Privacy
Privacy notice
Last updated: 22 October 2026
Controller
The data controller is Mattia Panatta, Rome, Italy. Contact: mattiapanatta6@gmail.com.
Processing at a glance
The site has no user accounts. Third-party statistics or advertising cookies are only activated with your consent (see the Cookies section). These are all the cases in which I process personal data; details are in the sections below.
| Processing | Data | Legal basis | Recipients | Retention |
|---|---|---|---|---|
| AI assistant (chat) | Your questions, the page you read, language; IP to prevent abuse | Performing your request (Art. 6.1.b); legitimate interest in preventing abuse (6.1.f) | OpenAI (model provider), Vercel (hosting) | The site does not store conversations; OpenAI may retain them for a limited time for abuse monitoring |
| Voice mode | Audio and transcript during the session | Performing your request (6.1.b) | OpenAI | The site does not record audio; the transcript stays in your browser for the session |
| Newsletter | Email, language, open and click statistics | Consent (6.1.a), revocable | Brevo (France, EU) | While you stay subscribed |
| Ebook purchase | Name, email, amount; payment data only on Stripe | Contract (6.1.b) and legal obligations (6.1.c) | Stripe (Ireland) | Tax records for 10 years; the rest as long as needed for support |
| Booking a lesson | Name, email, optional phone, message, day and time | Pre-contractual steps and contract (6.1.b) | Brevo (sending emails), Google (Gmail, Calendar and Meet) | Up to 12 months after the meeting; 10 years for tax records of paid services |
| Emails you send me | Address and message content | Your request or pre-contractual steps (6.1.b) | Google (Gmail) | As long as needed to reply and follow up |
| Statistics and advertising cookies | Browser identifiers, pages viewed, ad interactions | Consent (6.1.a), revocable at any time | Providers listed in the banner when active | According to each provider's cookie lifetime |
| Technical browsing data | IP, browser, requested page (server logs) | Legitimate interest in security and operation (6.1.f) | Vercel (hosting) | According to Vercel log settings, usually a few days |
In your browser (localStorage and sessionStorage) the site stores only technical preferences: light or dark theme, music player state and, for the session, a copy of your conversation with the assistant. They need no consent because they are strictly necessary for features you use, and they stay on your device.
AI assistant
The chatbot is an artificial intelligence system and says so (Art. 50, EU Regulation 2024/1689). When you ask a question, the conversation text, the page you are reading and the language are sent to the site's server and from there to OpenAI, the provider of the artificial intelligence model, to generate the answer. Requests are sent with the option asking not to store responses for reuse (store: false); OpenAI may still retain data for a limited time for abuse monitoring under its API terms, and states it does not use API data to train models. OpenAI may process data outside the EU, with the safeguards in its terms (standard contractual clauses).
To answer, the assistant may consult public pages on artificialanalysis.ai, arena.ai, theresanaiforthat.com and testingcatalog.com: none of your personal data is sent to those sites.
Do not enter personal, health, financial or confidential data in your questions. Answers may contain errors and are not professional advice. The server uses your IP address temporarily only to rate-limit requests.
Voice mode
If you press the microphone button in the assistant panel, your browser asks permission to use the microphone. Only from then on, and until you press "End" (or after 2 minutes of silence, 10 minutes at most), audio travels in real time and encrypted (WebRTC) directly to OpenAI, the provider of the voice model, which transcribes it and answers by voice. The session is created by the site's server with the no-storage option (store: false); the site does not record or keep the audio. Transcripts appear in the chat and stay only in your browser for the session.
Newsletter
If you subscribe, your email address and chosen language are sent to Brevo (Sendinblue SAS, France, servers in the EU), which I use to manage the list and send the emails. You join the list only after confirming from the link you receive (double opt-in). The newsletter is prepared with the help of artificial intelligence, and I read and approve it before it is sent. Brevo records opens and clicks in statistical form, which I use only to understand which content is of interest. You can unsubscribe at any time from the link in every email or by writing to me.
Ebook purchase
Payment takes place on Stripe (Stripe Payments Europe, Ireland), which processes payment data to collect payment and prevent fraud. I receive your name, email, amount and optional tax code to deliver the files, keep tax records and answer requests; I never see your card details. The terms are on the Terms of sale page.
Booking a lesson
When you book a training lesson, your name, email, phone (if given), message, day and time are sent by the site's server via Brevo to my email inbox (Google Gmail), together with a summary email to you. They are not saved in a site database. Meetings take place online on Google Meet: when I confirm, your name, email and message go into an event in my Google Calendar and Google sends you the invite with the link. To show only free times, the site reads from my calendar just which slots are busy, with no details. I use them only to organise and hold the meeting and, where applicable, for tax records of the fee.
If you write to mattiapanatta6@gmail.com, I use your address and message only to reply and, if you ask, to prepare a quote.
Cookies
On your first visit a banner asks what you allow. Technical cookies (theme, language, player, the conversation with the assistant, your cookie choice) are always on because the site needs them. Third-party statistics and advertising cookies are only activated if you accept them; the site uses none today, and when it does the providers will be listed here and in the banner. "Reject" carries the same weight as "Accept": you can reject everything and keep using the site. Change your mind anytime from , also at the bottom of every page.
Sponsored placements sold directly (on the site and in the newsletter) use no profiling cookies and are always labelled "Sponsored".
Technical data and external services
Hosting: Vercel, which keeps technical access logs (IP, browser, page) for security and operation. Fonts: Google Fonts, loaded from Google's servers. Site icons on the Tools page: Google's favicon service. Videos: thumbnails load from i.ytimg.com; the YouTube player loads only when you press play, in privacy-enhanced mode (youtube-nocookie.com). Map on the About page: OpenStreetMap, which uses no profiling cookies. Music: audio files are hosted on the site itself.
Your rights
You can request access, rectification, erasure, restriction, portability and objection, and withdraw newsletter consent, by writing to mattiapanatta6@gmail.com. You can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
