Privacy & Cookie Policy

This Privacy & Cookie Policy explains how Lucydreams SAS di Angelo Ferretti collects, uses, stores and protects personal data in connection with insidetheworkflow.com, the Masterclass, user accounts, online lessons, purchases and related services.

Personal data is processed in accordance with Regulation (EU) 2016/679 (“GDPR”), applicable Italian data protection legislation and the relevant rules concerning cookies and similar technologies.

1. Data Controller

The Data Controller is:

Lucydreams SAS di Angelo Ferretti
Via Momigliano, 00042 – Anzio (RM), Italy
VAT ID: IT13151341008
Email: info@lucydreams.it

For any question concerning this Privacy & Cookie Policy or the processing of your personal data, you can contact us at the email address above.

2. Personal Data We Collect

Depending on how you use the website and the Masterclass services, we may process the following categories of personal data.

Information you provide directly

This may include:

• name and surname
• email address
• telephone number
• billing and invoicing information
• tax identification or VAT information, where applicable
• company or professional information, where applicable
• information provided through registration, purchase, contact or support forms
• communications you send to us.

Account and Masterclass information

If you create an account or access the online Masterclass, we may process information necessary to manage the service, including:

• account information
• login and authentication information
• access permissions
• purchased products or services
• Masterclass access status
• lesson completion status
• course progress
• information necessary to provide and maintain access to restricted content

Purchase and transaction information

When you purchase access to the Masterclass, we may process information relating to the transaction, including:

• product or service purchased
• amount paid
• payment status
• transaction reference
• purchase date
• billing and invoicing information

Payment information

Online payments are processed through Stripe.

Payment card information is handled directly by the payment service provider. We do not normally receive or store complete credit or debit card details.

Stripe may process payment information and other data necessary to complete transactions, prevent fraud, comply with financial regulations and provide its payment services.

Technical and usage information

When you use the website, certain technical information may be processed automatically, including:

• IP address
• browser and device information
• operating system
• date and time of access
• requested pages and resources
• login and session information
• server, diagnostic and security logs
• technical cookie identifiers.

This information is used only where necessary for the operation, maintenance and security of the website and services.

3. How We Collect Personal Data

Personal data may be collected:

• directly from you when you create an account, make a purchase, complete a form or contact us;
• automatically through the technical operation of the website;
• through service providers used to manage registrations, payments and related services;
• from payment providers when they confirm the status or details of a transaction.

Some registration and purchase information is collected through forms provided by Tally BV.

Tally acts as a data processor for the information submitted through forms created on our behalf. Tally states that form submission data is encrypted and stored within the European Union.

4. Purposes and Legal Bases for Processing

We process personal data only when there is a valid legal basis under the GDPR.

Providing the Masterclass and related services

We process personal data to:

• create and manage user accounts
• provide access to purchased Masterclass content
• authenticate users
• manage restricted content
• record lesson completion and course progress
• manage purchases
• provide customer support
• communicate information necessary for the provision of the service.

The legal basis is the performance of a contract or the taking of steps at your request before entering into a contract, pursuant to Article 6(1)(b) GDPR.

Managing purchases and payments

We process information necessary to manage purchases, confirm transactions and provide access to purchased services.

The legal basis is the performance of a contract, pursuant to Article 6(1)(b) GDPR.

Invoicing, accounting and legal obligations

Certain information relating to purchases, payments and invoices must be processed and retained in order to comply with accounting, tax and other legal requirements.

The legal basis is compliance with a legal obligation, pursuant to Article 6(1)(c) GDPR.

Responding to inquiries and providing support

When you contact us, we process the information you provide in order to answer your request and provide assistance.

Depending on the nature of the communication, the legal basis is either:

• taking steps at your request before entering into a contract or performing an existing contract; or
• our legitimate interest in managing communications concerning our services.

Website operation and security

Technical information may be processed to:

• operate and maintain the website;
• manage user sessions and authentication;
• prevent unauthorized access;
• protect restricted Masterclass content;
• prevent fraud, spam and abuse;
• investigate technical problems;
• maintain the security of our systems and users.

The legal basis is our legitimate interest in operating a secure and reliable online service, pursuant to Article 6(1)(f) GDPR.

5. Data Required to Provide the Service

Providing certain personal data is necessary in order to:

• create and manage an account;
• purchase access to the Masterclass;
• access restricted content;
• process a payment;
• issue invoices where required;
• provide customer support.

If the information required for these purposes is not provided, we may be unable to provide the requested service.

Any information explicitly indicated as optional may be provided at your discretion.

6. Tally

We use Tally BV, a company based in Belgium, to provide certain registration and purchase forms.

Information submitted through these forms may include:

• name and surname;
• email address;
• telephone number;
• billing information;
• tax or company information;
• information necessary to process a Masterclass registration or purchase.

For personal data collected through forms created by us, Lucydreams SAS di Angelo Ferretti remains the Data Controller and Tally acts as a Data Processor.

Tally processes and stores form submission data on our behalf in accordance with its contractual and data protection obligations.

7. Stripe

Payments are processed through Stripe.

Stripe may process information including:

• name;
• email address;
• billing information;
• payment method information;
• transaction details;
• IP address and device information;
• information required for fraud prevention, security and compliance with financial regulations.

Depending on the specific processing activity, Stripe may act as a data processor on our behalf or as an independent data controller for activities it is legally required to perform, such as fraud prevention, payment security and compliance with financial and regulatory obligations.

We do not receive or store complete payment card details.

8. Recipients of Personal Data

Personal data is not sold.

We may disclose personal data only where necessary for the purposes described in this Policy.

Recipients may include:

• Tally BV, for registration and purchase forms;
• Stripe and related payment service providers;
• website hosting and infrastructure providers;
• providers involved in website maintenance, account management and security;
• accounting, tax and legal professionals;
• public authorities where disclosure is required by law.

Where a service provider processes personal data on our behalf, it is required to process such information in accordance with applicable data protection legislation and, where required, a data processing agreement.

Some providers may process certain information as independent data controllers according to their own legal obligations and privacy policies.

9. International Data Transfers

We primarily use service providers operating within the European Economic Area whenever possible.

Tally states that form submission data is stored within the European Union.

Some service providers or their subprocessors may, however, process personal data outside the European Economic Area.

Where such transfers occur, they are carried out using a legally recognized transfer mechanism where required, such as:

• a European Commission adequacy decision;
• Standard Contractual Clauses approved by the European Commission;
• the EU-U.S. Data Privacy Framework, where applicable;
• or another safeguard permitted under applicable data protection legislation.

You may contact us if you require further information regarding the safeguards applied to a particular transfer.

10. How Long We Keep Personal Data

Personal data is retained only for as long as necessary for the purposes for which it was collected and in accordance with applicable legal obligations.

In particular:

Account and Masterclass information

Account information, access permissions and course progress may be retained for the duration of the user’s access to the Masterclass and for any additional period reasonably necessary to manage the account, provide support, resolve disputes or establish, exercise or defend legal claims.

Purchase and accounting records

Invoices, transaction information and accounting records are retained for the period required under applicable Italian accounting and tax legislation, which may generally require certain accounting records to be retained for **10 years**.

Registration and purchase form data

Information collected through registration and purchase forms is retained for as long as necessary to process the registration, purchase and related administrative activities.

Information that becomes part of contractual, invoicing or accounting records may be retained for the corresponding legal retention period.

Communications and support requests

Communications are retained for as long as reasonably necessary to respond to the request and manage any subsequent administrative, contractual or legal requirements.

Technical and security data

Server logs, security information and other technical data are retained only for the period reasonably necessary for website operation, troubleshooting, security, fraud prevention and protection against unauthorized access.

Data may be retained for a longer period where this is required by law or necessary for the establishment, exercise or defence of legal claims.

---

Cookie Policy

11. What Are Cookies?

Cookies are small text files that a website may store on a user’s device when the website is visited.

Cookies can serve different purposes, such as maintaining a login session, remembering technical preferences, ensuring website security or, on some websites, tracking users for analytics or advertising purposes.

12. Cookies Used by This Website

At present, insidetheworkflow.com is configured to use only technical or strictly necessary cookies and similar technologies required for the operation and security of the website and its services.

These technologies may be used for purposes such as:

• user authentication;
• maintaining login sessions;
• managing user accounts;
• providing access to protected Masterclass content;
• maintaining website security;
• preventing fraud, spam or unauthorized access;
• remembering essential technical preferences;
• ensuring the correct operation of website functions.

These cookies are not used to create advertising profiles or to track users for marketing purposes.

Because these technologies are necessary to provide the website or services requested by the user, they do not require prior consent under applicable Italian rules concerning technical cookies.

Information about their use is nevertheless provided through this Privacy & Cookie Policy.

13. Analytics, Advertising and Profiling Cookies

The website does not currently intentionally use advertising or profiling cookies or other non-essential tracking technologies requiring user consent.

If analytics, advertising, profiling or other non-essential tracking technologies requiring consent are introduced in the future, they will not be activated before obtaining the user’s consent where required by applicable law.

This Privacy & Cookie Policy and the website’s consent mechanisms will be updated accordingly before such technologies are used.

14. External Services and Cookies

Some services used in connection with the Masterclass are provided on websites or technical environments operated by third parties.

For example, registration or purchase forms may be hosted by Tally, and payment functions may be provided by Stripe.

When you leave insidetheworkflow.com or interact with an external service, that provider may use its own cookies or similar technologies according to its own privacy and cookie policies.

The use of cookies on third-party websites is governed by the policies of the respective providers.

15. Browser Cookie Controls

You may use your browser settings to inspect, block or delete cookies.

Please note that blocking strictly necessary cookies may prevent some functions of the website from working correctly, including:

• logging into your account;
• maintaining an authenticated session;
• accessing protected Masterclass content;
• using account-related functions.

---

Your Data Protection Rights

16. Your Rights Under the GDPR

Subject to the conditions established by applicable law, you may exercise the following rights:

Right of access

You may ask whether we process personal data relating to you and request access to that data.

Right to rectification

You may request correction of inaccurate personal data or completion of incomplete information.

Right to erasure

You may request deletion of your personal data where the conditions established by the GDPR are met.

This right does not apply where processing or retention is required by law, for example in relation to certain accounting or tax records.

Right to restriction of processing

You may request that the processing of your personal data be restricted in the circumstances provided by the GDPR.

Right to data portability

Where applicable, you may request to receive personal data you have provided to us in a structured, commonly used and machine-readable format and request that it be transmitted to another controller where technically feasible.

Right to object

Where processing is based on our legitimate interests, you may object to the processing for reasons relating to your particular situation.

Withdrawal of consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

17. How to Exercise Your Rights

To exercise your data protection rights or ask a question about your personal data, contact:

info@lucydreams.it

Please provide sufficient information to allow us to identify your request.

Where necessary, we may ask you to provide additional information in order to verify your identity and protect your personal data from unauthorized access.

Requests will be handled within the time limits established by applicable data protection legislation.

18. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes applicable data protection legislation, you have the right to lodge a complaint with a competent supervisory authority.

For users in Italy, the competent supervisory authority is:

Garante per la protezione dei dati personali

You may also have the right to bring proceedings before the competent courts.

19. Automated Decision-Making

We do not use personal data collected through the website or Masterclass services to make decisions based solely on automated processing that produce legal effects or similarly significant effects on users.

20. Data Security

We implement appropriate technical and organizational measures designed to protect personal data against:

• unauthorized access;
• unauthorized disclosure;
• alteration;
• accidental loss;
• destruction;
• misuse.

Access to personal data is limited to persons and service providers who require it for legitimate operational purposes.

Although we take reasonable measures to protect personal data, no online service or electronic storage system can guarantee absolute security.

21. Changes to This Privacy & Cookie Policy

We may update this Privacy & Cookie Policy when necessary, including following changes to:

• the website;
• Masterclass services;
• service providers;
• technologies used;
• applicable legislation.

The current version will be published on this page and identified by the “Last updated” date shown at the beginning of the Policy.

22. Contact

For any question concerning privacy, cookies or the processing of your personal data, please contact:

Lucydreams SAS di Angelo Ferretti
Via Momigliano, 00042 – Anzio (RM), Italy
VAT ID: IT13151341008
Email: info@lucydreams.it