Privacy notice_
This page explains what happens to your data when you use davidescalera.it: what I collect, why, how long I keep it and what you can ask me for. It is written under article 13 of the European Regulation 2016/679 (GDPR).
Who handles your data
The data controller is me, Davide Scalera, based in Milan, Italy. For anything about this notice or about your data, write to formazione@davidescalera.it and I will answer personally.
I have not appointed a data protection officer, as my activity does not fall within the cases where one is required.
What I collect
▸ What you enter in the forms: your name, your email, and your phone number if you choose to add it. The funded-training form also asks for your company name. Alongside the form I record which material you asked for, because that is what I have to send you.
▸ The message you write in the contact form. What goes in it is up to you: you don’t need to share sensitive details for me to understand your case.
▸ The anonymous feedback form on the home page is the exception: it asks for no name, no email and no employer, and records nothing that identifies you. All that reaches me is the text you write, your role and the kind of company, and I may publish that sentence on the site as it is, without a name. If you would rather I did not, say so in the text.
▸ Technical data that the hosting server records when a page is opened, such as the IP address, the browser and the page requested. It keeps the site running and protects it from abuse.
The site uses no profiling cookies, no third-party statistics, and does not follow you around other sites. The only thing it stores in your browser is the language you picked, so the next visit opens in the right one. That stays on your device and never reaches me.
Why I process it, and on what legal basis
▸ To answer you when you write, and to prepare work we might do together. I rely on your request, which is a pre-contractual step, and on the consent you tick in the form (articles 6.1.b and 6.1.a).
▸ To send you the material you asked for, the trainer profile or the talk abstracts, and the link to the funded-training assessment. Here the basis is the consent you tick in the form (article 6.1.a), and you can withdraw it at any time.
▸ To keep the site running and to retain the records the law requires me to keep, such as accounting records if we end up working together. The basis is my legitimate interest in a secure site, and legal obligation (articles 6.1.f and 6.1.c).
Providing your data is optional. Without it I cannot answer you or send you what you asked for, and that is the only consequence.
Who else sees it
I don’t sell your data and I don’t pass it to anyone for advertising. I handle it myself, with two suppliers acting as processors on my instructions.
▸ Netlify, which hosts the site and collects the form submissions.
▸ Resend, which sends the automated emails, such as the one carrying the material you requested.
The funded-training form goes through the systems of Update Labs, which is my own company: the data controller is still the same person, me.
Both suppliers are based in the United States, and the transfer relies on the standard contractual clauses approved by the European Commission. Beyond them, your data may be seen by my accountant and by the advisers who assist me, where legal obligations require it.
How long I keep it
Contact requests and form data stay with me for twenty-four months from our last exchange, then I delete them. If we work together in the meantime, the records of that work are kept for as long as the law requires, which for accounting purposes in Italy is ten years.
Server logs are kept for the short period set by the hosting service and serve security only.
What you can ask me for
You can ask to see the data I hold about you, to correct it, to delete it, to restrict how it is used, to receive in a file what you gave me, and you can object to the processing. Where I asked for your consent you can withdraw it at any time, and that does not make what I did beforehand unlawful.
An email to formazione@davidescalera.it is enough. I reply within a month; if the request is complex I will tell you and ask for more time, as the Regulation allows.
If you believe I am handling your data badly, you can complain to the Italian data protection authority, Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, or to the supervisory authority of the country you live in, or go to court.
Children, automated decisions, changes
The site addresses professionals and companies: I do not knowingly collect data from anyone under sixteen.
I make no automated decisions about you and I do no profiling.
If I change this notice I change the version and the date below, and the page stays reachable from the footer of every page.
version 1 · 18 September 2026