Last updated: 27 August 2026
Editorial transparency: this notice was prepared with the assistance of artificial-intelligence systems and underwent technical review. It is not legal advice, and independent professional review remains recommended.
This notice explains how saveriocanepa.it processes personal data and uses cookies or similar technologies. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”).
1. Controller and contacts
The Data Controller is Francesco Saverio Canepa, Via Sardegna 50, 00187 Rome, Italy, Italian Tax Code CNPFNC69C24H591E.
Contacts: info@saveriocanepa.it — certified e-mail francescosaverio.canepa@pec.it — Tel. +39 06 565488726. No DPO has been appointed.
2. Data, purposes and legal bases
| Processing | Purpose and data | Legal basis | Indicative retention |
|---|---|---|---|
| Browsing and security | IP address, date/time, user-agent, technical and firewall logs used to deliver the site and prevent abuse. | Legitimate interest in security and service continuity, Art. 6(1)(f) GDPR. | Usually 7–30 days; longer where needed to investigate an incident. |
| Contact requests | Name, e-mail, optional telephone, message and anti-spam metadata used to answer the request. | Pre-contractual steps or performance of a relationship, Art. 6(1)(b). | Up to 12 months after closure, unless contractual or defence needs require longer. |
| Accounts and members area | Registration, login, profile and activity data required to manage an Ultimate Member account. | Performance of the requested service, Art. 6(1)(b); security, Art. 6(1)(f). | For the account’s lifetime and afterward where required for obligations or disputes. |
| Newsletter and lead magnets | E-mail, optional name, signup source, date/time, IP and user-agent; generation and delivery of personalised materials. | Consent, Art. 6(1)(a), withdrawable at any time. | Until withdrawal or unsubscribe. Personalised PDFs are automatically removed after about 30 days; a suppression record may be retained to honour withdrawal. |
| Analytics and marketing | Usage data, events, conversions, sessions and technical performance metrics (Core Web Vitals, including Largest Contentful Paint and its timing components) through Google Analytics 4, Google Ads and Microsoft Clarity. The home-page performance-monitoring parameters are limited to page category, device class and technical timings; they do not include page text or data entered in forms. | Consent, Art. 6(1)(a). | GA4 configured for up to 14 months; Clarity up to 90 days; other periods follow provider settings. |
| External and AI functionality | When enabled: voice, text, transcripts and technical data needed for interaction with Aurora–ElevenLabs; loading of Google Maps or YouTube videos. | Consent, Art. 6(1)(a). | For Aurora, the duration configured in the ElevenLabs account; if not reduced, the provider documents default retention of up to 2 years. Other services follow provider-declared periods. |
3. Services and recipients
The administrative and technical management of the site and its infrastructure is carried out directly by the Controller, Francesco Saverio Canepa.
Data may also be processed, where necessary, by:
- Brevo / Sendinblue SAS, newsletter and requested-message delivery;
- Google Ireland/Google LLC, reCAPTCHA, Analytics 4, Google Ads, Maps and YouTube;
- Microsoft Ireland Operations Ltd., Microsoft Clarity;
- ElevenLabs, technology for the Aurora voice and conversational artificial-intelligence assistant, only after consent;
- technical providers, advisers and public authorities where necessary or required by law.
Depending on the service, providers act as processors or independent controllers. Links to Calendly, WhatsApp, LinkedIn and other external sites lead to platforms governed by their own privacy notices.
4. Transfers outside the EEA
Some providers may process data in the United States or other countries outside the European Economic Area. Depending on the provider and processing, transfers rely on adequacy decisions such as the EU-US Data Privacy Framework, Standard Contractual Clauses and supplementary safeguards. Please consult each provider’s current notice for details.
5. Required and optional data
Technical and security data are required for the site to operate. Fields marked as required are needed to handle a request or subscription. Analytics, marketing and external functionality are optional and remain blocked until the visitor makes a choice.
6. Artificial intelligence and transparency
The website provides “Aurora”, a voice and conversational assistant based on artificial intelligence and delivered through ElevenLabs technology. When you use Aurora, you are interacting with an AI system, not a person. The service is optional and is loaded only after you enable “External and AI functionality” in Privacy choices.
Content provided by voice or text, the related transcripts and necessary technical data may be processed by ElevenLabs to understand the request and generate a response. Before starting, the widget states that communications are recorded, stored and shared with the technical service providers required for the feature. Retention depends on the account configuration; where no shorter period is configured, ElevenLabs documents a default period of 2 years for transcripts and recordings. You may ask the Controller for access or erasure.
Do not enter special-category personal data, criminal-offence data, credentials or confidential information. Responses are generated automatically, may be inaccurate and do not replace human review or professional advice.
Texts generated or modified using AI and published to inform the public on matters of public interest are subject to substantive human review under the Controller’s editorial responsibility or, where no such review takes place, are clearly disclosed as generated or modified using AI. Audio, video or image content constituting a deep fake is disclosed clearly and accessibly at the time of first exposure.
This information complements the details on purposes, recipients, transfers and retention provided in the preceding sections. Transparency information is also displayed directly in the Aurora interface before first contact.
7. Your rights
You may request access, rectification, erasure, restriction, portability and objection, and withdraw consent without affecting processing carried out before withdrawal. Contact info@saveriocanepa.it or the certified e-mail above.
You may lodge a complaint with the Italian Data Protection Authority, Piazza Venezia 11, 00187 Rome.
8. Children, security and updates
The site is not directed at children. Measures include HTTPS, an application firewall, access controls, updates, backups and anti-abuse protections. This notice may change when services or laws change; the date above identifies the current version.
Cookie Policy
Choices and prior blocking
On the first visit you may accept all, reject non-essential technologies or customise categories. Google Analytics, Google Ads, Microsoft Clarity, Aurora/ElevenLabs and external Google Maps/YouTube content remain blocked until the relevant consent is given. Aurora is identified as an AI system before the first interaction.
Manage or withdraw cookie preferences. Changes take effect when the page reloads.
Categories used
| Category | Main technologies | Purpose | Indicative duration |
|---|---|---|---|
| Necessary | WordPress/Ultimate Member cookies, security, reCAPTCHA, sc_consent_v1 | Sessions, login, form protection and remembering choices. | Session or technical duration; consent preferences for 6 months. |
| Preferences | sc_nl_dismissed | Remembering newsletter-banner dismissal or subscription. | 30 days; up to 12 months after subscription. |
| Analytics and marketing | Google Analytics 4, Google Ads, Microsoft Clarity | Statistics, conversions, performance diagnostics (Core Web Vitals), experience improvement and campaign measurement. | Only after consent; up to 14 months for GA4 and 90 days for Clarity, plus provider-declared periods. |
| External and AI functionality | Aurora/ElevenLabs, Google Maps, YouTube | Conversational AI assistant, maps and videos. | Only after consent; Aurora follows the account-configured period and, if not reduced, the provider’s documented default of up to 2 years. |
You can also delete cookies through your browser settings. Deleting the preference cookie will cause the consent request to appear again.
Controller publishing integrations
The Controller may use YouTube and Meta APIs to publish his own content to his own channels. These administrative integrations do not collect visitor data; authorisation tokens are stored server-side. For requests concerning these integrations, contact info@saveriocanepa.it.
