PRIVACY POLICY
Pursuant to EU Regulation 2016/679 (GDPR)
Last updated: June 20, 2025
1. TYPES OF DATA COLLECTED
1.1 Browsing data: IP address, browser type, pages visited, time, date, referral site.
1.2 Voluntarily provided data: Full name, email, phone, date of birth, address, payment info (via secure processors).
1.3 Course-related data: Registration and login, course progress, settings, messages.
2. PURPOSES AND LEGAL BASIS
2.1 Site operation: Technical functioning, security, analytics – Legitimate interest.
2.2 Course access: Service delivery, customer support – Contract execution.
2.3 Orders & payments: Billing, complaints – Contract/legal obligation.
2.4 Marketing: Newsletters, offers – Consent.
2.5 Service improvement: Stats, UX – Legitimate interest.
3. THIRD-PARTY SERVICES
Hosting: Esmerise, WordPress/Joomla.
Payments: Stripe, PayPal.
Email marketing: iContact, AWeber.
Analytics/ads: Google Analytics (anonymized IP), AdSense, Facebook Pixel & Analytics.
Social media: Facebook, Instagram, TikTok, YouTube.
Messaging (optional): WhatsApp.
4. COOKIES
4.1 Types: Technical, preference, analytics (Google), marketing (Facebook/Google).
4.2 Management: Via browser, consent banner, opt-out tools.
5. DATA RETENTION
5.1 Browsing: Until the user requests deletion.
5.2 Course: 6 months + 5 years (legal).
5.3 Marketing: Until consent is withdrawn
5.4 Payment data: Handled by Stripe/PayPal – not stored on our servers.
6. DATA DISCLOSURE & TRANSFERS
Recipients: Tech providers, consultants, authorities.
Transfers: Possible to US/other non-EU countries, with GDPR safeguards.
No sale of data to third parties.
7. USER RIGHTS
Access, rectification, deletion, restriction, portability, objection, withdrawal of consent.
Contact: info@metabolicontrol.com – Reply within 30 days.
8. DATA SECURITY
SSL/TLS encryption, limited access, secure backups, monitoring, regular updates.
9. MINORS
Services for 18+ only. No data knowingly collected from minors.
10. POLICY CHANGES
Notified via site notice or email. Last update shown at top.
11. INTERNATIONAL NOTES
11.1 USA (CCPA): Right to know/delete data, no sale, non-discrimination.
11.2 Canada (PIPEDA): Informed consent, limited data, access/correction rights, complaints to commissioner.
12. DATA CONTROLLER
Dnatural srl, Via V. Vela 42, 10128 Torino, VAT 11778620010
info@metabolicontrol.com | +39 3892182347
13. CONTACT
Same as above for all privacy matters.