Notice
Cookie Policy
Last updated: September 9, 2026 — Version 1.0
This notice is provided pursuant to Articles 12 and 13 of EU Regulation 2016/679 (GDPR), Article 122 of Italian Legislative Decree 196/2003 (Privacy Code) and the Guidelines on cookies and other tracking tools of the Italian Data Protection Authority (measure no. 231 of June 10, 2021). It describes which cookies and tracking tools are used by fireofpassion.it, for what purposes, and how you can manage or withdraw your consent at any time.
1. Data Controller
The Data Controller is M.L.C. — Multi Lab Concept s.r.l.s., based in Via Fabio Filzi, 18 — 21020 Taino (VA), Italy, represented by Lisa Raco.
VAT number: 03640170126
Email: info@fireofpassion.it — Phone: +39 348 843 3747
2. What cookies and tracking tools are
Cookies are small text files that visited websites send to the user's device, where they are stored to be sent back to the same sites on the next visit. Alongside cookies, there are similar technologies (local storage, session storage, pixels, fingerprinting) that allow information to be stored or read on the device: this notice applies to all these technologies.
Cookies can be first-party, if installed by the Controller, or third-party, if installed by other parties. Based on their duration, they are divided into session cookies, deleted when the browser is closed, and persistent cookies, stored for the period indicated below.
3. Categories of cookies used
3.1 Technical and necessary cookies (no consent required)
These are strictly necessary to provide the requested service: they enable navigation, authentication to the reserved area, security and the storage of your cookie choices. Under Art. 122 of the Privacy Code, they do not require consent and cannot be disabled on this site.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| fop-cookie-consent | fireofpassion.it (local storage) | Stores your cookie preferences and the version of the notice accepted. | Persistent (until revoked or manually deleted) |
| fop-visitor-id | fireofpassion.it (local storage) | Random pseudonymous identifier used solely to link the consent record to the proof required by the GDPR. | Persistent |
| sb-*-auth-token | Supabase (infrastructure provider) | Maintains the login session for the reserved and administrative areas. | Session / until logout |
3.2 Analytics cookies (consent required)
These collect aggregated information about site usage: pages visited, time spent, traffic source, errors encountered. They help us improve content and usability. They are only installed after your consent and are not active if you choose "Reject non-necessary".
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| Traffic measurement cookies | Analytics provider selected by the Controller | Aggregated statistics on visits and browsing behavior, with truncated IP where available. | Up to 13 months |
3.3 Marketing and profiling cookies (consent required)
These allow tracking of browsing across multiple sites and devices to build interest profiles and show relevant advertising, including via social platforms. They are only installed with specific and explicit consent.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| Advertising pixels and cookies (e.g. Meta, Google Ads) | Meta Platforms Ireland Ltd. / Google Ireland Ltd. | Campaign measurement, retargeting and creation of custom audiences. | Up to 13 months |
3.4 Third-party cookies
Some site features may call external services that install their own cookies. These parties act as independent controllers: we invite you to review their respective notices.
- Vimeo / YouTube — playback of course videos (technical and, if enabled, statistical or marketing cookies).
- Google Maps — display of the workshop map.
- Stripe — payment processing and fraud prevention (cookies necessary for the requested operation).
- Supabase — authentication and database infrastructure (data processor).
4. Legal basis and purposes
- Necessary cookies: legitimate interest and performance of the service requested by the user (Art. 6.1(b) and (f) GDPR; Art. 122 Privacy Code).
- Analytics and marketing cookies: consent of the data subject (Art. 6.1(a) GDPR), freely given, specific and revocable.
5. Recording and retention of consent
To be able to demonstrate that valid consent was collected (Art. 7.1 GDPR), we record in a dedicated register: a pseudonymous visitor identifier, the categories accepted or rejected, the action taken, the version of the notice, the referring page, the language and browser type, with date and time. We do not record your name or other direct identifying data, except for the link to your account if you are logged in. This data is retained for a maximum of 24 months and is accessible only to authorized administrative staff.
6. How to manage or withdraw consent
You can change or withdraw your choices at any time by clicking the button below or the "Manage cookies" link in the footer of every page. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Alternatively you can manage or delete cookies from your browser settings (Chrome, Safari, Firefox, Edge). Disabling technical cookies may make some site features, such as access to the reserved area, unavailable.
7. Transfer of data outside the EU
Some third-party providers may process data in countries outside the European Economic Area. In such cases the transfer takes place on the basis of adequacy decisions of the European Commission or standard contractual clauses, with supplementary measures where necessary.
8. Data subject rights
You may exercise, at any time, the rights set out in Articles 15-22 of the GDPR (access, rectification, erasure, restriction, objection, portability and withdrawal of consent) by writing to info@fireofpassion.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
9. Updates
This Cookie Policy may be updated for regulatory changes or changes to the services used. In case of substantial changes, your consent will be requested again. For the processing of other personal data, see the Privacy Policy.