(by Article 13 of EU Regulation 2016/679 – GDPR)

1. Data Controller

The data controller is:
The professional Matteo Zaralli, owner of VR-AI Academy.
Registered address: Via Bufolareccia, 3
Email contact: matteozaralli@gmail.com
VAT / Tax ID: 03314250592
Legal representative: Matteo Zaralli

2. Types of Data Collected

While browsing our website and purchasing the online course, we collect and process the following categories of personal data:

• Personal data: first name, last name

• Contact information: email address, phone number (if required)

• Billing information: only if needed for invoicing

• Payment data: processed securely by third-party platforms (e.g., Stripe, PayPal). The professional Matteo Zaralli, owner of VR-AI Academy does not access or store credit card details

• Technical data: IP address, browser type, navigation data (via cookies)

3. Purpose of Data Processing

Personal data is processed for the following purposes:

• To manage and fulfill your course purchase

• To provide access to the purchased online content

• To provide customer support

• To comply with legal and tax obligations

• To send promotional and informational communications, subject to explicit consent

• For statistical analysis (aggregated and anonymous)

4. Legal Basis for Processing

The processing of your data is lawful based on:

• Contractual necessity: to provide the service you have requested (online course)

• Legal obligation: for tax and accounting compliance

• Explicit consent: for sending newsletters and promotions

• Legitimate interest: to ensure website security and service improvement

5. Data Processing and Retention

Your data is processed using both manual and electronic methods, in compliance with GDPR security standards. Data is retained as follows:

• For accounting purposes: 10 years (as required by law)

• For marketing purposes: until consent is withdrawn

• For technical/statistical purposes: up to 12 months

6. Data Recipients

Your data may be shared with:

• Employees or collaborators of the professional Matteo Zaralli, owner of VR-AI Academy, are authorized to process data

• IT service providers and digital platforms (e.g., Systeme.io, Stripe, Mailchimp)

• External professionals (e.g., accountants)

• Public authorities, as required by law

Your personal data will never be sold or transferred to third parties for marketing purposes.

7. Data Transfer Outside the EU

Personal data may be transferred outside the EU (e.g., to the USA), but only to organizations that guarantee adequate protection in compliance with the GDPR (e.g., through Standard Contractual Clauses or Data Privacy Framework adherence).

8. Data Subject Rights

You may exercise the following rights at any time:

• Access your data

• Rectify or update your data

• Erase your data (“right to be forgotten”)

• Restrict data processing

• Object to data processing

• Data portability

• Withdraw your consent (for promotional emails)

To exercise these rights, email us at: matteozaralli@gmail.com
You also have the right to lodge a complaint with the Data Protection Authority in your country.

9. Policy Updates

The professional Matteo Zaralli, owner of VR-AI Academy, reserves the right to modify this privacy policy at any time. Updates will be posted on this page and, if relevant, communicated via email to registered users.