jacoach

IT · EN · FR · ES

Privacy policy

Last updated: 19 October 2026.

This policy explains how I process the personal data of people who visit jacoach.eu, write to me through the contact form or book a meeting, in accordance with Regulation (EU) 2016/679 (GDPR).

Data controller

Jacopo Tenconi, [business address and VAT number to be completed]. For any privacy request: [email to be completed].

What data I collect

  • Contact form: first name, last name, company name, email address and any information you choose to write to me.
  • Meeting booking: name, email address, chosen date and time and any notes.
  • Correspondence: the emails you send me and my replies.
  • Technical browsing data: IP address, browser, pages requested and time, logged automatically by the server for the security and operation of the site.

Providing your data is optional, but without an email address I cannot reply to you.

Why I use it and on what legal basis

  • Replying to your requests and arranging the meeting you asked for: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
  • Carrying out the coaching engagement, if we decide to work together: performance of a contract (Art. 6(1)(b) GDPR).
  • Complying with legal obligations, such as tax and accounting: legal obligation (Art. 6(1)(c) GDPR).
  • Ensuring the security and operation of the site: legitimate interest (Art. 6(1)(f) GDPR).

I do not use your data for newsletters or promotional messages without your explicit consent, and I do not sell it or share it with third parties for marketing purposes. I do not make decisions based solely on automated processing.

Providers that process data on my behalf

  • HubSpot (HubSpot Ireland Ltd.): contact form, booking calendar and contact management. The data is hosted in HubSpot’s European data centre.
  • OVHcloud (OVH SAS, France): website hosting and server logs.
  • Google (Google Ireland Ltd., Google Workspace): email and calendar.

These providers act as processors under agreements that comply with Art. 28 GDPR. Some belong to groups based in the United States: any transfer outside the European Economic Area relies on the safeguards provided by the GDPR (EU-US Data Privacy Framework or standard contractual clauses).

How long I keep it

  • Contact requests that do not lead to an engagement: up to 24 months from our last exchange.
  • Data relating to an engagement: for the duration of the relationship and then for as long as required by law (in Italy, 10 years for accounting records).
  • Technical server logs: for the limited period set by the hosting provider.

Cookies and browser local storage

The site does not use profiling cookies or third-party analytics. It only uses technical tools: the browser’s local storage to remember the language you chose, and the technical cookies needed for the HubSpot form to work and, for those who log into the administration area, for WordPress.

Your rights

You can ask me at any time for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest. If you have given consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before. Write to me at [email to be completed]: I will reply within one month.

You also have the right to lodge a complaint with the supervisory authority of the country where you live, work or where you believe the infringement took place: in Italy the Garante per la protezione dei dati personali (garanteprivacy.it), in France the CNIL (cnil.fr).

Changes

I may update this policy, for example if the services used by the site change. The date at the top shows the latest version.