LEGAL

Privacy Policy

Effective Date: [15 July 2026] Last updated: [15 July 2026]

1. Introduction

Welcome to Meditazione Milano (“we,” “our,” or “us”). We are a small non-profit meditation center located at Via Alessandro Paoli, 4, 20124 Milano, Italy.

We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Italian data protection law.

This Privacy Policy explains what personal data we collect from our members, how we use it, and what rights you have.

If you have previously booked an event through our online booking page, please also refer to our Event Booking Privacy Policy, which applies to booking data collected at that stage.

2. Data Controller

Meditazione Milano
Via Alessandro Paoli, 4, 20124 Milano, Italy
Email: meditazionemilanoorg@gmail.com
Phone: +39 351 839 9751

3. What Data We Collect

a) Contact Us Form

When you submit our contact form, we collect:

  • First name (required)
  • Last name (optional)
  • Email address (required)
  • Phone number (optional)
  • Your message (required)

Purpose: To respond to your enquiry. 
Legal basis: Your consent (GDPR Art. 6(1)(a)) and our legitimate interest in responding to communications (GDPR Art. 6(1)(f)).

b) Event & Consultation Bookings 

When you book a free consultation or an event through our third-party booking platform (Universemind), we receive and process:

  • First name and last name (required)
  • Email address (required)
  • Phone number (required)
  • Attendance type (in-person/online) and booking details (date/time)
  • Any voluntary answers to booking questions.

Purpose: To schedule, manage, and facilitate your booked session.
Legal basis: Performance of a contract / taking steps prior to entering into a contract (GDPR Art. 6(1)(b)).

c) Member Registration

When you register as a member, we collect and process data necessary to manage your membership and provide our core services:

  • Membership Registration Data: First name, last name, date of birth (for age verification), and contact details (email, phone number).
  • Membership Management Data: Membership ID, join date, membership status, and subscription/fee status.
  • Program & Attendance Data: Records of attendance at members-only sessions, completed courses, and meditation progress logs.
  • Optional Community Data: A profile picture, emergency contact details, or specific preferences you share to tailor your experience.

Note: We do not actively collect or require sensitive data (such as health details or religious beliefs). If you voluntarily share any health or dietary requirements for retreats, we process this only with your explicit consent to ensure your safety.

4. Why We Process Your Data and Our Legal Bases

We process your membership data based on the following clear legal frameworks:

Purpose

Data Used

Legal Basis (GDPR)

Responding to your enquiries submitted via our contact form 

Name, email, phone, message 

Consent (Art. 6(1)(a)) and Legitimate interests (Art. 6(1)(f)) 

Managing your membership (activation, fee tracking, and account maintenance)

Registration & Membership Data

Contract (Art. 6(1)(b))

Delivering members-only services (sending program materials, tracking meditation levels)

Attendance & Program Data

Contract (Art. 6(1)(b))

Tax, fiscal, and legal compliance (issuing official Italian receipts, accounting records)

Name, Fee History, and Italian Tax Code (Codice Fiscale)

Legal obligation (Art. 6(1)(c))

Defending against legal claims and ensuring internal administrative safety

Membership and payment records

Legitimate interests (Art. 6(1)(f))

Scheduling and managing your event/consultation bookings 

Booking details, Name, Contact info 

Contract (Art. 6(1)(b)) 

5. Cookies and Tracking Technologies

We use Complianz to manage cookie consent on our website. Cookies are only placed after you have given your consent through our cookie banner.

Google Maps
Our Contact Us page embeds Google Maps, provided by Google LLC. When you interact with the map, Google may collect data such as your IP address and location. This is subject to Google’s Privacy Policy.

Google Analytics
We intend to install Google Analytics after our website launch. When active, it will collect anonymised data about how visitors use our site (e.g., pages visited, session duration). We will update this policy and request fresh consent before activating it.

6. Who We Share Your Data With

We value your privacy and do not sell, rent, or trade your membership data. We only share it with trusted partners or providers involved in your membership activities:

Recipient

Purpose

Category / Safeguard

Internal Staff & Instructors

To manage daily sessions and member support

Internal staff on a strict “need-to-know” basis

Payment Providers (Stripe/Square)

Processing membership fees and retreat payments

Independent Data Controllers under their own policies

International Hosting Centres

Coordinating necessary details if you join our international retreats

Co-organizing centers (using EU Standard Contractual Clauses if outside the EEA)

Public Authorities

Tax reporting and compliance with binding Italian laws

Authorized public bodies / Tax agencies

7. Third-Party Services

Our website uses the following third-party services that may process your data:

Service

Purpose

Provider

Google Maps

Location display

Google LLC

Complianz

Cookie management

Complianz B.V.

WPForms

Contact & booking forms

Sandhills Development LLC

Bluehost

Website hosting

Newfold Digital

Universemind

Appointment booking

Right Solution Service LLC

Google Analytics

Website analytics

Google LLC

Each provider operates under their own privacy policy and data processing terms. Some providers may process your data outside the EEA — see Section 8 for details. 

8. International Data Transfers

Some of our third-party service providers listed in Section 7 may transfer and process your personal data on servers located outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

If you choose to participate in our international retreats or events, your necessary personal data (such as name, contact details, and dietary or medical requirements if applicable) may be shared with co-organizing international hosting centers. If these centers are located outside the EEA, we ensure appropriate safeguards are implemented.

9. How Long We Keep Your Data

We retain your personal data only for as long as necessary, using flexible and legally compliant criteria:

Data Type

Retention Period

Reason / Basis

Active Membership Records

For the duration of your active membership

Contract performance

Post-Cancellation Records

Safely retained for 3 years after your membership ends

To assist with easy reactivation and handle remaining enquiries

Tax & Accounting Records

Retained for 10 years

Strictly mandated by Italian statutory law (Codice Civile)

Legal Defense Records

Until the applicable statute of limitations expires

Necessary to defend against potential legal claims

10. Your Rights Under GDPR

As a data subject, you have the right to:

  • Access – Request a copy of the personal data we hold about you.
  • Rectification – Ask us to correct inaccurate or incomplete data.
  • Erasure – Request deletion of your data (“right to be forgotten”).
  • Restriction – Ask us to limit how we process your data.
  • Data portability – Receive your data in a structured, machine-readable format.
  • Object – Object to processing based on legitimate interests.
  • Withdraw consent – Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise these rights, please email us at: meditazionemilanoorg@gmail.com

We will respond within one month of your request.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali — www.garanteprivacy.it).

11. Children

Our website, events, and services are primarily intended for adults. We do not knowingly collect personal data from children under 16 years of age without parental consent.

Minors under 16 may participate in our programs only with the explicit consent and guidance of a parent or legal guardian. If you are a parent or guardian and believe your child has provided us with their personal data without your consent, please contact us at meditazionemilanoorg@gmail.com and we will take steps to obtain your consent or delete the data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this page periodically. For significant changes, we will make reasonable efforts to notify you directly.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Meditazione Milano
Via Alessandro Paoli, 4, 20124 Milano MI

Email: meditazionemilanoorg@gmail.com
Phone: +39 351 839 9751