Privacy policy

The data controller is Francesca Peruzzi, psychologist, registered with the Lombardy Order of Psychologists (Albo degli Psicologi della Lombardia), no. 21385, with registered office at Via Garibaldi 1, 20005 Pogliano Milanese (MI), Italy, VAT no. 03914710136. For any privacy request you can write to francesca.peruzzi.psy@gmail.com or call +39 351 8599378.

Moving Mind is the method and brand under which Francesca Peruzzi offers group experiences and programmes for companies: the controller is the same for these activities too.

We collect only the data you give us, at the points on the site where we explicitly ask for it:

Together with this data we record the date, the form it comes from and, if present in the link, the campaign parameters (for example “utm_source=instagram”), to understand which channel requests come from. We also record the language in which you used the site (Italian or English), only to reply to you and send you emails in that language.

For site statistics we use only anonymous, aggregated counters (how many visits, how many tests started and completed, per day and per channel): they contain no IP address, identifiers or cookies and cannot be traced back to you.

The tests and assessments ask how you feel (stress, anxiety, body signals, difficult experiences). These answers are data concerning health within the meaning of Article 9 of Regulation (EU) 2016/679 (GDPR), and we process them with particular care:

• we collect them only after your explicit consent, which is separate from consent to the newsletter;
• they are used to calculate your result, to let you find your results again in the private area and, if you ask, to prepare the consultation;
• only Francesca Peruzzi sees them; we do not use them for commercial communications and we do not pass them on to anyone;
• you can withdraw your consent and ask for them to be deleted at any time, without consequences.

The tests are tools for self-observation: they are not a diagnosis and do not replace a clinical assessment.

Without the data marked as mandatory in the forms we cannot provide that service (for example the test result or a reply to a message). We do not take decisions based solely on automated processing: the test result is indicative and you decide every next step.

We write to you with newsletters or updates only if you have given your consent, which is optional and separate from consent for the tests. Every email contains a link to unsubscribe; you can also write to us at francesca.peruzzi.psy@gmail.com. Test answers are never used to choose what to send you.

Emails related to the service you asked for (access to the private area, receipts, confirmations) do not depend on consent to the newsletter.

We use a few suppliers that process data on our behalf, as data processors (Art. 28 GDPR), solely to make the site and the services work:

Data may also be disclosed to tax advisers and to the authorities where required by law. Links to other sites (for example WhatsApp, Instagram or Typeform) and the Spotify podcast player, which loads only if you choose, lead to services with their own privacy notices: their rules apply.

Some suppliers are based in the United States. In these cases the transfer takes place on the basis of the EU-US Data Privacy Framework, where the supplier participates in it, or of the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR). The database containing requests and test answers is located on servers in the European Union.

When the period expires, the data is deleted or anonymised.

At any time, by writing to francesca.peruzzi.psy@gmail.com, you can ask to:

• know what data we hold and receive a copy of it (access, Art. 15);
• correct or complete it (rectification, Art. 16);
• delete it (Art. 17), except for data the law requires us to keep;
• restrict its processing (Art. 18) or object to processing based on legitimate interest (Art. 21);
• receive it in a machine-readable format to take it elsewhere (portability, Art. 20);
• withdraw your consent, without affecting what was done before.

We reply within 30 days. If you believe your data is being processed incorrectly, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

The site uses encrypted connections (HTTPS). The database cannot be accessed from the browser: only the site's server can reach it, with confidential credentials. The management area is protected by personal login. What you write in the AURA exercises (for example the gratitude letter) stays only on your device and is not sent to us.

The tests, the private area and the online services are intended for adults. If you are under 18, ask a parent or guardian to contact us on your behalf.

We may update this policy when the services or the rules change. The date of the last update is at the top of the page; if the changes significantly affect data already collected, we will let you know. For cookies, see the cookie policy.