TEMPLATES

Privacy Policy

Effective Date: June 2026

At Natura Illustrata srl (“Company”, “we”, “us”), we respect your privacy and are committed to protecting your personal data. This Privacy Policy (“Policy”) outlines how we collect, use, and share data about you—our visitors, users, and customers. This Policy complies with the General Data Protection Regulation (GDPR) and other applicable laws.

1. Information We Collect

We collect various types of information from you, including:

  • Payment Data: When you purchase our products or services, we collect data necessary to process your purchase. Payment information is handled by third-party processors, and we do not store sensitive card details.
  • Content Data: To access our free content (e.g., webinars, e-courses), you need to provide your name and email address.
  • User Account Data: When creating an account, we collect information such as your name, email address, username, and password.
  • Public Content: Any content you post publicly (e.g., comments, reviews) is visible to others.
  • Survey and Promotion Data: Information you provide when participating in surveys, feedback, or promotions.
  • Communication Data: If you contact us, we collect your name, email address, and the content of your message.
  • Tracking Data: We use cookies, web beacons, and clickstream data to collect information about your interaction with our website. Cookies help with site navigation and gather non-identifying data, while web beacons allow us to tailor our services and improve the customer experience. Clickstream data, collected through web access logs, also provides non-identifiable information to help us enhance our services.

2. Purpose and Legal Basis of Processing

 

We process your personal data only for specific, lawful purposes. The table below outlines each purpose and its corresponding legal basis under the GDPR.

Purpose Legal Basis
Processing purchases and delivering courses or digital products Performance of a contract — Art. 6(1)(b) GDPR
Sending transactional emails (purchase confirmations, account access, payment receipts) Performance of a contract — Art. 6(1)(b) GDPR
Email marketing, newsletters, and promotional communications Explicit consent — Art. 6(1)(a) GDPR + Art. 130 D.Lgs. 196/2003
Conducting webinars, free events, and lead generation activities Explicit consent — Art. 6(1)(a) GDPR
Analytics, site performance monitoring, and user experience improvement Legitimate interest — Art. 6(1)(f) GDPR (where data is anonymized or aggregated) or Consent (where personal data is involved)
Fulfilling legal, accounting, and tax obligations (e.g. invoicing, VAT records) Legal obligation — Art. 6(1)(c) GDPR + D.Lgs. 196/2003
Fraud prevention, security, and abuse detection Legitimate interest — Art. 6(1)(f) GDPR
Customer support and handling of complaints or requests Legitimate interest — Art. 6(1)(f) GDPR and/or performance of a contract — Art. 6(1)(b) GDPR

Where we rely on legitimate interest as our legal basis, we have assessed that our interests are not overridden by your rights and freedoms. You may request information about this assessment at any time by contacting us at the address below.

Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, please contact us or use the unsubscribe link in any marketing email.

3. Sharing Your Information

We may share your data with:

  • Employees and Contractors: To deliver our services and products.
  • Third-Party Providers: For services such as data analysis, email delivery, payment processing, and customer support.
  • Legal Authorities: If required by law or to protect our legal rights.

Your data will not be disclosed to third-party companies for marketing or commercial purposes without your consent.

4. Data Security

We implement appropriate technical, organizational, and procedural security measures to protect your personal data from unauthorized access, use, or disclosure. However, no system can be completely secure, and we cannot guarantee the absolute security of your data.

5. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this policy or as required by applicable laws. For example, data related to invoicing will be retained for 10 years, as mandated by Italian civil law.

6. Your Rights

Under the GDPR, you have several important rights, including:

  • Access: To access your personal information.
  • Correction: To correct any mistakes in your information.
  • Erasure: To request the deletion of your personal information under certain conditions.
  • Data Portability: To receive your personal information in a structured, commonly used, and machine-readable format.
  • Objection: To object to the processing of your personal information for direct marketing.
  • Restriction: To request the restriction of processing in certain circumstances.

  • To exercise any of these rights, please submit your request to the email address provided below, including sufficient information to verify your identity and clearly identify the specific data or matter to which your request pertains.

7. Third-Party Sites

Our website may contain links to third-party websites. We are not responsible for the content or privacy practices of these third-party sites. We encourage you to review their privacy policies before providing them with your information.

8. Data Transfers

We do not transfer your personal data outside the European Economic Area (EEA). In the event that personal data is transferred to third-party processors, such transfers will strictly comply with GDPR requirements, including the implementation of appropriate safeguards to ensure an adequate level of data protection.

Data Controller
Natura Illustrata srl
Via Per Curnasco, 52 — 24127 Bergamo (BG), Italy
P.IVA: 04870540160
REA: BG - 495447
Email: [email protected]

9. Minors

Our services are not directed to minors, and we do not knowingly collect data from minors. If we become aware of such data collection, we will take steps to delete it.

10. Changes to This Policy

We may update this Policy occasionally. If we make changes, we will notify you by revising the date at the top of this Policy. We encourage you to review this Policy periodically.

11. Right to Lodge a Complaint with the Supervisory Authority

If you believe that the processing of your personal data violates applicable data protection law, including the GDPR, you have the right to lodge a complaint with the competent supervisory authority at any time, without prejudice to any other administrative or judicial remedy.

As Natura Illustrata srl is established in Italy, the competent supervisory authority is:

Garante per la Protezione dei Dati Personali
Piazza Venezia, 11
00187 Roma — Italy
Website: www.garanteprivacy.it

You may also lodge a complaint with the supervisory authority of your country of habitual residence or place of work if you are located in another EU/EEA member state.

12. Contact Information

If you have any questions or concerns about this Privacy Policy or the information we hold about you, please contact us at:

Natura Illustrata - Anastasiia Morozova
Email: [email protected]

This Privacy Policy is provided for information purposes as required by GDPR Art. 13. Where your consent is required for specific processing activities, it will be requested separately and explicitly.

Â