Privacy policy
How we handle the personal data collected through www.tonibelfatto.it.
This notice is provided under Article 13 of Regulation (EU) 2016/679 (GDPR) and covers the website www.tonibelfatto.it. It does not cover third-party websites reached through links, which have their own policies.
Data controller
Belfatto Group S.r.l., P.IVA 00349910695, Vico Montaniera 42 bis, 66043 Casoli (CH), Italy. For any request about your data, write to info@belfattolab.it or to the registered office.
What data we process
- Contact and booking form data: first and last name, phone number, email address, your message (if you write one) and the choices made in the form, such as the studio, treatment or course of interest.
- Browsing data: the systems that run the website record some technical data (IP address, date and time of the request, page visited, browser type) for security and to keep the site working properly.
Why we process it
- To answer your requests for information and arrange consultations, treatments or course enrolments. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
- To protect the website against abuse and fraudulent submissions. Legal basis: the controller’s legitimate interest (Art. 6(1)(f) GDPR).
We do not use form data for newsletters or marketing. Your name and at least one contact detail (phone or email) are needed to get back to you: without them we cannot follow up on your request.
How we process it and for how long
Requests sent through the forms are stored in the website database and forwarded by email to the people in charge of answering (Belfatto Lab reception or the Academy training office). Processing is electronic, with no automated decision-making or profiling.
We keep the data for as long as needed to handle the request; if it leads to a relationship (a treatment, a course) we keep it for the period required by law. Technical browsing data is kept for a limited period.
Who can see it
The controller’s authorised staff and the providers that run technical services on its behalf (website hosting, email), appointed as data processors. The data is not disclosed or transferred outside the European Union.
Cookies
The website only uses technical cookies needed for it to work: see the cookie policy for details.
Your rights
You can ask at any time for access to your data, rectification, erasure, restriction of processing and portability, or object to processing (Articles 15–22 GDPR), by writing to the controller. We reply within 30 days. You also have the right to lodge a complaint with a supervisory authority (in Italy, the Garante per la protezione dei dati personali).
Last updated: October 2026.