Fabio Gorni
FABIO GORNI Education

Privacy Policy

Last updated: October 2026

1. Data Controller

The Data Controller is Dr. Fabio Gorni, located at Via dei Gracchi 8, 20149 Milan, Italy.
VAT Number: 08324930158
Email: eventi@medideas.it

2. Data Collected

The website collects the following categories of personal data:

  • Contact data: name, surname, email address, phone number, voluntarily provided through contact and registration forms.
  • Navigation data: IP address, browser and device type, pages visited, referring site and the parameters of the advertising campaign the visit comes from. They are collected by our server, without cookies, for statistics and advertising measurement (see section 6) and, only with consent, through the Meta cookies described in the Cookie Policy.
  • Fiscal data: tax code, VAT number, billing address, provided during the course registration process.

3. Purpose of Processing

Personal data is processed for the following purposes:

  • Responding to course information requests
  • Managing course registrations and related payments
  • Sending communications about courses and events
  • Statistical analysis of web traffic
  • Measuring the effectiveness of our advertising campaigns on Facebook and Instagram
  • Legal compliance and tax obligations

4. Legal Basis

Data processing is based on:

  • Consent of the data subject (Art. 6.1.a GDPR) for Meta marketing cookies and promotional communications
  • Contractual performance (Art. 6.1.b GDPR) for managing course registrations
  • Legitimate interest (Art. 6.1.f GDPR) for responding to contact requests, for cookieless traffic statistics and for the advertising measurement described in section 6
  • Legal obligation (Art. 6.1.c GDPR) for tax compliance

5. Data Retention

Personal data is retained for the time strictly necessary for the purposes for which it was collected, and in any case within the limits established by applicable regulations. Fiscal data is retained for 10 years as required by law.

6. Data Sharing

Personal data is not sold to third parties. It may be shared with:

  • Technical service providers (hosting, email) necessary for the website's operation
  • Google Analytics 4 (Google Ireland Ltd.), for traffic statistics. The data is sent by our server, without cookies, tied to a random browser identifier.
  • Amplitude (Amplitude, Inc., with data stored in the European Union), for site usage statistics. The data is sent by our server, without cookies; when a form is submitted, it includes the email address.
  • Meta (Meta Platforms Ireland Ltd.), to measure the effectiveness of campaigns on Facebook and Instagram, as described below
  • Competent authorities when required by law

Advertising measurement (Meta)

When a visitor opens a course page, sends an information request or registers for a course, our server informs Meta through the Conversions API, regardless of the cookie choice. With the event we send the IP address, the browser type and, for visits from one of our ads, the click identifier. For requests and registrations we also send email, name, phone, province and country, or billing city, postcode and country, always pseudonymised (hashed before sending). For registrations we also send the amount.

Meta uses this data to match the event to a Facebook or Instagram user and to measure and optimise our ads. We do not use it for automated decisions about the data subject. Meta may transfer the data to the United States under the EU-U.S. Data Privacy Framework.

The browser sends data to Meta (Meta Pixel and its cookies) only if the visitor accepts them in the cookie banner. You can object to the server-side sharing at any time by writing to eventi@medideas.it (Art. 21 GDPR).

7. Data Subject Rights

In accordance with the GDPR, data subjects have the right to:

  • Access their personal data
  • Request rectification or erasure of data
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time
  • Lodge a complaint with the Data Protection Authority

To exercise these rights, contact: eventi@medideas.it

8. Security

We adopt appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or destruction. The website uses encrypted HTTPS connections.

9. Changes

We reserve the right to update this policy. Changes will be published on this page with an indication of the last update date.