Privacy Policy

Personal Data Processing Notice

This page describes how this website is managed with regard to the processing of personal data of users who consult it. This is a notice provided in compliance with current personal data regulations for users who interact with the services of this website within the framework of EU Regulation 2016/679. This notice applies only to this website and not to other websites that users may consult through our links.

The “controller” of the processing

Following consultation of the website, data relating to identified or identifiable persons may be processed. The “controller” of their processing is IPAZIA H.E.I. LTD | VAT C104062 email: info@ipazia-hei.com

Place of data processing

Processing connected to web services is handled only by technical personnel of the Office responsible for processing, or by any personnel assigned to occasional maintenance operations. No data derived from the web service is communicated or disseminated.

Purpose of processing and legal basis for processing

Personal data provided by users who perform actions required by specific website functions, submit requests, or intend to use services offered through the website as well as receive additional specific content, are used solely for the purpose of managing actions performed by users, responding to their requests, or executing the requested service or performance, and are communicated to third parties only when necessary for this purpose. The legal basis for this processing is the need to respond to data subjects’ requests or perform activities provided for in agreements defined with data subjects in relation to any contractual, pre-contractual, or legal obligations. In case of data collection through specific forms and for additional purposes, specific information regarding the processing of data thus collected is provided.

Types of data processed

Navigation data

The computer systems and software procedures responsible for the operation of the website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified data subjects, but which by its very nature could, through processing and associations with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users connecting to the website, addresses in URI (Uniform Resource Identifier) notation of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the user’s operating system and computer environment. This data is used solely for the purpose of obtaining anonymous statistical information on website usage and to monitor its correct functioning and is deleted after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the website.

Data voluntarily provided by the user

The optional, explicit and voluntary sending of email to the addresses indicated on the website entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary information may be displayed from time to time on website pages prepared for particular services upon request.

Cookies

Cookies are text elements that are inserted into a computer’s hard disk only following authorization. Cookies have the function of streamlining web traffic analysis or signaling when a specific website is visited and allow web applications to send information to individual users. For more details on the use of cookies by the website, please refer to the appropriate Cookie Policy available on the website.

Optional nature of data provision

Apart from what is specified for navigation data, the user is free to provide personal data to request services offered by the Controller. Their failure to provide such data may result in the inability to obtain what is requested.

Methods of processing and data retention periods

Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access. Data is retained for the time strictly necessary to pursue the purposes indicated in this notice and will be deleted at the end of this period, unless the data must be retained for legal obligations or to assert a right in court.

PERSONAL DATA CRM

The presence and management of a database allows the Controller to build user profiles starting from an email address, name, or any other information that the Data Subject provides or to track their activities through statistical functionalities. This Personal Data could also be cross-referenced with publicly available information about the Data Subject (such as social network profiles) and used to build private profiles that the Controller can view and use. Some of these services might also allow the sending of scheduled messages to the Data Subject. Personal Data processed: city; surname; Usage Data; email; phone number; Tracking Tool; username; various types of Data.

ActiveCampaign (Active Campaign LLC)

ActiveCampaign, LLC (“ActiveCampaign”) is the CRM platform and collects new leads, organizes customer records, and can also be used as a communication medium for exchanging emails. Personal data collected: Email and Name. Place of Processing: USA – Privacy Policy.

CONTACT FORM

The Data Subject, by filling out the Contact Form with their Data, consents to their use to respond to information requests, or for any other purpose indicated by the form header. Personal Data collected through Contact Form: Email, Name and Surname. This website uses:

Elementor (Elementor Ltd)

Elementor provides a form creation and management service that allows this website to integrate such content within its pages. Personal Data collected: Email and Name. Various types of Data as specified by the service’s Privacy Policy. Place of Processing: ISRAEL – Privacy Policy.

TypeForm (TypeForm S.L)

TypeForm is a form creation and management service that allows this website to integrate such content within its pages. Personal Data collected: Email and Name. Various types of Data as specified by the service’s Privacy Policy. Place of Processing: Spain – Privacy Policy.

SPAM PROTECTION AND SECURITY MEASURES

This website, to make the moment when Personal Data is entered secure, has an SSL certificate and uses the HTTPS protocol. With the use of this protocol, transactions and data transmitted on websites occur with maximum security and the content of communication is not read or manipulated in any way by third parties. This website also uses tools that analyze traffic potentially to filter it from parts of traffic, messages, and content recognized as SPAM.

reCAPTCHA

This website uses reCAPTCHA which is a service subject to Google’s privacy policy and terms and conditions of use.

STATISTICS

Statistical services allow the Data Controller exclusively to monitor and analyze traffic data and serve to track the Data Subject’s behavior. This website uses the following services:

Google Analytics 4

Google Analytics is an analysis service provided by Google LLC. Google uses the Personal Data collected for the purpose of tracking and examining the use of this website, compiling reports and sharing them with other services developed by Google. Google may use Personal Data to contextualize and personalize ads in its advertising network. Google may also transfer this information to third parties where required by law or where such third parties process the aforementioned information on behalf of Google. In Google Analytics 4, IP addresses are used at the time of collection and then deleted before data is recorded in any data center or server. To learn more, you can consult Google’s official documentation. At the following link https://tools.google.com/dlpage/gaoptout?hl=it Google makes available the browser add-on for disabling Google Analytics. Personal Data collected: Cookies and Usage Data. Place of processing: USA – Ireland Privacy Policy.

Facebook conversion tracking pixel (Meta Platforms, Inc.)

Facebook conversion tracking (Facebook pixel) is a statistics service provided by Facebook. The Facebook pixel monitors conversions that can be attributed to Facebook ads. Personal Data collected: Cookies; Usage Data. Place of processing: Ireland – Privacy Policy.

TAG MANAGEMENT

The use of Tags allows the installation of code snippets (called Tags) within the HTML pages of a website. It can also be used in Android and iOS Apps. Tag Management allows managing multiple Tools simultaneously on the website with a single code snippet. The use of such services involves the passage of the Data Subject’s Data through them and, if necessary, their retention.

Google Tag manager (Google LLC or Google Ireland Limited)

Google Tag manager is a service that allows managing and monitoring all third-party Tags on the website to have information about the interest shown by Users towards the website itself and consequently about the quality of content. Personal Data collected: Cookies and Usage Data. Place of processing: USA- Ireland – Privacy Policy.

AUTOMATION TOOLS

Zapier (Zapier Inc.)

Zapier is an online automation tool offered by Zapier Inc., which allows creating automated workflows between two distinct applications (called ZAP). The ZAP consists of two parts: the “trigger”, the event that occurs within the first application and starts the automation, and the “action”, i.e., the event that completes the ZAP. Personal data collected: Cookies, Usage Data and aggregated Personal Data as specified in the Service’s Privacy Policy. Place of processing: USA – Privacy Policy.

INTERACTION WITH SOCIAL NETWORKS

These services allow interactions with social networks directly from the pages of this website. The interactions and information acquired by this website are in any case subject to the Data Subject’s privacy settings for each social network. In case a social network interaction service is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages where it is installed.

Facebook (Meta Platforms, Inc.)

Facebook buttons are interaction services with the Facebook social network, provided by Meta Platforms, Inc. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy.

Instagram (Meta Platforms, Inc.)

Instagram buttons are interaction services with the Instagram social network, provided by Meta Platforms, Inc. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy.

LinkedIn (LinkedIn Ireland Unlimited Company)

LinkedIn buttons are interaction services with the LinkedIn social network, provided by LinkedIn Corporation. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy.

Telegram (Telegram UK Holdings Ltd)

Telegram buttons are interaction services with the communication service provided by Telegram. Personal Data collected: Cookies and Usage Data. Place of processing: UK – Privacy Policy.

Youtube (Google Ireland Limited)

Youtube buttons are interaction services with the video content viewing service managed by Google. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy.

REMARKETING AND RETARGETING

These services allow this website to communicate, optimize and serve advertisements based on the Data Subject’s past use of this website. This activity is performed through tracking Usage Data and using Cookies. This website uses the following services:

Facebook Remarketing (Meta Platforms, Inc.)

Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, which links the activity of this website with Facebook’s advertising network. This website uses the Facebook Pixel tool to measure conversions. Thanks to the Facebook Pixel, it is possible to understand the actions that people perform on the website. The Data collected can be used to: – ensure that ads are shown to the right people; – create audience groups to target with ads; – leverage additional advertising tools of the platform on which advertising is done. The information detected is anonymous to the operators of this website and cannot be used to identify the identity of a single Data Subject. However, the information is saved and analyzed by Facebook, which could link the action to a single profile and use this information for Facebook’s internal advertising purposes, as outlined in Facebook’s privacy policy. This will allow Facebook to show ads both on Facebook and on third-party sites. The website Controller has no control over how this data is used. For more information on how users can protect their privacy, we refer to Facebook’s Privacy Policy.

Google ADS

Google ADS is a service provided by Google Ireland Limited that links this website with Google’s advertising network. This website uses Google Analytics Remarketing features combined with Google ADS cross-device adaptation capability. This feature makes it possible to link target groups for promotional campaigns created by Google Analytics Marketing function with Google ADS cross-device adaptability. This allows showing advertisements based on the Data Subject’s personal interests, identified through an analysis of the Data Subject’s behavior on the web, whether on a mobile device or other devices. It is possible to permanently disable targeting and remarketing functions by disabling the “personalized advertising” function in the Google account. To do this, simply follow this link: https://www.google.com/settings/ads/onweb/ Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy.

CONTENT ON EXTERNAL PLATFORMS

These services allow viewing content hosted on external platforms directly from the pages of this website and interacting with them. In case a service of this type is installed, it is possible that, even if Users do not use the service, it may collect traffic Data relating to the pages where it is installed. This website uses:

Google Maps

Google Maps is a map viewing service managed by Google that allows this website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy.

YouTube Video Widget (Google Ireland Limited)

YouTube is a video content viewing service managed by Google Ireland Limited that allows this website to integrate such content within its pages. Personal Data processed: Usage Data; Tracking Tools. Place of processing: Ireland – Privacy Policy.

Google Fonts

Google Fonts is a font style display service provided by Google Ireland Limited that allows this Website to integrate such content within its pages. Personal Data collected: Usage Data; various types of Data as specified by the privacy policy of the service. Place of processing: Ireland – Privacy Policy.

Kajabi (Kajabi LLC)

Kajabi is a platform that hosts the Owner’s courses and webinars. Place of Processing: USA – Privacy Policy.

Circle (CircleCo, Inc.)

Circle (CircleCo, Inc.) is a platform that allows creators and brands to build true communities, granting access to exclusive features and content (online courses, discussions, live events, memberships, etc.). Place of processing: USA – Privacy Policy.

PAYMENT MANAGEMENT

Payment management services allow this Website to process payments by credit card, bank transfer, or other means. The Data used for payment are acquired directly by the manager of the requested payment service without being processed in any way by this Website. Some of these services may also allow scheduled messages to be sent to the Data Subject, such as emails containing invoices or notifications regarding the payment. This Website uses the following services:

Scalapay (Scalapay SRL)

Scalapay is a service that allows the Data Subject to make deferred digital payments and transfer money via the internet. This service is provided by Scalapay Srl. Personal Data collected: Various types of Data as specified by the privacy policy of the service. Place of processing: Italy – Privacy Policy.

PayPal (Paypal Europe S.à.r.l. et Cie, S.C.A Inc.)

PayPal is a payment service provided by PayPal Europe S.à.r.l. et Cie, S.C.A Inc., which allows the Data Subject to make online payments using their PayPal credentials. Personal data collected: Cookies and various types of Data as specified by the privacy policy of the service. Place of processing: Luxembourg – Privacy Policy.

Stripe (Stripe Payments Europe Ltd.)

Stripe is a payment service provided by Stripe Payments Europe, Ltd., which allows the Data Subject to make donations or online payments using their Stripe credentials. Personal Data collected: Various types of Data as specified by the privacy policy of the service. Place of processing: USA – Privacy Policy.

Rights of Data Subjects

Within the limits and conditions provided by law, the controller has the obligation to respond to the data subject’s requests regarding their personal data. In particular, according to current regulations: 1. The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning them are being processed, and, where that is the case, access to the personal data and the following information: – the purposes of the processing; – the categories of personal data concerned; – the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; – where possible, the anticipated retention period for personal data or, if not possible, the criteria used to determine that period; – the existence of the data subject’s right to request from the data controller the rectification or erasure of personal data, or the restriction of processing concerning them, or to object to their processing; – the right to lodge a complaint with a supervisory authority; – if the data are not collected from the data subject, any available information as to their source; – the existence of automated decision-making, including profiling. 2. The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement. 3. The data subject shall have the right to obtain from the controller the erasure of personal data concerning them without undue delay and the controller shall have the obligation to erase personal data without undue delay within the limits and cases provided for by current legislation. The controller shall communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort, within the limits and forms provided for by current legislation. 4. The data subject shall have the right to obtain from the controller restriction of processing. 5. The data subject shall have the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided. To exercise the rights listed above, the data subject must submit a request using the following contact points at the address indicated below: requests should be addressed to the Controller at the following contact details info@ipazia-hei.com Date of last update: 12/06/2025