Tell us your story

Legal

This page explains, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), how personal data of people who visit the Idra Studios website or write to us through the forms is processed. We review it periodically and update it when needed.

Last updated: 13 October 2026.

Data controller

The data controller is:

Idra Studios di Alessio Donzella

Piazza del Tridente, 9 — 38121 Trento (TN), Italy

VAT no. 02536880228

Email: Idracoaching@gmail.com

Phone: +39 349 768 2763

What data we process

Data you give us through the “Tell us your story” and “Request a consultation” forms: first name, last name, email, phone (optional), city (optional), how you found us (optional) and the free text you choose to write, that is your story, your goal and your previous training experience.

You don't need to include health information in the free text: we will talk about it in person, with a dedicated notice and your explicit consent, if it is needed for your programme.

Technical data: when you send a form we store an anonymous fingerprint (hash) of your IP address. It is used only to limit repeated or abusive submissions, and the address cannot be recovered from it. The website servers and our providers may log technical browsing data (such as IP address, browser type and time) for the operation and security of the service.

Data about your choices: when you send a form we store the date and the version of the Privacy Policy you accepted and, if you tick it, your optional consent to the publication of your story.

Browsing data collected with cookies and similar tools: only with your consent, as explained in the Cookie Policy.

Why we process it and on what basis

Answering your request and arranging the first meeting at the studio: processing is necessary to follow up a request you made before any contract (Art. 6(1)(b) GDPR) and is also based on the consent you give by ticking the box on the form (point (a)).

Legal obligations, for people who become clients: keeping contracts and tax and accounting documents (point (c)).

Website security and abuse prevention, such as the limit on repeated submissions and protection of the private area: the controller's legitimate interest (point (f)).

Statistics on how the site is used: only with your consent (point (a)), which you can give or withdraw at any time.

Publishing your story or a testimonial: never automatically. It only happens if you give us a separate, optional, written consent, which you can withdraw at any time.

We don't use your data for marketing messages or newsletters without your specific consent. We don't profile you or make decisions based solely on automated processing.

Providing your data

The required form fields (first name, last name and email) are needed so that we can reply: without them we can't handle your request. All other data is optional.

Who receives the data

Data is not sold or used for third-party advertising. It may be processed, as data processors, by the providers that deliver services needed for the website to work:

Lovable, for website hosting, the requests database and sending notification emails.

Google, for the Gmail mailbox where we receive requests; for Google Analytics and Google Tag Manager, only with your consent; and for Google Maps, only if you load the map.

Microsoft, for Microsoft Clarity, only with your consent.

The studio's accountant and advisers, for tax and accounting obligations concerning clients.

Data can only be accessed by authorised people at the studio.

Transfers outside the European Union

Some providers (in particular Google, Microsoft and Lovable) may also process data outside the European Economic Area, for example in the United States. In these cases the transfer relies on a European Commission adequacy decision (such as the EU-US Data Privacy Framework) or on standard contractual clauses, as provided by each provider.

How long we keep data

Requests from people who don't become clients: 12 months from the last contact, then we delete them.

Clients: for the duration of the relationship and, for contractual, tax and accounting documents, for 10 years after it ends, as required by law.

Cookie choices: 6 months, then we ask you to choose again.

Statistical data collected with your consent: for the periods stated by the providers and summarised in the Cookie Policy.

You can ask us to delete your data at any time, even before these deadlines.

Security

The site uses an encrypted connection (HTTPS), so the data you send is protected in transit. Requests are stored in a database that is not publicly accessible and can only be viewed from a private area protected by authentication, with access limited to authorised people. No system is one hundred percent secure: if a breach affects you, we will notify you as required by law.

Your rights

Under Articles 15-22 of the GDPR you have the right of access, rectification, erasure, restriction, objection and data portability. You can exercise them by writing to Idracoaching@gmail.com: we reply within one month.

You can withdraw any consent you have given at any time, without affecting the processing carried out before the withdrawal. You can change your cookie choices from the “Cookie preferences” link at the bottom of every page.

If you believe the processing violates the law, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).

Minors

The site is intended for adults. If you are under 18, please ask a parent or legal guardian to write to us on your behalf.

Changes to this notice

If our processing or the law changes, we will update this page and the date at the top.