top of page

PRIVACY POLICY (GDPR – Art. 13) – edoardoceffa.com

Effective date: 05 February 2026

1) Data Controller

The Data Controller is Ceffa Group SRLS
Registered office: Via Maggi 2A, 28100 Novara (NO), Italy
VAT/Tax ID (P.IVA): 02821730039 – REA: NO-321970
Email: ceffagroup@gmail.com
PEC: ceffagroup@pec.it

For privacy-related requests, you may also use the contact form available on the website.

2) Scope

This Privacy Policy explains how we process personal data when you:

  • visit and browse edoardoceffa.com (including the Si-Side page), and/or

  • submit data via forms on the website (contacts, newsletter/community, waitlist, “Message in a Bottle”).

3) Categories of personal data we process

A. Browsing/technical data
Technical data (e.g., IP address, device and browser information, log data, timestamps, pages visited) that is necessary for website operation, performance, and security.

B. Contact requests (personal website)
Data you provide via the contact form, typically: name, email, phone number (if provided), subject/reason for contact, message content, and confirmation of required checkboxes.

C. Si-Side newsletter/community (free weekly email)
Data you provide to subscribe, typically: email address, and optionally preference data (e.g., which categories/moments you select).

D. Si-Side Premium waitlist (paid product, when available)
Data you provide to join the waitlist, typically: email address, and optionally preference data (e.g., desired frequency/channel, categories).

E. “Message in a Bottle” (UGC/community contribution)
You may submit a short text (“anchor phrase”) and, where required, an email. The phrase may be shared anonymously after moderation.
Please do not include personal data (yours or others’) in the text.

Non-clinical note: Si-Side is not therapy and does not provide clinical support. Please avoid sending sensitive health/clinical information via forms.

4) Purposes and legal bases (Art. 6 GDPR)

4.1 Responding to inquiries (Contact form)

  • Purpose: handle your request and communicate with you.

  • Legal basis: performance of pre-contractual measures upon your request (Art. 6(1)(b)) and/or our legitimate interest in managing communications (Art. 6(1)(f)).

4.2 Free weekly Si-Side newsletter/community

  • Purpose: send the weekly email and essential project updates.

  • Legal basis: consent (Art. 6(1)(a)). You can withdraw at any time (e.g., via unsubscribe link).

4.3 Si-Side Premium waitlist

  • Purpose: manage the waitlist and notify you when Premium access opens; optionally tailor updates based on preferences.

  • Legal basis: consent (Art. 6(1)(a)).

4.4 “Message in a Bottle” moderation and anonymous sharing

  • Purpose: receive, moderate, and (if approved) share the phrase anonymously within Si-Side.

  • Legal basis: consent (Art. 6(1)(a)).

4.5 Security, abuse prevention, and technical operations

  • Purpose: keep the website secure and functioning properly; prevent fraud/abuse; troubleshoot.

  • Legal basis: legitimate interest (Art. 6(1)(f)) and/or necessity for service operation.

5) Voluntary vs. mandatory provision

Providing data is generally voluntary, but some fields are required to:

  • respond to a request (contact form),

  • register an email subscription (newsletter/waitlist),

  • handle “Message in a Bottle” submissions.
    If you do not provide mandatory data, we may be unable to deliver the requested feature.

6) How we process data and security

We process data using digital tools and apply appropriate technical and organizational measures to protect data against unauthorized access, loss, misuse, or disclosure.

7) Recipients and processors

We use service providers strictly necessary to operate the website and manage forms/communications.

Website platform/hosting: the site is built and hosted on Wix. Wix generally acts as a data processor for the technical provision of the website and related services.
Wix may use sub-processors (e.g., cloud/CDN providers) for infrastructure and service delivery.

Where applicable, we may also use email delivery and operational tools to manage subscriptions and communications, under appropriate contractual safeguards.

8) International data transfers

Depending on Wix and other providers’ infrastructure, data may be processed and/or stored outside the European Economic Area. Where this occurs, transfers are carried out using appropriate safeguards in line with applicable data protection law.

9) Data retention

We retain personal data for no longer than necessary:

  • Contact requests: for the time needed to manage the request and any follow-up; then deleted or anonymized unless we need to retain it for legal protection/defense.

  • Newsletter/community: until you unsubscribe or withdraw consent.

  • Premium waitlist: until you withdraw consent or until the waitlist is no longer needed (then reviewed and deleted/anonymized).

  • Message in a Bottle: moderation/admin data for a limited period; approved phrases may be stored in anonymized form for publication/archive.

10) Your rights (Arts. 15–22 GDPR)

You may request: access, rectification, erasure, restriction, portability, and object to processing where applicable.
You may withdraw consent at any time (withdrawal does not affect processing performed before withdrawal).

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

11) Minors

This website and Si-Side are not intended for collecting data from minors. If you believe a minor has provided personal data without proper conditions, please contact us so we can delete it.

12) Changes to this Policy

We may update this Privacy Policy to reflect changes to the website, services, or legal requirements. The updated version will be published on this page.
 

13) AnalyticsAnalytics (Google Analytics 4)

We use Google Analytics 4 (“GA4”), a web analytics service provided by Google, to measure site usage in aggregated form (e.g., pages viewed, time on page, traffic sources, device/browser) and improve content and performance. GA4 is enabled only after you give consent via our cookie banner / preference center.

Data processed: usage and technical data (including cookie identifiers and technical parameters).
Legal basis: consent (Art. 6(1)(a) GDPR). You can withdraw consent anytime via “Cookie settings”.
Retention (GA4): [2 months / 14 months] (as configured in GA4).
Recipients/Transfers: data may be processed on infrastructure located outside the EEA; where applicable, transfers rely on appropriate safeguards (e.g., Standard Contractual Clauses).
How to disable: reject/withdraw consent via the banner or via “Cookie settings” in the footer.

Useful links:

Google Privacy Policy: https://policies.google.com/privacy Google Analytics Terms: https://marketingplatform.google.com/about/analytics/terms/ Opt-out add-on (browser): https://tools.google.com/dlpage/gaoptout

COOKIE POLICY – edoardoceffa.com

Effective date: 05 February 2026

1) Who we are

This Cookie Policy is issued by Ceffa Group SRLS (details above) and should be read together with our Privacy Policy.

2) What cookies and trackers are

Cookies are small text files placed on your device to enable core site functions, improve security, measure performance, and—if you allow—support analytics and marketing features.
Some technologies work like cookies (e.g., pixels, local storage, device identifiers). Where they are not strictly necessary, they follow the same consent rules.

3) Cookie categories we use

Because the site is built on Wix, certain cookies are used to run and secure the site.

3.1 Essential cookies (Always active)

These are required for security, network management, and core functionality. They do not require consent.

Examples of Wix-related essential cookies (indicative, may vary):

  • XSRF-TOKEN (security)

  • svSession (session/functionality)

  • hs (security – legacy)

  • SSR-caching (performance/rendering)

  • TS* (security/anti-abuse)

The exact cookie list can change due to platform updates and enabled features.

3.2 Functional cookies (Optional)

These remember preferences and enable enhanced features (where enabled). They are set only if you consent via the banner/preferences.

3.3 Analytics cookies (Optional)

These help us understand how the site is used (traffic, pages, interactions) so we can improve the experience and performance. They are set only if you consent.

3.4 Marketing cookies (Optional)

These may be used to deliver or measure relevant communications/campaigns, where enabled. They are set only if you consent.

4) Your choices: consent and preference management

You can manage cookies in three ways:

A) Cookie banner / Preference Center (recommended)
When you first visit, you can accept, reject non-essential cookies, or manage preferences.
You can change your choices at any time via “Cookie settings” (e.g., in the website footer or banner).

B) Browser controls
You can block or delete cookies through your browser settings. Note: disabling essential cookies may affect site functionality.

C) Third-party services
If embedded content is present (e.g., video players, widgets), those providers may set their own cookies and act as independent controllers for their tracking. Where required, such cookies should be enabled only after your consent.

5) Third-party cookies and embedded content

If the site uses third-party tools (analytics, embeds, marketing tools), those services may place cookies or similar trackers. We aim to ensure non-essential tools are disabled by default until you provide consent in the Preference Center.

6) Updates to this Cookie Policy

​We may update this Cookie Policy if we add/remove tools, change features, or for legal/technical reasons. The updated version will be published on this page.

Analytics cookies (Google Analytics 4)


If you enable the Analytics category, we use cookies to collect aggregated statistics and improve the website. Without consent, these cookies remain disabled.

Typical cookies (example – keep aligned with your banner scan):

  • _ga — distinguishes users — typical duration: 2 years

  • _ga_[ID] — maintains session state — typical duration: 2 years

Note: cookie names/durations may vary depending on your GA4/GTM setup; keep this list updated based on your cookie banner scan.

1) Cookie Banner / Preference Center – “Analytics” microcopy

Category: Analytics (optional)
Helps us understand how the site is used (in aggregated form) so we can improve content and performance. Enabled only with your consent.

Buttons (equal prominence):

  • Accept all

  • Reject non-essential

  • Manage preferences

Footer link: “Cookie settings”

2) Google Tag Manager (GTM)

Google Tag Manager
We use Google Tag Manager to manage website tags. GTM itself does not necessarily set tracking cookies, but it may load tools (e.g., Analytics) only after consent, according to your preferences.

3) “Similar tools” 

Other analytics/marketing tools (consent-based)
We may use analytics or marketing tools (e.g., pixels, heatmaps) to measure performance or improve the user experience. These tools are activated only after consent and can be managed at any time via “Cookie settings”.

We may update this Cookie Policy if we add/remove tools, change features, or for legal/technical reasons. The updated version will be published on this page.

bottom of page