Privacy and Cookie Policy
How your data is handled
This notice describes the processing of personal data carried out through the website iadaterminale.it, pursuant to Regulation (EU) 2016/679 (“GDPR”) and to Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.
Last updated: 9 August 2026.
This is a translation, provided for convenience. The binding version is the Italian one, at iadaterminale.it/privacy: the Data Controller is established in Italy and the notice is given in Italian. If the two texts diverge, the Italian one prevails.
1. Data Controller
The Data Controller is Gianclaudio Spena, Italian VAT number 02936750849.
For information, or to exercise your rights, you can write togianclaudio@iadaterminale.it.
2. Who this notice applies to
This notice concerns this website only. Any external sites reachable through links have their own notices, for which their respective operators are responsible.
The site is not specifically directed at minors. For information society services offered directly to a child, in Italy independent consent is valid from the age of 14; below that age it must be given or authorised by whoever holds parental responsibility.
3. Data processed while browsing
The systems that make this site available may process technical data transmitted automatically by the browser, such as IP address, date and time of the request, page requested, referring URL, browser type, operating system and device information.
This data is used to serve the pages, keep the service secure, prevent abuse and diagnose technical problems. The legal basis is the Controller's legitimate interest in the availability and security of the site, pursuant to Article 6(1)(f) GDPR.
Technical logs are kept for as long as is necessary for operational and security purposes, according to the infrastructure configuration, and longer only where it is necessary to establish or document security events or to comply with legal obligations.
4. Subscribing to updates
If you choose to subscribe, the following are processed: your email address, the status of your subscription, the record of your consent and any technical data generated during the confirmation procedure. The address enters the list only after you click the double opt-in link received by email.
The purpose is to send updates about new chapters, practical recipes and significant revisions of the project, and to deliver the volume 1 ebook to subscribers once it is available. The legal basis is consent, pursuant to Article 6(1)(a) GDPR. Providing the data is optional: without an email address and consent you can still read the site, but you do not receive the updates.
You may withdraw your consent at any time using the unsubscribe link contained in the messages, or by writing to the Controller. The data remains in the list until you unsubscribe or the service is discontinued; information strictly necessary to document consent or to honour an unsubscription may be kept for the period required by law.
Management of the list, of the double opt-in and of the mailings is entrusted toBrevo, the email service provider, which processes the data under the applicable agreements and safeguards.
5. Communications sent voluntarily
If you write to the address given on the site, your email address and the other information contained in your message are processed, to the extent necessary to reply. The legal basis is the performance of measures requested by the data subject and, depending on the content of the request, the legitimate interest in managing incoming communications.
6. Cookies and tracking tools
Technical cookies
Technical cookies and equivalent tools may be used only where necessary to provide the service, protect the site or remember a choice made by the user. You can delete or block them from your browser settings; some functions strictly dependent on such tools may then no longer be available.
The preferences banner stores the first-party technical cookiecc_cookie. It contains the categories accepted or refused, the version of the notice, the language, a random consent identifier and the dates of the choice. It lasts 182 days and serves solely to remember and document your preferences. You can change them at any time from the “Cookie preferences” link in the footer of every page.
Google Tag Manager
The site loads the Google Tag Manager containerGTM-53QWLQ9S. Tag Manager is a management tool: it is not in itself an analytics service, but it can execute the tags configured by the Controller. As at the date of the last update, the container holds no active analytics, advertising or profiling tags.
Loading the container nonetheless generates a technical request to Google's servers. According to the information provided by Google, Tag Manager may collect aggregated diagnostic data and retains standard HTTP log data for 14 days. For more information see theGoogle Privacy Policy.
Google Analytics 4, future activation
Google Analytics 4 (“GA4”) may be activated in future through Tag Manager, for the purpose of understanding in statistical form which content is consulted and improving the site. GA4 is not yet active as at the date given in this notice.
When it is activated, GA4 may process pages visited, interaction events, session, browser and device data, the source of the visit and approximate geographic location. With consent to analytics storage, Google normally uses the first-party cookie _ga, containing a browser identifier. For users in the European Economic Area, Google states that it uses the IP address to derive approximate location and deletes it before logging.
Before the tag is published, the site will request prior consent through a dedicated tool, and this page will be completed with the measurement identifier and the retention period configured in the GA4 property. Continuing to browse or merely scrolling will not be treated as consent. Users will be able to refuse or withdraw their choice as easily as they gave it.
Any advertising features, Google Signals, links with Google Ads or profiling activities will not be activated without a specific assessment, an updated notice and the consent required by applicable law.
7. Recipients and providers
Data may be processed, within the limits of their respective functions, by:
- providers of hosting, infrastructure, maintenance and security;
- Brevo, for managing subscriptions and email delivery;
- Google, for loading and managing Google Tag Manager;
- professionals or public authorities where necessary to comply with legal obligations or to protect a right.
Providers processing data on behalf of the Controller are bound by agreements compliant with Article 28 GDPR, where applicable. Data is neither disseminated nor sold.
8. Transfers outside the European Economic Area
Some providers may process data in countries outside the European Economic Area. In such cases the transfer takes place on the basis of an adequacy decision of the European Commission — including, where applicable, the safeguards of the EU-US Data Privacy Framework — or by means of standard contractual clauses and the further measures provided for by Articles 44 et seq. GDPR.
9. Security
The site adopts technical and organisational measures proportionate to the risks, including encrypted connections, separation of services, restricted access and protection against abusive requests. No system, however, can guarantee absolute security.
10. Rights of the data subject
In the cases provided for by the GDPR you may request access to your data, rectification, erasure, restriction of processing, portability and objection. You may also withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights you can write togianclaudio@iadaterminale.it. You also have the right to lodge a complaint with theItalian Data Protection Authorityor with the supervisory authority competent in your country.
11. Automated decision-making
The site does not take decisions based solely on automated processing producing legal effects or similarly significantly affecting the user.
12. Changes to this policy
This notice may be updated when services, providers or legislation change. The version in force is published permanently atiadaterminale.it/privacy, with the date of the last update.