Privacy Policy
Last updated: 19 September 2025
Introduction
Tourmaline Academy (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect personal data when you use our website www.tourmaline-academy.com and our services. For any questions, contact us at support@tourmaline-academy.com or by phone at +39 3805999522.
Data Controller
The Data Controller is Tourmaline Academy.
Data We Collect
We may collect identification and contact details such as name, email, and phone; messages and inquiries submitted via forms, email, or WhatsApp; information related to courses, training, events, and services; billing and payment data processed via Stripe, PayPal, or bank transfer (we do not store card details); and technical information such as IP address, browser type, device information, and cookies or analytics.
Purposes and Legal Basis
Personal data is processed to operate and secure our website, respond to inquiries, manage course enrollment, training, events, consulting, and tourism services, process payments and invoices, improve our services and perform limited analytics, send promotional communications (with an option to unsubscribe), and comply with legal obligations while protecting our rights. The legal bases for processing are contract performance, legal obligations, legitimate interests, and, where required, consent.
Cookies and Analytics
We use cookies and similar technologies for essential functionality and limited analytics to understand website performance. You can manage cookies through your browser settings.
Data Sharing
Personal data may be shared with service providers such as hosting, IT, and email systems, with payment processors like Stripe, PayPal, and banks, and with professional advisors where legally required. We do not sell or rent personal data to third parties.
International Transfers
As we operate globally, data may be processed outside the European Economic Area (EEA). In such cases, we apply adequate safeguards such as Standard Contractual Clauses or equivalent protection.
Data Retention
We keep personal data only as long as necessary for the purposes collected or as required by law. When no longer needed, data is securely deleted or anonymized.
Your Rights
Under the GDPR, you have the right to access, correct, update, or delete your personal data, restrict processing, object to processing including marketing, withdraw consent, and request data portability. To exercise your rights, contact support@tourmaline-academy.com.
Children’s Data
Our services are intended for a general audience. We do not knowingly collect personal data from children without appropriate consent where required by law.
Security
We implement technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or misuse.
Updates
We may update this Privacy Policy from time to time. Changes will be published on this page with a new “Last updated” date.