Luparia StudioPrivacy policy
Last updated: 20 October 2026
This policy explains which personal data we process on lupariamastering.com, why, and what your rights are, under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
Controller
Giancarlo Daniel Quiroz Leonetti (sole proprietorship), trading as Luparia Studio. Via Piccola Fiuggi 4, 03011 Alatri (FR), Italy. VAT number IT 03163310604. Contact: [email protected].
What data we process and why
| When | Data | Purpose and legal basis |
|---|---|---|
| Visiting the site | Technical data: IP address, browser, page visited | Serving the site and protecting it from abuse (legitimate interest, Art. 6(1)(f)). We use no analytics or advertising cookies. Fonts are served from our own server: no connection to Google. |
| If you choose a language | A lang cookie with the language (es, it or en), for one year | Remembering your choice. It is a technical cookie: no consent is needed. |
| Booking on TidyCal | Name, email, what you write when booking and, for paid sessions, payment details | Arranging the call or session (pre-contract steps and performance of a contract, Art. 6(1)(b)) and keeping accounts (legal obligation, Art. 6(1)(c)). Card details are handled by TidyCal’s payment processor; we never see them. |
| Zoom sessions | The name and email you join with | Holding the session (performance of a contract, Art. 6(1)(b)). We never record a session without telling you first. |
| If you write to us or send audio | Your email, your message and your files | Replying and doing the work you hire us for (Art. 6(1)(b)). Your files are only used for your project. |
We do not sell your data, do not use it for advertising and make no automated decisions about you.
Who we share it with
Only with the providers we need in order to work:
- Cloudflare (website hosting and security). Cloudflare, Inc., USA.
- TidyCal (bookings and session payments). AppSumo Originals, LLC, USA.
- Zoom (video calls). Zoom Communications, Inc., USA.
- Proton (email). Proton AG, Switzerland.
- Our tax advisor and the Italian Revenue Agency, when required by law.
When data leaves the EU, it is protected by the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. Switzerland is covered by a Commission adequacy decision.
Links to Instagram and TidyCal lead to third-party services with their own privacy policies.
How long we keep it
Billing data, for as long as tax law requires (in Italy, 10 years). Emails and files, for the duration of the work and any follow-up. Technical website logs, a few days. The language cookie, one year.
Your rights
You can ask to access, correct or delete your data, restrict or object to its use, or receive it in a portable format. Write to [email protected]. If you are not satisfied with our reply, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority in your country.