This policy explains what personal data Italy Cultura collects when you use italycultura.com or book a lesson, why, and what your rights are. Short version: I only collect what I need to teach you and run my business, I never sell your data, and you can ask me to delete it at any time.
1. Who is responsible for your data
Luciana Smaroń, trading as Italy Cultura
ul. Szlak 49, 31-153 Kraków, Poland
NIP: 5170467969 · REGON: 543972211
Email: info@italycultura.com
I am the “data controller” under the EU General Data Protection Regulation (GDPR).
2. What data I collect and why
| When | What data | Why | Legal basis (GDPR) | How long I keep it |
|---|---|---|---|---|
| You book a lesson | Name, email, time zone, lesson choice, answers in the booking form, booking history | To schedule and give your lessons and send reminders | Contract (art. 6(1)(b)) | While you are my student, then up to 6 years for tax and accounting records |
| You pay | Payment confirmation, amount, date, billing details. Card or PayPal details are handled by Stripe or PayPal, not by me | To get paid and keep accounting records | Contract; legal obligation (art. 6(1)(c)) | As required by Polish tax law (usually 5 years from the end of the tax year) |
| Lessons | Notes on your progress, lesson materials, messages | To teach you and track your progress | Contract | While you are my student, then deleted within 12 months |
| You write to me (email or contact form) | Name, email, your message | To answer you | Legitimate interest in replying (art. 6(1)(f)) | Up to 2 years after our last contact |
| You ask for a business quote | Name, company, work email, team size, your message | To prepare and send the quote | Steps before a contract (art. 6(1)(b)) | Up to 2 years if no contract follows |
| You subscribe to the newsletter or download the free guide | Email, first name, sign-up date and consent record | To send the guide and the newsletter | Your consent (art. 6(1)(a)) | Until you unsubscribe |
| You take the level test | Your answers and result stay in your browser. Nothing is sent to me unless you choose to subscribe | — | — | Not stored |
| You visit the website | Technical data (IP address, browser, pages visited), necessary cookies (see the Cookie policy) | Security, keeping the site working, and anonymous visit statistics (no cookies, you are not identified) | Legitimate interest (art. 6(1)(f)) | Server logs: up to 30 days |
You don’t have to give me your data, but without it I can’t book or give your lessons, or answer your message.
3. Who receives your data
I use trusted service providers who process data on my behalf:
- Hostinger (website hosting and email)
- Cloudflare (website security and speed)
- TidyCal (booking)
- Stripe and PayPal (payments; they are also responsible for your payment data under their own privacy policies)
- Google (Google Meet and Google Calendar for lessons)
- MailerLite (newsletter and free guide)
- Cloudflare Web Analytics (anonymous visit statistics, without cookies)
- My accountant (invoices and tax records)
I never sell your data or share it for advertising.
4. Data outside the European Union
Some of these providers are based in the United States, or store data there. When this happens, your data is protected by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.
5. Your rights
You can ask me at any time to:
- see the data I have about you, and get a copy
- correct it
- delete it
- limit how I use it
- move it to another provider
- object to its use when I rely on legitimate interest
- withdraw your consent (for example, unsubscribe from the newsletter), without affecting what happened before
Write to info@italycultura.com. I will answer within one month, as the law requires.
You can also complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00‑193 Warsaw, uodo.gov.pl.
6. Other things to know
- No automated decisions or profiling are made about you.
- My lessons are for adults only. I don’t knowingly collect data from anyone under 18 (and never from children under 13).
- Do Not Track: this website does not track visitors across other websites and does not use advertising or tracking cookies, so it treats every visit the same way, whether or not your browser sends a “Do Not Track” signal.
- Visitors from the United States, including California: this policy describes all the categories of personal data collected (section 2), who receives them (section 3) and your choices (section 5). I never sell or share your personal data for advertising.
- If this policy changes, the new version will be published on this page with a new “Last updated” date; if you are a student or subscriber and the change is important, I will also tell you by email.