Last updated: 28 October 2026
This notice explains how the personal data of people who visit www.matteotomaselli.it, contact us or buy products and services is processed, in accordance with EU Regulation 2016/679 (“GDPR”) and applicable Danish law.
1. Data controller
Matteo Tomaselli
Pjentedamsgade 49 1mf, 5000 Odense, Denmark
CVR: 43945947
Email: tomaselli.matteo.pt@gmail.com
2. What data we process
- Contact data: name, email, phone number and the content of messages you send us via the contact form, email, phone or WhatsApp.
- Purchase data (guides, video course, consultations): first and last name, address, country, tax code or VAT number, email, phone (optional), order notes and order details. Payments are handled by PayPal: we do not receive or store your card or account details.
- Consultation booking data: name, email, the day and time you choose and any answers you enter on Calendly.
- Health data (special categories of data, Art. 9 GDPR): medical reports and information about injuries, pain or physical conditions that you choose to send or share with us for the free assessment, the consultation or the coaching programme.
- Newsletter: email address and, if requested, other data you enter when signing up.
- Browsing data and cookies: technical data collected automatically while you visit the site (see the Cookies section).
3. Why we process data and on what legal basis
- Answering your requests and arranging the free assessment: pre-contractual measures and our legitimate interest (Art. 6(1)(b) and 6(1)(f) GDPR).
- Selling and delivering products and services, and sending you order confirmation emails and the link to book your consultation: performance of a contract (Art. 6(1)(b)).
- Meeting accounting and tax obligations: legal obligation (Art. 6(1)(c)).
- Using health data to tailor the consultation and training to you: your explicit consent (Art. 9(2)(a)), which you give by sending us this information voluntarily and can withdraw at any time.
- Sending the newsletter: your consent (Art. 6(1)(a)), which you can withdraw using the unsubscribe link in every email.
- Anonymous statistics and non-essential cookies: your consent via the cookie banner.
- Protecting the site, for example by limiting unauthorised login attempts: our legitimate interest (Art. 6(1)(f)).
4. Providing your data
To complete a purchase you must provide the data marked as required: without it the order cannot be completed. In all other cases providing data is optional; if you choose not to, we may simply be unable to contact you or provide the requested service.
5. Who we share data with
Data is processed by the controller and may be shared, only for the purposes above, with these providers:
- the hosting provider that hosts the site;
- Google (Gmail and the Gmail API), used to send the site’s emails and for correspondence;
- PayPal, which handles payments as an independent controller;
- Calendly, used to book video calls;
- Mailchimp, used to send the newsletter;
- the video call platform indicated in your booking confirmation;
- our accountant and advisers, for tax and accounting obligations;
- public authorities, where required by law.
Health data is never shared with anyone without your consent. If you ask us to, we can coordinate with your doctor or physiotherapist: in that case we share only the information needed and only after you agree.
The site contains links to and content from Instagram, Facebook, YouTube and WhatsApp. When you use them, those platforms’ privacy policies also apply.
6. Transfers outside the European Economic Area
Some providers (for example Google, PayPal, Calendly and Mailchimp) may also process data in the United States. In these cases the transfer is based on the EU-US Data Privacy Framework and/or the standard contractual clauses approved by the European Commission.
7. How long we keep data
- Contact requests: up to 24 months after the last contact.
- Order data and accounting records: 5 years from the end of the financial year, as required by the Danish Bookkeeping Act.
- Health data: for the duration of the consultation or coaching programme and no longer than 12 months after it ends, unless you ask us to delete it sooner.
- Newsletter: until you unsubscribe.
- Customer account on the site, if created: until you ask us to delete it.
8. Your rights
You can ask at any time for access to your data, rectification, erasure, restriction of processing and data portability, and you can object to processing based on legitimate interest. You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal. To exercise your rights, write to tomaselli.matteo.pt@gmail.com.
You also have the right to lodge a complaint with a supervisory authority: in Denmark the Datatilsynet (www.datatilsynet.dk), or the authority in the country where you live.
9. Security
The site uses an encrypted connection (HTTPS), regular backups and protected access. Health information is handled with particular confidentiality and is accessed only by the controller.
10. Minors
The services offered on this site are intended for adults.
11. Cookies
Cookies are small text files that the site stores on your device to work properly and improve your experience. On your first visit a banner lets you accept or refuse non-essential cookies.
- Necessary: enable basic functions such as navigation, the basket and checkout. They do not require consent.
- Statistics: help us understand anonymously how visitors use the site. They are used only with your consent.
- Marketing: this site does not use marketing cookies.
You can also manage or delete cookies in your browser settings: Google Chrome (Settings > Privacy and security), Mozilla Firefox (Settings > Privacy & Security), Safari (Settings > Privacy), Microsoft Edge (Settings > Cookies and site permissions). If you block all cookies, some features such as the basket may not work.
12. Changes
This notice may be updated. The date of the last update is shown at the top.