Privacy notice
How the personal data of people who visit this website, write to me or subscribe to the newsletter are processed, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR).
Last updated: 29 October 2026
1. Who the data controller is
The data controller is Filippo Rossi, as a natural person, resident in Malta. This is a personal website: it does not belong to a company and is not linked to a business with a VAT number.
For any question about your data, or to exercise your rights, you can write to scrivimi [at] filipporossi.it or use the form on the Contact page.
2. What data we collect
Browsing data
Like every website, this one receives some technical information from your browser: your IP address, the date and time of your visit, the page requested, and the type of browser and device. This information is needed to run the website and protect it from attacks, and it is recorded in the technical logs of the provider that hosts the website. We do not use it to identify you.
Data you send us
- Contact form: full name, email address, phone number (optional), the topic chosen and the text of the message.
- Newsletter subscription: first name, email address, the version chosen (families or managers), the date of your subscription and confirmation, and proof of both.
- Emails you send us: the address you write from and the content of the message.
Please do not include special categories of data (for example, health data) in your messages unless they are strictly necessary for your request.
Bot protection
To protect the forms from spam we use Cloudflare Turnstile, an automatic check that verifies that the form is being filled in by a person. To do this it reads some technical information about your browser and device, solely for this purpose.
3. Why we process your data and on what legal basis
- Replying to your messages and sending you a copy of what you wrote: this is necessary to follow up on your request (Art. 6(1)(b) GDPR).
- Sending you the newsletter “Il Filippo Pensiero”: only with your consent, which you give by subscribing and confirming your subscription from the email you receive (Art. 6(1)(a)). You can withdraw it at any time, using the link at the bottom of every email.
- Protecting the website and the forms from abuse, spam and attacks: this is our legitimate interest (Art. 6(1)(f)).
- Complying with legal obligations or requests from the authorities (Art. 6(1)(c)).
The fields marked as required are needed in order to reply to you: without them, we cannot do so. The phone number is optional.
4. The newsletter and email opens
The newsletter emails do not record whether you personally open them. We can only count, in anonymous and aggregate form, how many emails in a mailing are opened or how many clicks the links receive, without linking that data to you, as provided for by the guidelines of the Garante per la protezione dei dati personali (Italian Data Protection Authority) on tracking pixels in emails (decision no. 284 of 17 April 2026). If one day we wanted to do this on an individual basis, we would ask you first, with a separate consent that you can refuse without losing the newsletter.
5. Who can see the data
The data are seen by me and by the members of my staff who help me reply, who are authorised and bound by confidentiality. The providers of the services we use also process them on our behalf, as data processors:
- Netsons S.r.l. (Italy), which hosts the website and the mailbox;
- Brevo (Sendinblue SAS, France, with servers in the European Union), which sends the newsletter;
- Cloudflare, Inc., for bot protection.
We do not sell your data and do not share them with anyone for advertising purposes.
6. Transfers outside the European Union
Some providers, such as Cloudflare, are based in the United States. In these cases the transfer takes place on the basis of the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework or of the standard contractual clauses approved by the Commission.
7. How long we keep the data
- Messages from the contact form: for as long as necessary to reply and follow up on your request, and in any case no longer than 24 months after the last exchange, unless they are needed for longer for a relationship that arose from it.
- Newsletter: for as long as you remain subscribed. When you unsubscribe, we stop writing to you and keep only proof of your subscription and its withdrawal, for as long as it may be needed to demonstrate them.
- Browsing data: for the technical retention periods of Netsons' logs, which it uses for the security and operation of the server, and no longer than is needed for these purposes.
8. Your rights
You can ask us at any time to access the data we hold about you, to rectify them, to erase them, to restrict their processing, or to receive them in a machine-readable format so you can take them elsewhere, and you can object to processing based on legitimate interest (Articles 15 to 22 GDPR). You can withdraw your consent to the newsletter at any time, without affecting the lawfulness of processing carried out before the withdrawal. We will reply within one month.
If you believe that your data are not being processed correctly, you can lodge a complaint with the data protection authority of the European country where you live or work. In Italy it is the Garante per la protezione dei dati personali (www.garanteprivacy.it); in Malta, where the controller is resident, it is the Information and Data Protection Commissioner (idpc.org.mt).
9. Minors
This website also speaks to young people, but the forms are intended for adults. If you are under 14, please do not use them: ask one of your parents to write to us for you.
10. Automated decisions
We do not make decisions based solely on automated processing and we do not profile the people who visit the website.
11. Links to other websites
The website contains links to other websites, for example Change Your Life Academy, the Professional Master Training, Works and Words, Instagram, TikTok and LinkedIn. When you open them, the privacy notices of those websites apply.
12. Changes to this notice
We may update this page when the rules or the services we use change. The date of the last update is shown at the top. There is a separate page on cookies and similar technologies: Cookies.