroyed, then aggregate totals only. The country shown is the country of connection, not nationality. [Text awaiting lawyer review]
04 Recipients & processors
Data is accessible to authorised staff and to vendors appointed as processors (sub-processors):
Bunny Stream (video streaming) · Stripe / PayPal / Klarna (payments) · Brevo (email) · Anthropic (AI assistant) · Hostinger (hosting)
05 Transfers outside the EU
Some vendors may process data outside the EEA (e.g. USA) under Standard Contractual Clauses and supplementary measures [confirm per vendor].
06 Retention period
Account data is kept for the life of the account and limitation periods; purchase and invoice data for [10 years] under tax law; progress data while the account is active; consent records for the proof period. [Periods to be defined]
07 Your rights
You may exercise the following rights over your personal data at any time.
AccessRectificationErasurePortabilityRestrictionObjection
08 Minors
The service is not aimed at children under [14] (the digital-consent age in Italy). For minors, consent of the holder of parental responsibility is required [confirm based on audience].
09 Automated decisions
We do not take decisions based solely on automated processing that produce legal or similarly significant effects. The AI assistant supports but does not decide alone on complaints or refunds.
10 Complaints & changes
You have the right to lodge a complaint with the Italian DPA (Garante, garanteprivacy.it). For material changes we update this notice and, where needed, ask for consent again.