Privacy notice

Who processes your data

The data controller is Matteo Tomei, based in Torino. For any request about your data you can write to matteo.tomei.mt@gmail.com: I answer personally, not through an automated form.

What data I collect

Only the following, and for the reasons stated next to each.

• Contact form: your name, email, phone if you give it, school level, subject and the text of your message. Used to reply to you and to understand what you need.
• IP address in pseudonymised form: never in the clear. Used to limit automated spam.
• Browsing statistics: pages viewed, referrer, device type. No cookies, and no identifier that survives the day.
• If you have an account for the course notes: email, name, and a record of which pages you opened and when.
• On the course notes themselves: your identifying details are stamped into the page as a watermark.

Why I process it

• To reply when you write to me: your consent, given by submitting the form.
• To deliver lessons and give access to the course notes: performance of an agreement between us.
• To protect teaching material from unauthorised distribution, and for site security: my legitimate interest, balanced by collecting as little as possible.
• To know whether the site works: legitimate interest, using anonymous statistics that cannot be traced back to you.

How long I keep it

• Contact requests: 24 months from our last exchange.
• Reading log for the course notes: 90 days.
• Security events: 180 days.
• Detailed browsing statistics: 90 days. Aggregate totals, which concern no one in particular, are kept.

Who else sees it

Nobody, apart from the technical providers that keep the site running. I do not sell, share or trade data with anyone.

• Vercel — hosts the site.
• Supabase — stores the data, on servers inside the European Union.
• Resend — delivers the emails the site sends.
• Sentry — reports technical errors, with personal data stripped out.

If you are under 14

The account for the course notes must be held by a parent or guardian: it is the parent who receives the invitation and gives consent. If you are writing to me yourself for information, that is fine — but before lessons start I speak with an adult in any case.

What you can ask me for

You can ask to see the data I hold about you, to correct it, delete it, restrict its use, receive it as a file, or object to the processing. Write to matteo.tomei.mt@gmail.com and I will answer within thirty days. If you believe I am getting it wrong, you can contact the Italian Data Protection Authority.