Privacy Policy

// 01

Data controller

Susan Nasif Obeid-Adorisio, PhD, operating the STaiMIC initiative, Matera, Basilicata, Italy. Privacy contact: admin@staimic.it

// 02

What we collect and why

• Email and direct messages: your name, email address or X handle and the content of your message, used solely to reply to your enquiry. Legal basis: steps taken at your request before a contract, and our legitimate interest in replying (Article 6(1)(b) and (f) GDPR).
• Enrolment and payment: name, email and payment confirmation, used to deliver training, provide recordings and issue invoices. Payments are processed by PayPal, which acts as an independent controller; we never see or store card details. Legal basis: performance of a contract and legal obligations (Article 6(1)(b) and (c)).
• Scholarship applications: the eligibility proof you choose to provide, used only to assess the application and deleted once a decision is made.
• Technical server logs: when you visit, our hosting provider records technical data such as your IP address, browser type and the pages requested, to deliver the site and keep it secure. These logs are kept only as long as needed for that purpose and are not used to profile you. Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR). The site uses no analytics or tracking cookies; see our Cookie Policy.

// 03

How long we keep data

• Emails and messages: 12 months
• Enrolment records and invoices: 10 years, as required by Italian tax law
• Scholarship proof: until a decision is made

// 04

Who processes data for us

Our website is hosted by Vercel Inc., and its text is managed through WordPress.com, operated by Automattic Inc. Payments are handled by PayPal. Where data is transferred outside the European Economic Area, transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or adequacy decisions. We do not sell personal data.

// 05

Your rights

You may request access, rectification, erasure, restriction, portability, or object to processing (Articles 15 to 22 GDPR), and withdraw consent at any time, by writing to admin@staimic.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).