Cookie Policy

1. What cookies are and legal basis

Cookies are small text files that sites visited by the user send to their device, where they are stored to be resent to the same sites on subsequent visits. Similar technologies (local storage, pixels, SDKs) are treated as cookies for the purposes of applicable law.

Italian rules on cookies are set out in art. 122 of Legislative Decree 196/2003 (Privacy Code), which implements Directive 2002/58/EC (ePrivacy), and in the Guidelines of the Italian Data Protection Authority adopted with Resolution No. 231 of 10 June 2021. Under that resolution, the continuation of browsing does not constitute consent: consent requires a positive and unambiguous action by the user (e.g. clicking "Accept all").

2. Data Controller

The data controller is Studio di Registrazione Liotta Matteo, VAT ID 10755761219, Via Pigna 76, Parco Correale — 80128 Naples (NA), Italy. Contacts: [email protected] · certified email [email protected] · +39 389 470 4304.

2bis. Data Processor (art. 28 GDPR)

InTasca Srls, as provider of the technical and digital services of the site, is appointed as Data Processor pursuant to art. 28 of Regulation (EU) 2016/679 (GDPR), processing data on behalf of the Controller solely for purposes related to the management and maintenance of the site.

• Registered office: Via Nuova Poggioreale, Torre 7 snc — 80143 Naples (NA)
• Certified email: [email protected]
• Tax / VAT ID: 11039821217
• REA: NA - 1150116

3. Categories of cookies used

• Necessary — technical tools essential for the site to work: the members-area session cookie that keeps you signed in after login (provided by Better Auth, a library running on our own servers), local storage of your consent preferences, recognition of the device you watch the lessons on, and the signed links that authorise video playback. They are all first-party, do not profile you and do not require consent under art. 122 of Italian Legislative Decree 196/2003. This category also covers Stripe's two technical cookies (__stripe_mid and __stripe_sid), which serve to prevent payment fraud: the payment form is embedded in our own pages rather than hosted on an external site, so those cookies are written on our domain, but by Stripe. They appear only when you open the payment form, never during ordinary browsing, and they too neither profile you nor require consent.
• Functional — store user choices such as language or display preferences. They require consent.
• Analytics — collect aggregated information about site usage via tools such as Google Analytics 4. They require consent.
• Marketing — used to propose personalised content or measure advertising campaign performance. As at the last update date, no advertising tool is installed on the site; should one be activated in future (for example Google Ads or Meta), it will be listed here and loaded only with explicit consent. This category does not cover the technical cookies Stripe sets on the payment page (__stripe_mid, lasting 1 year, and __stripe_sid, lasting 30 minutes): they recognise the device to prevent card fraud, do not profile the user for advertising and are necessary to perform the contract.

4. Consent Mode and third-party services

The site uses Google Consent Mode v2: until the user provides consent, all non-essential services (analytics, advertising, personalisation) remain in the denied state. Upon consent, the state is updated and the services may load. The site's other providers do not depend on this panel because they set no cookies subject to consent: Hetzner Online GmbH (Germany) hosts the site, the database and the videos; Cloudflare, Inc. provides DNS, CDN and attack protection; InTasca Srls handles development and maintenance; Stripe collects payments and sets only the technical anti-fraud cookies listed above; Resend, Inc. sends the emails. Videos are served from our own infrastructure through signed links and fonts are served from our own domain, so no requests are made to video platforms or to Google Fonts. Full details of the roles and legal bases are in the Privacy Policy. The following, by contrast, may be used if authorised:

• Google Tag Manager — tag container, with no tags active by default. Privacy policy
• Google Analytics 4 — analytics, with IP anonymisation, ad signals disabled and restricted data processing enabled. Opt-out
• Any advertising tools (Google Ads, Meta) — marketing, only with explicit consent. Ads policy

5. Cookie duration

Your cookie choice is saved in your browser's local storage and lasts 6 months: once it expires, the banner asks again. The members-area session cookie lasts 30 days from the last login and is cleared on logout. Signed video links are valid for 2 hours. Stripe's technical cookies last 1 year (__stripe_mid) and 30 minutes (__stripe_sid). Any third-party cookies activated with your consent follow the durations set out in the respective providers' policies.

6. Managing preferences

You can change or withdraw your consent at any time via the button below. You can also disable cookies directly from your browser; this, however, may limit some site functionality.

7. Rights of the data subject

Pursuant to arts. 15-22 GDPR you may exercise the right of access, rectification, erasure, restriction, portability and objection by writing to the Controller at the addresses above. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

8. Updates

This notice may be updated; the date of the last update and, if relevant, changes to the consent required will be indicated.