Privacy Policy

Information on the processing of personal data

(pursuant to Article 13 of EU Regulation 2016/679 - GDPR)

This Privacy Policy describes how personal data provided through the infant sleep consultation request form is collected and processed.

1. Data Controller

The Data Controller is:

Bianca Fantino E-mail: [Project.Neonato@gmail.com]

For any requests concerning the processing of personal data, you may contact the Data Controller at the e-mail address indicated above.

2. Data Collected

• Data submitted through the contact and booking form. The following information may be collected through the form: first and last name of the parent; e-mail address; telephone number (if requested); child's age; information regarding sleep, daily routines and family circumstances that may be relevant to the consultation; any additional information that the parent voluntarily chooses to provide.

If information concerning the child's health or other special categories of personal data is provided, such data will be processed exclusively to the extent necessary to carry out the requested consultation.

• Data required to purchase digital products (name, email). Payment information is managed directly by Stripe.

3. Purposes of Processing and Legal Basis

Personal data is collected exclusively for: assessing the consultation request; contacting the parent; organising and providing the infant sleep consultation; providing follow-up support, if included in the purchased service; complying with statutory tax and administrative obligations.

Data will not be used for any other purposes without specific consent.

4. Legal Basis for Processing

The processing of personal data is based on: the performance of pre-contractual measures requested by the data subject; the performance of the consultation agreement; compliance with legal obligations; the data subject's consent for any processing of special categories of personal data (Article 9 GDPR).

5. Methods of Processing

Personal data is processed using electronic and, where necessary, paper-based systems, adopting appropriate security measures to protect it against unauthorised access, loss or disclosure.

6. Disclosure of Data

Personal data may be disclosed exclusively to parties involved in the management of the service (for example, the accountant, e-mail service providers, video conferencing platforms or appointment management platforms), and only to the extent necessary to carry out the relevant activities.

Personal data will not be disclosed to the public.

7. Data Retention

Personal data will be retained for the period strictly necessary to provide the service and, subsequently, for the period required under applicable tax and civil legislation (10 years).

8. Rights of the Data Subject

The data subject may exercise the rights provided for under Articles 15-22 of EU Regulation 2016/679 at any time, including the right to: obtain access to their personal data; request the rectification of their personal data; request the erasure of their personal data where provided for by law; request the restriction of processing; object to processing where permitted; request data portability; withdraw consent at any time, without affecting the lawfulness of processing carried out prior to its withdrawal; lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).