Last updated · May 2026

Privacy policy

Information on the processing of personal data pursuant to articles 13–14 of EU Regulation 2016/679 (GDPR). In case of discrepancy, the Italian version prevails.

1. Data controller

The data controller is Romano Formazione S.a.s., with registered office in Via Macaggi 25/10, 16121 Genoa (GE), Italy, VAT number IT 02477940999 (hereinafter "StarLab").

For any request concerning the processing of personal data you can write to ivanromano432@gmail.com.

2. Types of data collected

Through the StarLab website we collect the following categories of personal data, provided voluntarily by the user:

2.1 Event registration data

Full name
Email address
Phone number
Date and time of registration

2.2 Room booking data

Full name of the contact person
Email address
Company name and VAT number, if any (optional)
Payment data, processed directly by the service provider (Stripe / card network), not stored by StarLab

2.3 Browsing data

While browsing the website, the IT systems acquire some data whose transmission is implicit in the use of Internet communication protocols (IP addresses, browser type, operating system, pages visited). These data are used solely to obtain anonymous statistical information on the use of the website.

3. Purposes of processing

Personal data are processed for the following purposes:

Event registration: to record participation, send the registration confirmation and the operational communications relating to the event (programme changes, logistical information, possible cancellation).
Room booking: to manage the availability request, the booking confirmation and the subsequent invoicing.
Compliance with legal obligations, in particular tax and accounting obligations.
Website security and prevention of abuse.

4. Legal basis of processing

The processing of data for registration and booking purposes is based on the performance of a contract or of pre-contractual measures requested by the data subject (art. 6(1)(b) GDPR). Processing for the purpose of complying with legal obligations is based on art. 6(1)(c) GDPR. Processing for anonymous statistical and security purposes is based on the controller's legitimate interest (art. 6(1)(f) GDPR).

Explicit consent is requested for the processing of contact data for the purpose of communicating new initiatives and events (newsletter): such consent is optional and may be withdrawn at any time.

5. Retention period

Event registration data: up to 24 months from the date of the event, unless the data subject objects.
Booking data: for the time needed to perform the service and, afterwards, for the period required by tax obligations (10 years).
Newsletter data: until consent is withdrawn.

6. Disclosure and recipients

Personal data are not disseminated or sold to third parties for commercial purposes. They may be disclosed to:

Authorised StarLab staff.
Technical service providers (hosting, transactional email delivery, payment management) appointed as data processors pursuant to art. 28 GDPR.
Competent authorities upon their legitimate request.

7. Rights of the data subject

Pursuant to articles 15–22 GDPR, the data subject has the right to:

Access their personal data and obtain a copy.
Rectify inaccurate data or complete incomplete data.
Request the erasure of data ("right to be forgotten").
Restrict processing.
Object to processing based on legitimate interest.
Request data portability.
Withdraw consent, without affecting the lawfulness of processing based on consent before its withdrawal.
Lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

To exercise these rights, simply write to ivanromano432@gmail.com.

8. Cookies

The website uses technical cookies, necessary for the pages to work properly. No profiling cookies are used. For more information, users can check their browser settings to manage or delete cookies already stored.

9. Changes to this policy

StarLab reserves the right to update this policy by publishing the new version on this website. The date of the last revision is indicated at the top.

10. Contacts

For any matter concerning the processing of personal data, the data subject may contact the controller by writing to ivanromano432@gmail.com.