← Home

Privacy Policy

Last updated: 2026-09-17

This policy explains how personal data of users of https://livestream.gabrieleserpi.com is processed under Regulation (EU) 2016/679 (GDPR).

1. Data Controller

GSFlash Production di Gabriele Serpi
VAT: 18239851001
Privacy contact: gabriele@gabrieleserpi.com

WFD75 Conference (Rome, 24-25 September 2026). For this conference only, the registration fee is collected by the Ente Nazionale Sordi (ENS), the organizer, through its own PayPal account, and service emails are sent from an ENS mailbox. For the payment and for managing registrations and training credits, ENS acts as an independent controller. For the platform, the live stream and all other events, the controller is GSFlash Production di Gabriele Serpi.

2. Data we process

  • Account data: email, password (stored only hashed, never in clear text), and optionally first name, surname and country if provided by you or by the event organization.
  • Identification code: a generated numeric code linked to your account, shown as a watermark during the live streams.
  • Viewing data: events/streams you access, active viewing sessions, IP address and access time.
  • RND teacher status (WFD75 conference): the organizers may indicate which registrants are teachers in the Italian National Teachers Register, also by comparing names and surnames with the list provided by the teachers' coordinator, for the attendance register and training credits.
  • Attendance data (WFD75 conference): times you joined and left the live stream, the channel watched and playback time, recorded automatically every 20 seconds.
  • Payment data (where applicable): handled directly by PayPal on the Ente Nazionale Sordi account (WFD75 conference) or by Stripe (other events); we only keep the amount, date and transaction reference, never card or account details.
  • Technical/log data: information needed for the operation and security of the service.

3. Purposes and legal bases

  • Providing the service (stream access, account): performance of a contract (Art. 6.1.b).
  • Anti-piracy protection (watermark code, IP address, single session per account, encryption): legitimate interest in protecting paid content (Art. 6.1.f).
  • Proof of attendance for training credits (attendance register of teachers registered for the WFD75 conference): performance of the contract and request of the data subject (Art. 6.1.b) and the organizer's legitimate interest in verifying attendance (Art. 6.1.f).
  • Payments and tax obligations (where applicable): legal obligation (Art. 6.1.c).
  • Service communications (e.g. sending access credentials): performance of the contract.

4. Recipients / Processors

We use providers that process data on our behalf: Bunny.net (video delivery), PayPal and Stripe (payments, where applicable), Microsoft 365 (service emails), and the server hosting provider. For the WFD75 conference, the Ente Nazionale Sordi and its organizing committee access registration data, RND codes and the attendance register to manage registrations and grant training credits. Data is never sold or shared with third parties for marketing.

5. Transfers outside the EU

Some providers may process data outside the European Union. Where this happens, transfers are covered by the safeguards required by the GDPR (e.g. Standard Contractual Clauses).

6. Retention

  • Account data: until you delete your account or the event you were given access to ends.
  • Viewing sessions and IP: for limited periods needed for security.
  • Attendance register: for the time needed to grant training credits, and in any case no longer than 12 months after the conference.
  • Payment/tax data: for the period required by law.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection (Art. 15-22 GDPR). You can exercise them by writing to gabriele@gabrieleserpi.com, or, if you have an account, directly from the My account page (export and delete your data). You also have the right to lodge a complaint with your data protection authority.

8. Cookies

This site uses only strictly necessary technical cookies (keeping your login session and language preference). We do not use profiling, advertising or third-party analytics cookies. No consent is required for technical cookies only.

9. Security

We apply appropriate technical measures: hashed passwords, encrypted video stream (AES-128), keys served only to authorized users, single session per account.

10. Minors

The service is not intended for children under 16. If you are a parent/guardian and believe a minor provided us data, contact us for removal.

11. Changes

This policy may be updated. The date at the top shows the latest version.