FULL PRIVACY NOTICE
Information Notice pursuant to Articles 13–14 of EU Regulation 2016/679 (GDPR)

​

1. Data Controller
Renato Modugno – renatothecoach
Via Alberto Mario 21, 37121 Verona (VR), Italy
E-mail: renato@renatothecoach.com
(Note: “renatothecoach” is the business name; the Data Controller remains you as a natural person.)

2. Purpose of Processing
Personal data collected through this form will be processed for the following purposes:
– managing registration and participation in masterclasses or events organized by the Data Controller
– responding to requests for information or support
– sending operational communications related to the requested services
– sending newsletters, updates, editorial content, promotional communications, commercial offers, event invitations, initiatives, and activities related to the “renatothecoach” brand, subject to the data subject’s consent
– fulfilling any applicable legal obligations

3. Legal Basis for Processing
The legal bases for processing are:
– Art. 6(1)(b) GDPR – performance of a service requested by the data subject
– Art. 6(1)(c) GDPR – compliance with legal obligations
– Art. 6(1)(f) GDPR – legitimate interest of the Data Controller (organizational management of events and prevention of misuse)
– Art. 6(1)(a) GDPR – consent for newsletters, promotional communications, events, and initiatives
– Art. 9(2)(a) GDPR – explicit consent for any special categories of data voluntarily provided

4. Types of Data Processed
The following data may be processed: name, surname, e‑mail address, telephone number, and any information voluntarily provided in the form.
Any special categories of data will be processed only if voluntarily provided and with explicit consent.

5. Methods of Processing
Data will be processed using electronic and/or paper tools, adopting appropriate technical and organizational measures to ensure security, confidentiality, and integrity. Access to data is restricted to authorized personnel only.

6. Data Retention
– for event participation purposes: until the event is completed and for the following 24 months
– for newsletters, promotional communications, and events: until consent is withdrawn
– for legal obligations: according to statutory retention periods

7. Data Communication and Disclosure
Data will not be publicly disclosed. They may be communicated to suppliers and collaborators acting as external data processors pursuant to Article 28 GDPR.
If Google Forms is used, the service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, appointed as an external data processor.

8. Transfer of Data to Third Countries
Any transfers of data outside the EU will be carried out in compliance with Articles 44–46 GDPR, using appropriate safeguards (e.g., Standard Contractual Clauses).

9. Rights of the Data Subject
The data subject may exercise the following rights at any time: access to personal data; rectification or erasure; restriction of processing; objection to processing; data portability; withdrawal of consent without affecting the lawfulness of processing prior to withdrawal.
A complaint may also be lodged with the Italian Data Protection Authority.

10. Provision of Data and Consequences of Refusal
Providing the data necessary for managing registration is mandatory; failure to provide such data will make it impossible to participate in the event or receive the requested service.
Providing data for newsletters, promotional communications, and events is optional; refusal does not affect access to the main services.

​