Who is responsible for my personal data?
The data controller is Giulia Pulizzotto, owner of Italianlesson.online. Her address is von-der-Pfordten-Str. 12, 80687 Munich, Germany. You contact her at giulia@italianlesson.online for any privacy-related questions or requests.
What personal data does Italianlesson.online collect?
Italianlesson.online collects identity data, contact data, payment data, communication data, usage data, and technical data. Identity data includes your first and last name. Contact data includes your email address and phone number. Payment data includes billing information and PayPal or bank transfer details. Communication data includes messages sent via email, WhatsApp, or Microsoft Teams. Usage data tracks how you interact with the website. Technical data includes your IP address, browser type, and device information.
Why is my personal data processed?
Your data is processed for course delivery, communication, payment processing, service improvement, and legal compliance. Course delivery includes scheduling, providing lesson materials, and tracking your progress. Communication includes responding to your inquiries and sending course proposals. Payment processing handles payments and refunds. Improvement activities analyze and enhance teaching services. Legal compliance fulfills obligations under German and European law.
What is the legal basis for processing my data?
Your data is processed based on your consent, contract performance, legal obligations, and legitimate interests. You give explicit consent for specific processing activities. Contract performance means processing is necessary to deliver the lessons you signed up for. Legal obligations require data retention for tax purposes. Legitimate interests cover activities like improving services.
What cookies does the site use?
Italianlesson.online uses essential cookies and optional analytics cookies (Matomo). Essential cookies ensure basic site functionality. Matomo is a privacy-friendly analytics tool hosted on matomo.germanlesson.online. It anonymizes IP addresses and does not share data with third parties.
You control your cookie preferences. Upon your first visit, a cookie banner asks you to either accept analytics cookies or reject them. Analytics scripts load only after you accept. Your choice is stored for 30 days. You can change your preference at any time by clearing your browser cookies and reloading the site.
What third-party services receive my data?
Your data is shared with hosting and email infrastructure providers, analytics tools, and communication platforms. The website is hosted on InMotion Hosting (US-based). Course-related emails are sent through their SMTP servers. Analytics are provided by Matomo, self-hosted on the same InMotion Hosting infrastructure. Communication tools include WhatsApp and Microsoft Teams for lesson-related contact. All third-party providers are contractually bound through Data Processing Agreements and Standard Contractual Clauses where required.
Is my data transferred outside the European Union?
Yes. Some of your data may be transferred to the United States. InMotion Hosting is a US-based company. Transfers are safeguarded through the EU-US Data Privacy Framework or Standard Contractual Clauses as required by the GDPR. You can request a copy of these safeguards by contacting Giulia.
How long is my personal data stored?
Customer data is kept for the duration of your lessons plus 3 years. Payment data is retained for 10 years as required by German tax law. Communication data is kept for 2 years after your last interaction. Analytics data is retained for 26 months. Different data types have different retention periods based on legal and operational requirements.
What are my GDPR rights?
You have the right to access, correct, delete, restrict, and export your data. You also have the right to object and withdraw consent. You request a copy of your data, ask for corrections, or demand deletion. You restrict processing or request a portable copy. You object to marketing uses or withdraw previously given consent. Email Giulia at giulia@italianlesson.online to exercise any of these rights. She responds within 30 days.
Children’s privacy
Italianlesson.online offers Italian courses for children aged 6–14, taught by Giulia via live video. All enrollment is handled by parents or guardians. No personal data is knowingly collected directly from children through the website. If Giulia receives a child’s personal information without verifiable parental consent, she will delete it promptly.
Parents who enroll their child provide the child’s name, age, and language background for the purpose of tailoring lessons. Parents may exercise any GDPR right (access, correct, delete, etc.) on behalf of their child by emailing giulia@italianlesson.online.
How is my data protected?
Italianlesson.online uses secure servers, encrypted data transmissions (SSL/TLS), and restricted access to personal data. Technical and organizational measures prevent unauthorized access, alteration, disclosure, or destruction. These measures comply with industry standards for data security.
Where do I file a complaint about data protection?
You lodge a complaint with the Bayerisches Landesamt fur Datenschutzaufsicht (BayLDA) in Ansbach, Germany. The address is Promenade 27, 91522 Ansbach, Germany. You file a complaint if you believe your data protection rights have been violated.
How do I contact the data controller?
Email Giulia at giulia@italianlesson.online or write to von-der-Pfordten-Str. 12, 80687 Munich, Germany. You also call +49 152 0722 0246. Giulia responds to data protection requests within 30 days.
Last updated: November 28, 2026