Privacy Notice

The data controller is Luca Stella, with registered office at 26900 Lodi, Italy, reachable at steluc80@gmail.com. As controller, we determine the purposes and means of the processing of data collected through the Service.

• Assessment data: company name, sector, size and questionnaire answers. Purpose: to provide the Service, calculate results and generate the report. Legal basis: performance of the contract.
• Contact data: email address, if you provide it (e.g. to download the Premium Report or for support requests). Purpose: customer support and requested communications. Legal basis: performance of the contract / consent.
• Technical and usage data: IP address, device identifiers, browser type, pages visited and usage telemetry. Purpose: security, fraud prevention and product improvement. Legal basis: legitimate interest.
• Aggregate statistics: anonymous count of completed assessments, shown on the home page. It contains no identifying data.

• Service providers: cloud hosting and infrastructure (Lovable Cloud), analytics and support tools, which process data on our behalf according to instructions.
• Professional advisers: legal and accounting advisers, when necessary.
• Authorities: where required by law.

We retain data only as long as necessary for the stated purposes: assessment data for the duration of the Service, support data for 24 months. After that period, data is deleted or anonymised.

Under the GDPR you can exercise the rights of: access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent. You also have the right to lodge a complaint with the competent supervisory authority (in Italy, the Garante per la protezione dei dati personali). We respond to requests within 1 month. To exercise your rights write to steluc80@gmail.com.

Some providers may process data outside the EU/EEA. In that case the transfer takes place in compliance with the safeguards provided by the GDPR (standard contractual clauses or adequacy decisions).

We adopt appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and data minimisation.

The Service uses only technical cookies and storage essential to its operation (e.g. language preference, checkout state). We do not use third-party profiling or marketing cookies. You can manage or delete cookies from your browser settings.