Informativa sulla privacy

Aggiornato: Novembre 3, 2026

1. Controller and Contact Information

The controller responsible for data processing on this website is:

Dr. Tina Koziol
Ceraluna Labs
Kiesbergstraße 128
49809 Lingen (Ems)
Germany

E-mail: ceraluna.info [at] gmail.com
Telefono: +49 176 81336624

If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us using the details above.

Informazioni che raccogliamo

2.1 Account Registration

When you create an account, we collect:

  • Email address (required)
  • Password (stored encrypted)
  • Name (optional)

Legal basis: Contract performance (Art. 6(1)(b) GDPR) – necessary to provide your account.

2.2 Social Login

If you register via Google or Facebook, we receive:

  • La tua email
  • Your name (as configured in your social account)
  • Profile picture URL (optional)

If you sign in with Apple, we receive your Apple user identifier and, if you choose to share it, your name and email address. Apple may give us a private relay address instead of your real one.

Legal basis: Consent (Art. 6(1)(a) GDPR) – you authorize the connection.

2.3 Payments and Purchases

When you make a purchase (e.g., ebook, subscription), we collect:

  • Accesso completo
  • Indirizzo email
  • Billing address
  • Payment transaction ID (we do not store card numbers)

Legal basis: Contract performance (Art. 6(1)(b) GDPR) and legal obligation for invoicing (Art. 6(1)(c) GDPR).

Contattaci

When you contact us, we collect:

  • Il tuo nome
  • La tua email
  • Your message content

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) – to respond to your inquiry.

2.5 Technical Data (Automatically Collected)

When you visit our website, our servers automatically log:

  • IP address (anonymized where possible)
  • Browser type and version
  • Operating system
  • Referrer URL
  • Pages visited and time spent
  • Date and time of access

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) – security and optimization.

2.6 Shared Pages (Anonymous Share Counter)

When you share a page, we count the share anonymously: we record which page was shared, the share method (for example WhatsApp or copy link), whether it went through, and the page language. We store no IP address, device or browser details, account or session identifier, and set no cookie for this.

2.7 Notifiche nell'app per iPhone

Se consenti le notifiche nell'app Cape Town Data, memorizziamo il token del dispositivo fornito da Apple, la lingua dell'app e quale servizio di consegna di Apple accetta il token, per poterti inviare novità dal sito. Il token da solo non ti identifica.

Se attivi gli avvisi per le tue zone nella tua dashboard e hai effettuato l'accesso all'app, colleghiamo il token al tuo account e usiamo questo collegamento solo per inviarti questi avvisi. Disattivare gli avvisi, uscire dall'app o eliminare l'account rimuove il collegamento. Conserviamo una traccia di ogni avviso inviato (la data, gli episodi che riguarda e il suo testo) per un massimo di 90 giorni, perché nessun episodio ti venga annunciato due volte. Puoi anche disattivare le notifiche dell'app nelle impostazioni del tuo iPhone.

Legal basis: Consenso (art. 6, par. 1, lett. a) GDPR), dato quando consenti le notifiche sul tuo iPhone e, per gli avvisi sulle zone, quando li attivi.

3. Purposes of Processing

Le informazioni che raccogliamo possono essere utilizzate per i seguenti scopi:

Finalità Legal Basis
Providing and managing your account Contract (Art. 6(1)(b))
Processing payments and issuing invoices Contract + Legal obligation (Art. 6(1)(b), (c))
Responding to inquiries Legitimate interest (Art. 6(1)(f))
Website security and abuse prevention Legitimate interest (Art. 6(1)(f))
Website analytics (Google Analytics - requires consent) Consent (Art. 6(1)(a))
Functional features (Mediavine Grow - favorites, enabled by default) Legitimate interest (Art. 6(1)(f))
Marketing and newsletters (self-hosted, delivered via Brevo - requires consent) Consent (Art. 6(1)(a))

4. Recipients and Processors

We share your data with the following categories of recipients:

4.1 Payment Processing

Stripe, Inc.

Purpose: Payment processing for purchases and subscriptions.
Data shared: Name, email, billing address, payment details.
Location: USA (EU-US Data Privacy Framework certified)
Informativa sulla privacy

4.2 Analytics (requires consent)

Google Analytics Opt-in

Purpose: Website usage analysis to improve our services.
Data shared: IP address (anonymized), browsing behavior, device info.
Location: USA (Standard Contractual Clauses)
Requires your explicit consent before activation.
Informativa sulla privacy

4.3 Functional & Marketing Services

Mediavine Grow Default On

Purpose: Functional features including favorites/bookmarking and social sharing.
Data shared: IP address, browsing behavior, account data (if registered).
Location: USA
Enabled by default as a functional feature. You can opt out via cookie settings.
Informativa sulla privacy

Brevo (Sendinblue GmbH) Opt-in

Purpose: Delivery of our self-hosted newsletter. Subscriber details are held in our own database; Brevo only transmits the emails.
Data shared: Email address, name and language preference (if provided).
Location: EU (Germany) - no transfer outside the EEA.
Informativa sulla privacy

4.4 Security Services

Google reCAPTCHA

Purpose: Bot prevention and form security.
Data shared: IP address, browser data, interaction patterns.
Location: USA
Informativa sulla privacy

4.5 Hosting and Infrastructure

Cloudflare, Inc.

Purpose: Content delivery, image optimization, security.
Data shared: IP address, request data.
Location: Global (EU-US Data Privacy Framework certified)
Informativa sulla privacy

4.6 Accounting

Lexware Office (Haufe-Lexware GmbH)

Purpose: Invoice management and bookkeeping.
Data shared: Invoice data (name, address, purchase details).
Location: Germany
Informativa sulla privacy

5. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), particularly in the USA. We ensure adequate protection through:

  • EU-US Data Privacy Framework: For providers certified under this framework (e.g., Stripe, Cloudflare).
  • Standard Contractual Clauses (SCCs): EU-approved contract terms for data transfers (e.g., Google).

You may request a copy of the applicable safeguards by contacting us.

Cookie e tecnologie di tracciamento

Utilizziamo cookie e tecnologie simili. Il nostro banner di consenso ti permette di scegliere quali categorie accettare:

Sfoglia per categoria Finalità Consenso richiesto
Necessari Funzionalità essenziali del sito web (sessione, sicurezza, memorizzazione del consenso) No (sempre attive)
Analisi Comprendere l'uso del sito web (Google Analytics) Sì
Marketing Social features (Mediavine Grow). Our newsletter signup sets no cookies. Sì

You can change your preferences at any time by clicking Come Controllare le Tue Preferenze sui Cookie.

For more details, see our Informativa sui Cookie.

7. Data Retention

Conserviamo i tuoi dati solo per il tempo necessario:

Data Type Retention Period
Account data Until you delete your account
Purchase/invoice data 10 years (German tax law requirement)
Contact form messages Until inquiry resolved, max. 3 years
Errore del Server 7 giorni
Registri dei consensi 3 years after last interaction
Dati analitici 26 mesi (impostazione predefinita di Google Analytics)

8. Your Rights

Come utente, hai i seguenti diritti:

  • Right of Access (Art. 15): Request a copy of your personal data.
  • Right to Rectification (Art. 16): Correct inaccurate or incomplete data.
  • Right to Erasure (Art. 17): Request deletion of your data ('right to be forgotten').
  • Right to Restriction (Art. 18): Limit how we process your data.
  • Right to Data Portability (Art. 20): Receive your data in a machine-readable format.
  • Right to Object (Art. 21): Object to processing based on legitimate interest.
  • Right to Withdraw Consent (Art. 7): Withdraw consent at any time (does not affect prior processing).

To exercise these rights, contact us at ceraluna.info [at] gmail.com.

Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority. The competent authority for us is:

The State Commissioner for Data Protection Lower Saxony
Prinzenstraße 5
30159 Hannover
Germany
Website: lfd.niedersachsen.de

Sicurezza dei dati

We implement appropriate technical and organizational measures to protect your data, including:

  • HTTPS encryption for all data transmission
  • Encrypted password storage (hashing)
  • Access controls and authentication
  • Regular security updates
  • CSRF protection on all forms

Modifiche a Questa Politica sui Cookie

Potremmo aggiornare la nostra Informativa sulla Privacy periodicamente per riflettere cambiamenti nelle nostre pratiche o per altri motivi operativi, legali o normativi. Ti incoraggiamo a rivedere questa politica periodicamente.

  • Posting the updated policy on this page
  • Updating the 'Last updated' date
  • Sending an email notification for material changes (if you have an account)

Contattaci

Se hai domande o dubbi riguardo alla nostra Politica sulla Privacy, ti preghiamo di contattarci all'indirizzo:

Dr. Tina Koziol
Ceraluna Labs
E-mail: ceraluna.info [at] gmail.com
Telefono: +49 176 81336624