Privacy Policy

This is an English translation of the Italian Privacy Policy. In case of any difference between the two versions, the Italian version prevails.

This Privacy Policy is provided under Article 13 of the European Regulation No. 679/2016 (GDPR) and applies to all Data collected through the website www.marcomunich.com. This Privacy Policy, together with the Cookie Policy, sets out the basis on which the User's personal Data is processed.

1. Data Controller

The Data Controller for the Data collected by this website is:
Marco Munich
Based in: Vicenza, Italy
Tax code (C.F.): MNCMRC83A19L840I
Email: consulenza@marcomunich.com

2. How Personal Data Is Processed

2.1 Personal Data provided or acquired will be processed according to the principles of fairness, lawfulness, transparency and confidentiality under the laws in force. The Controller takes appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of Personal Data.

2.2 Processing is carried out using IT and/or telematic tools, with methods strictly related to the purposes stated. Personal Data may be collected directly by the Controller or through third parties (for example the analytics and marketing services described in the following sections).

2.3 Browsing Data (IP address, pages visited, session length, device type) is collected automatically by the server and by analytics services, within the limits and in the ways described in this policy.

3. Disclosure and Communication of Data

Besides the Controller, the following may have access to the Data:

  • persons authorised to process the Data, specifically trained and involved in running the website (administrative, sales and marketing staff, system administrators);
  • external parties (third-party technical service providers, hosting providers, IT companies) appointed as Data Processors under Article 28 GDPR;
  • public or private parties that may access the Data in compliance with legal obligations.

4. Place of Processing

Data is processed at the Controller's place of business and/or at the premises of the third-party services listed in this policy. For further information, you can contact the Data Controller.

5. Transfer of Data Abroad

5.1 Some third-party services used by this website (in particular Google Analytics, Facebook Pixel, Cloudflare and Resend, described below) involve the transfer of personal Data to the United States of America. This transfer takes place in compliance with the safeguards provided by the GDPR (Articles 44-49), in particular through the Standard Contractual Clauses (SCC) approved by the European Commission and/or the providers' participation in the EU-US Data Privacy Framework.

5.2 Data may be disclosed to third parties to fulfil legal obligations, to comply with orders from public authorities or to exercise a right of the Controller before the judicial authorities.

6. Purposes of Processing

The User's Data is collected for the following purposes:

  • Technical purposes (legal basis: the Controller's legitimate interest): ensuring the website works properly and securely, and collecting the system logs and technical browsing data needed to provide the service;
  • Statistical analysis and service improvement (legal basis: the User's consent, given through the cookie banner): monitoring website traffic and analysing user behaviour in aggregate form to improve the content and services offered. This processing is carried out through Google Analytics 4 with Consent Mode v2;
  • Marketing and remarketing (legal basis: the User's consent, given through the cookie banner): measuring conversions and showing personalised ads to users who have visited the website. This processing is carried out through Facebook Pixel;
  • Tax and accounting obligations (legal basis: legal obligation): keeping data on commercial transactions for the period required by the laws in force;
  • Applications and collaboration requests (legal basis: pre-contractual measures taken at the Data Subject's request, Article 6(1)(b) GDPR): assessing applications sent through the form on /en/digital-partner/ and replying. Data processed: name, email, job, what the applicant sells, starting point and message. Retention: 12 months from receipt;
  • Replying to contact requests (legal basis: consent/performance of pre-contractual measures): handling messages received through WhatsApp or email.

7. Retention Periods

7.1 Data is kept for as long as necessary for processing in relation to the purposes described in this document (Article 5(1)(e) GDPR).

7.2 In particular:

  • Data collected for statistical analysis (Google Analytics) is kept for a maximum of 14 months on Google's servers, as configured in the service settings;
  • Data collected for marketing purposes (Facebook Pixel) is kept according to the policies of Meta Platforms Inc.;
  • The User's consent preferences (cookie banner) are stored locally on the User's device for 365 days;
  • Data collected for tax/administrative obligations is kept for the period required by civil and tax law (up to 10 years);
  • Data collected for marketing and profiling purposes will not be kept for more than 24 months from when consent was given.

7.3 The User can always ask for processing to stop or for their Data to be deleted.

8. Cookies

This website uses cookies and similar technologies. For detailed information on the cookies used, their purposes and how to manage them, please see the Cookie Policy.

9. Third-Party Services in Detail

The third-party services currently built into this website are described below.

9.1 Google Analytics 4: Statistical Analysis (Google LLC)

Google Analytics 4 is a web traffic analysis service provided by Google LLC. This website uses two GA4 properties (IDs: G-24JGZFXFEP and G-354107331) with Consent Mode v2 active. Without consent, Google Analytics runs in minimal mode: no analytics cookies are set and the IP address is not recorded. Only when the User gives explicit consent (through the cookie banner) are the tracking cookies and full collection of analytics data activated.

Google may transfer the collected Data to the United States. The transfer takes place in compliance with the safeguards provided by the GDPR through SCCs and/or the EU-US Data Privacy Framework.
Personal Data collected: Cookies, IP address (anonymised), Usage data.
Place of processing: USA – Google Privacy Policy
Opt-out: Google Analytics opt-out browser add-on

9.2 Facebook Pixel: Marketing and Remarketing (Meta Platforms Inc.)

This website uses the Facebook Pixel (ID: 1254522452438928), a tracking tool provided by Meta Platforms Inc. The Pixel is loaded only after the User's explicit consent through the cookie banner. The Pixel makes it possible to:

  • measure conversions from Facebook and Instagram ads;
  • create custom audiences to target ads;
  • optimise advertising campaigns.

The information collected is processed by Meta Platforms Inc. according to its own Privacy Policy. The Controller has no direct control over how Meta uses this data. The transfer to the USA takes place in compliance with the safeguards provided by the GDPR.
Personal Data collected: Cookies, IP address, Usage data.
Place of processing: USA – Meta Privacy Policy
Ad opt-out: Facebook ad settings

9.3 YouTube: Video Content (Google LLC)

Some pages of this website embed videos through YouTube in youtube-nocookie.com mode, which limits Google's use of cookies until the User actively interacts with the player. Google may still collect technical connection data. For full information, please see Google's Privacy Policy.
Personal Data collected: Cookies (only on interaction), IP address, Usage data.
Place of processing: USA – Google Privacy Policy

9.4 Google Fonts: Typefaces (Google LLC)

This website uses Google Fonts to display typefaces. The service is loaded through a CSS import from fonts.googleapis.com. When it loads, the User's browser contacts Google's servers and transmits the IP address. Google Fonts does not set persistent cookies.
Personal Data collected: IP address.
Place of processing: USA – Google Privacy Policy

9.5 WhatsApp: Contact (Meta Platforms Inc.)

This website contains direct contact links through WhatsApp (wa.link). Clicking these links starts a conversation in the User's WhatsApp app. The processing of data related to communication via WhatsApp is governed by the Privacy Policy of Meta Platforms Inc. The Controller collects no data through these links before the User voluntarily starts the conversation.

9.6 PayPal: Donations (PayPal Europe S.à.r.l. et Cie, S.C.A.)

This website contains a link to a donation page on PayPal (paypal.me). By clicking this link, the User is redirected to PayPal's website, which processes data according to its own privacy notice. The Controller does not handle or receive payment data through its website.
Place of processing: Luxembourg – PayPal Privacy Policy

9.7 Stripe: Prompt Pack Payments (Stripe Payments Europe, Ltd.)

For purchases of the Prompt Pack, this website uses Stripe as its payment processor. At the time of purchase the following data is collected: the buyer's email address and name. This data is needed to provide access to the product and to send the payment receipt. Payment data (credit card, etc.) is handled directly by Stripe and is neither passed through nor stored on the Controller's servers.
The buyer's personal data (email, name) is kept by the Controller for as long as access to the product lasts. The legal basis for processing is the performance of the contract (Article 6(1)(b) GDPR). The buyer can ask for their account to be deleted by writing to consulenza@marcomunich.com.
Place of processing: Ireland/EU – Stripe Privacy Policy

9.8 Cloudflare: Hosting and Application Form (Cloudflare, Inc.)

The website is hosted on Cloudflare Pages. Cloudflare provides the content delivery network (CDN), protection against bots and attacks, and runs the function that receives the application form. It acts as Data Processor under Article 28 GDPR.
Personal Data processed: IP address, technical connection data, form content in transit.
Place of processing: USA – Cloudflare Privacy Policy

9.9 Resend: Email Delivery (Resend, Inc.)

Applications sent through the form reach the Controller by an email sent with the Resend service. Resend acts as Data Processor under Article 28 GDPR.
Personal Data processed: name, email address, message content.
Place of processing: USA – Resend Privacy Policy

10. Security Measures

This website is protected by an SSL certificate and uses the HTTPS protocol to keep communications secure. The content of communications cannot be read or altered by third parties while in transit.

11. Rights of the Data Subject

The Data Subject may exercise the rights provided by Articles 7 and 15-22 of the GDPR. In particular, they have the right to:

  • access their Personal Data (Article 15);
  • have inaccurate Data corrected (Article 16);
  • have Data erased (the "right to be forgotten", Article 17);
  • obtain restriction of processing (Article 18);
  • receive the Data in a structured format and transmit it to another Controller (portability, Article 20);
  • object to processing on legitimate grounds (Article 21);
  • withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal;
  • lodge a complaint with the Italian Data Protection Authority, the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).

To exercise these rights, the Data Subject can contact the Controller at: consulenza@marcomunich.com

12. Changes to this Privacy Policy

The Controller reserves the right to make changes to this Privacy Policy at any time, informing Users on this page. You are advised to check this page periodically, using the date of the last update shown at the bottom as a reference. If the User does not accept the changes made, they must stop using this website and may ask the Controller to remove their Personal Data.

Privacy Policy updated October 2026