Legal
Privacy policy
This policy explains how personal data collected through the website postura.vision (the “Site”) is processed, in line with Regulation (EU) 2016/679 (GDPR).
1. Data controller
Gymnasio S.r.l., registered office Via Giovanni Carlo Cavalli 30, 10138 Torino (TO), Italy, VAT and tax code 12461320017 (“we”). Postura is a brand of Gymnasio S.r.l..
2. Data we collect
- Guide requests. When you ask for a guide, we collect your work email and, if you choose to give it, your role. We also record which guide you requested and the page you sent the form from.
- Demo bookings. The “Book a demo” buttons open a Google Calendar booking page. The details you enter there are collected through Google; we use them to organise and hold the meeting.
- Emails you send us. If you write to us, we process your contact details and the content of your message.
- Anonymous usage statistics. We count visits and how the Site is used: pages viewed, the page you came from, clicks on “Book a demo” and “Get started”, guide requests, and your approximate country, device and browser. This is measured without cookies and without storing anything on your device; your IP address is discarded and no profile of you is built, so the statistics do not identify you.
- Technical data. Our hosting provider keeps standard server logs (such as IP address, date and time, requested page and browser type) to deliver the Site and keep it secure.
Please do not send us data that is not needed for your request.
3. Purposes and legal bases
- Giving you access to the guide and following up on your request, including contacting you about it: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR).
- Organising a demo you booked: steps taken at your request (Art. 6(1)(b) GDPR).
- Understanding how the Site is used, through the anonymous statistics above, so we can improve its content: our legitimate interest (Art. 6(1)(f) GDPR).
- Running and protecting the Site through server logs: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
We do not send newsletters or marketing emails without your separate consent, and we do not use your data for automated decisions or profiling.
4. Cookies
The Site sets no cookies, stores nothing on your device and uses no advertising or profiling tools. Visit statistics are counted in a cookieless mode (see section 2), and fonts are served from our own domain. For this reason no cookie banner is shown. The Google Calendar booking page, which opens on Google’s domain, is governed by Google’s own privacy and cookie policies.
5. Who processes the data
Data is processed by our authorised staff and by these providers, acting as processors on our behalf:
- HubSpot (customer relationship management): stores guide requests. Our HubSpot account is hosted in HubSpot’s EU data centre.
- PostHog (website analytics): processes the anonymous usage statistics. Our PostHog project is hosted in PostHog’s EU data centre.
- Amazon Web Services (hosting and content delivery): serves the Site and keeps the server logs.
- Google (calendar booking): handles demo bookings.
Where a provider may process data outside the European Economic Area, the transfer relies on an adequacy decision, such as the EU-US Data Privacy Framework, or on the European Commission’s standard contractual clauses (Arts. 45–46 GDPR). The list of processors is available on request.
6. How long we keep the data
Data from guide requests, bookings and emails is kept for as long as needed to handle your request, and for no more than 12 months from collection unless a contract follows. Server logs are kept for a short period for security purposes.
7. Your rights
You can at any time ask to access your data, correct or update it, have it erased, restrict its processing, receive it in a portable format, or object to its processing (Arts. 15–22 GDPR). Write to privacy@gymnasio.it, by certified email to gymnasio@pec.it, or by post to Gymnasio S.r.l., Via Giovanni Carlo Cavalli 30, 10138 Torino (TO), Italy.
You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.
8. Changes
We may update this policy when the Site or the way we process data changes. The date at the top shows the latest version.