Privacy Policy

1. Data Controller

The Data Controller is M.L.C. — Multi Lab Concept s.r.l.s., based in Via Fabio Filzi, 18 — 21020 Taino (VA), Italy, represented by Lisa Raco.
VAT number: 03640170126
Email: info@fireofpassion.it — Phone: +39 348 843 3747

2. Types of data collected

• Browsing data: IP address, browser type, operating system, pages visited, collected automatically while browsing.
• Data you provide: first name, last name, email, phone number and the content of messages sent through the contact, masterclass booking or quote request forms.
• Account data: when registering for the reserved area, email and (encrypted) password.
• Payment data: handled directly by Stripe; we do not store credit card data on our servers.
• Cookies: see the Cookie Policy.

3. Purposes of processing

• Provide the requested services (courses, masterclasses, quotes, support)
• Manage user accounts, purchases and Master Pass subscriptions
• Respond to contact requests
• Comply with legal obligations (invoicing, tax)
• Improve browsing experience through anonymous analytics (with consent)

4. Legal basis

Processing is based on: (a) performance of a contract or pre-contractual measures (Art. 6.1.b GDPR); (b) the data subject's consent for marketing purposes and non-necessary cookies (Art. 6.1.a); (c) compliance with legal obligations (Art. 6.1.c); (d) the Controller's legitimate interest in ensuring website security (Art. 6.1.f).

5. Data retention

Data is retained only for the time strictly necessary for the purposes for which it was collected, and in any case within the periods required by tax and civil law. Account data is deleted upon the user's request.

6. Data recipients

Data may be shared with providers acting as Data Processors, including:

• Supabase (database hosting and authentication)
• Stripe (payment processing)
• Vimeo (video course hosting)
• Email service providers for transactional emails
• Tax and legal consultants, where necessary

7. Transfer of data outside the EU

Some providers may process data outside the EU: in such cases the transfer takes place on the basis of Standard Contractual Clauses approved by the European Commission or other adequate safeguards provided by the GDPR.

8. Data subject rights

You may exercise, at any time, the rights set out in Articles 15-22 of the GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent. To exercise them, write to info@fireofpassion.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

9. Changes

The Controller reserves the right to amend this notice at any time. Changes will take effect from the date they are published on the site.