Privacy Policy for federicosibella.com

Last updated: 09/18/2025

Thank you for visiting federicosibella.com (the “Website”), owned and operated by Federico Maria Sibella (“I”, “me”, “my”).

This Privacy Policy describes how I collect, use, and protect your personal information in relation to my digital products, training services, and online shop. I am committed to safeguarding your privacy in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using this Website or purchasing my services, you agree to this Privacy Policy.

1. Data Controller

The data controller responsible for your personal data is:

Federico Maria Sibella
Website: www.federicosibella.com

Email: federico.maria.sibella@gmail.com

Business Address: Strada Giardina 24, 12040, Priocca (CN) – Italy

VAT: 03898270040

Type of activity: 591100 – Motion Picture, Video and Television Program Production – under Italian regulation

2. Data I Collect

2.1 Personal Data You Provide

Identity Information: Name, surname, company name (if applicable).
Contact Information: Email address, postal address, phone number (optional).
Account Data (if applicable): Username, password, login credentials for accessing digital products or training portals.
Transaction Data: Orders, billing address, shipping address (for physical goods, if ever applicable).
Training/Consulting Data: Information you share during mentorship sessions, class recordings (if consented), scheduling details, and related communications.
Marketing Preferences: Newsletter subscriptions, consent for updates or promotions.

2.2 Automatically Collected Data

Technical Data: IP address, device type, browser type, operating system.
Usage Data: Pages visited, time spent, navigation paths, clicks.
Cookies & Tracking: Data stored via cookies, pixels, or similar technologies (see Section 8).

2.3 Financial Data

Payments are processed securely via third-party providers (e.g., Stripe, PayPal, Gumroad, Teachable). I do not store credit card details.

3. How I Use Your Data

I process your personal data for the following purposes:

Digital Products Delivery: Provide access to purchased downloads, licenses, or subscriptions.
Training & Mentorship Services: Schedule and deliver training sessions, provide support materials, and track progress.
Account Management: Enable login, secure user access, and manage product usage.
Customer Support: Respond to inquiries, resolve issues, process refunds.
Marketing & Communication: Send newsletters, promotional offers, updates about new courses, or products (only with consent).
Legal & Administrative Compliance: Maintain invoices, tax records, comply with consumer protection regulations.
Website Optimization & Security: Monitor traffic, detect fraud, prevent abuse, and improve site performance.

4. Legal Bases for Processing (GDPR)

Contractual Necessity: To fulfill purchases, provide access to digital products, and deliver training.
Consent: For newsletters, optional marketing, and recording of training sessions.
Legal Obligation: Tax reporting, accounting compliance.
Legitimate Interests: Fraud prevention, service improvements, analytics.

5. Data Retention

I retain your personal data only as long as necessary:

Customer Data (orders, invoices): 7–10 years (legal obligation).
Training/mentorship data: Up to 24 months after service completion, unless otherwise required.
Marketing subscriptions: Until you unsubscribe or withdraw consent.
Analytics data: Typically anonymized and aggregated after 26 months.

6. Sharing & Disclosure of Data

I do not sell or rent your personal data. Data may be shared with:

Payment Providers: Stripe, PayPal, Gumroad, etc.
Hosting Providers: Web host, cloud storage, and security platforms.
·Email Marketing Tools: e.g., Mailchimp, ConvertKit (for newsletters).
Scheduling & Communication Tools: e.g., Calendly, Zoom, Google Meet, if used for training.
Legal Authorities: Only if required by law.

All providers are contractually bound to comply with GDPR and protect your data.

7. Data Security

I take appropriate technical and organizational measures to protect personal data, including:

Encrypted connections (SSL/HTTPS).
Secure servers with access controls.
Limited access to personal data (only me and essential providers).
Regular backups and monitoring for breaches.
In the event of a data breach, you will be notified within 72 hours (as required by GDPR).

8. Cookies & Tracking

This website uses cookies and tracking technologies:

Essential Cookies: Required for site functionality, logins, and security.
Analytics Cookies: Google Analytics or equivalent, to analyze visitor behavior.
Marketing Cookies: For remarketing campaigns (only with your explicit consent).
You will see a cookie banner where you can choose to accept or manage preferences.

9. International Transfers

If your data is transferred outside the European Economic Area (EEA), safeguards such as EU Standard Contractual Clauses (SCCs) or service providers certified under relevant frameworks will be used to ensure data protection.

10. Your Rights Under GDPR

You have the right to:

Access: Request a copy of your data.
Rectify: Correct inaccurate or incomplete information.
Erase: Request deletion of your data (where legally possible).
Restrict Processing: Temporarily limit data use.
Data Portability: Request transfer of your data to another provider.
Object: Refuse processing for direct marketing or legitimate interests.
Withdraw Consent: At any time, for activities based on consent.

To exercise your rights, contact: federico.maria.sibella@gmail.com

You also have the right to complain to your local Data Protection Authority.

11. Special Notes for Training & Digital Products

Course Materials: Digital files provided (e.g., PDFs, videos) are for personal use only.
Recordings: If sessions are recorded, you will be asked for explicit consent.
User Conduct: Data related to course participation, engagement, or feedback may be analyzed (in anonymized form) to improve future training.
Anti-Fraud Measures: Downloads and accounts may be tracked to prevent unauthorized sharing or piracy.

12. Children’s Privacy

This website is not directed at individuals under the age of 16. If I discover that personal data of a child has been collected, it will be deleted immediately.

13. Policy Updates

This Privacy Policy may be updated from time to time to reflect new services, legal requirements, or technologies. Updates will be posted here with a revised “last updated” date.

14. Contact

If you have questions, concerns, or requests regarding this Privacy Policy, please contact:

Federico Sibella
Website: www.federicosibella.com