Privacy policy

This Privacy Policy describes how the personal data of users who use the website is collected, used, stored, and protected https://www.yama-sensei.com (hereinafter “Service”).

By using the Service, registering an account, booking lessons, or making payments through the site, the user acknowledges this Privacy Policy. Data processing takes place in compliance with Regulation (EU) 2016/679 (“GDPR”) and the applicable legislation on the protection of personal data.

1. Information we collect

   We may collect and process the following categories of personal data:

   • Account data: username, first name, last name, email address, encrypted password, and technical data necessary for access.
   • Student data: first name, last name, nationality, date of birth, indication of whether the student is of legal age or a minor.
   • Parent or guardian data, if the student is a minor: first name, last name, date of birth, email address, and required declarations/authorizations.
   • Billing and payment data: type of account holder, first and last name of the account holder, any company name, VAT number, tax code, residential or tax office address, city, province/state, ZIP/postal code, country, certified email (PEC), and SDI code where applicable.
   • Data relating to the holder of the tax document or payment method, if different from the student or the parent/guardian.
   • Data relating to bookings, orders, payments, and lesson management.
   • Technical data: IP address, log data, browser information, technical cookies and, subject to consent, any analytics or tracking cookies.

2. Purposes of processing

   Personal data is used for the following purposes:

   • Creation, activation, and management of the user account.
   • Identification of the student and proper management of lessons.
   • Management of registrations for minor students and the related authorizations.
   • Management of bookings, orders, payments, receipts, and invoices.
   • Issuance of tax documents, including any electronic invoices.
   • Verification of the accuracy of the tax data provided, including the tax code when required.
   • Operational communications relating to accounts, lessons, bookings, payments, and support.
   • Compliance with legal, tax, accounting, and administrative obligations.
   • Website security, prevention of abuse, fraud, or unauthorized access.

   We do not sell or disclose personal data to third parties for commercial or advertising purposes.

3. Legal basis for processing

   Data processing is based, as applicable, on:

   • Performance of a contract or pre-contractual measures requested by the user.
   • Compliance with legal, tax, and accounting obligations.
   • The Controller’s legitimate interest in website security, technical management of the Service, and protection of its rights.
   • User consent, when required, for example for non-technical cookies or communications that are not strictly necessary.

4. Payments via PayPal and Stripe

   For payment of lessons, the site may use payment services provided by PayPal and/or Stripe. When the user chooses one of these methods, certain data necessary for the transaction may be processed directly by those providers.

   Complete payment card details are not stored on the yama-sensei.com website. The technical management of the transaction and payment data is handled through the respective providers, according to their privacy policies and terms of service.

   • PayPal Privacy Policy: paypal.com/legalhub/privacy-full
   • Privacy Center Stripe: stripe.com/legal/privacy-center

5. Data recipients

   Data may be processed by:

   • The Controller and persons authorized to manage the website and services.
   • Technical providers of the website, hosting, plugins, booking systems, form management, and email delivery.
   • Payment providers, including PayPal and Stripe.
   • Tax, accounting, or legal consultants, if necessary.
   • Public, tax, or judicial authorities, in the cases provided for by law.

6. Data of minors

   The Service may collect data relating to underage students only to the extent necessary to manage lessons and the related enrollment. In the case of an underage student, data and authorizations from the parent, guardian, or person legally entitled to complete the registration are required.

7. Data retention

   Personal data is retained for the time necessary to provide the Service, manage the account, bookings, payments, and comply with legal obligations.

   Account data may be retained until deletion is requested or for a reasonable period after the last active use. Tax and accounting data may be retained for the period required by applicable law, even up to 10 years where required.

   Aggregated or anonymized data, not directly or indirectly attributable to the user, may be retained indefinitely.

8. Transfers outside the EU

   Some technical or payment providers may process data outside the European Economic Area. In such cases, the transfer takes place in accordance with safeguards provided for by the GDPR, such as adequacy decisions, standard contractual clauses, or other instruments recognized by applicable law.

9. Cookie

   The website uses technical cookies necessary for the operation of the Service and, subject to consent, analytics or tracking cookies. For more information, please see our Cookie Policy.

10. Safety

    We adopt appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or improper disclosure.

    However, no computer system or transmission over the Internet can be considered completely secure.

11. User rights

    Pursuant to the GDPR, the user may exercise the following rights:

    • Access your personal data.
    • Request its rectification or update.
    • Request its deletion, in the cases provided for by law.
    • Request the restriction of processing.
    • Object to processing, where applicable.
    • Request data portability.
    • Withdraw consent, when processing is based on consent.
    • File a complaint with the Italian Data Protection Authority.

    To exercise your rights, you can write to: kellyn@yama-sensei.com.

12. Consequences of failure to provide data

    Providing the data necessary to create an account, make a booking, process payment, and issue invoices is required in order to use these features. If the requested data is not provided, we may not be able to provide the Service, complete registration, manage the booking, or fulfill tax obligations.

13. Changes to this Policy

    We reserve the right to update this Policy at any time. Changes will be published on this page with the date of the last update indicated. We invite you to check this page periodically.

14. Privacy contacts

    For questions, requests, or complaints regarding the processing of personal data, you can contact:

    Kellyn Jennifer Yamashita
    Milan, Italy
    E-mail: kellyn@yama-sensei.com

Privacy Policy drafted with technical support and customized for yama-sensei.com.