← Home

Privacy Policy

Last updated: 2026-07-24

This policy explains how personal data of users of https://livestream.gabrieleserpi.com is processed under Regulation (EU) 2016/679 (GDPR).

1. Data Controller

GSFlash Production di Gabriele Serpi
VAT: 18239851001
Privacy contact: gabriele@gabrieleserpi.com

2. Data we process

  • Account data: email, password (stored only hashed, never in clear text), and optionally first name, surname and country if provided by you or by the event organization.
  • Identification code: a generated numeric code linked to your account, shown as a watermark during the live streams.
  • Viewing data: events/streams you access, active viewing sessions, IP address and access time.
  • Payment data (where applicable): handled directly by Stripe; we do not store full card data.
  • Technical/log data: information needed for the operation and security of the service.

3. Purposes and legal bases

  • Providing the service (stream access, account) — performance of a contract (Art. 6.1.b).
  • Anti-piracy protection (watermark code, IP address, single session per account, encryption) — legitimate interest in protecting paid content (Art. 6.1.f).
  • Payments and tax obligations (where applicable) — legal obligation (Art. 6.1.c).
  • Service communications (e.g. sending access credentials) — performance of the contract.

4. Recipients / Processors

We use providers that process data on our behalf: Bunny.net (video delivery), Stripe (payments, where applicable), the chosen email/SMTP provider, and the server hosting provider. Data is never sold or shared with third parties for marketing.

5. Transfers outside the EU

Some providers may process data outside the European Union. Where this happens, transfers are covered by the safeguards required by the GDPR (e.g. Standard Contractual Clauses).

6. Retention

  • Account data: until you delete your account or the event you were given access to ends.
  • Viewing sessions and IP: for limited periods needed for security.
  • Payment/tax data: for the period required by law.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection (Art. 15-22 GDPR). You can exercise them by writing to gabriele@gabrieleserpi.com, or — if you have an account — directly from the My account page (export and delete your data). You also have the right to lodge a complaint with your data protection authority.

8. Cookies

This site uses only strictly necessary technical cookies (keeping your login session and language preference). We do not use profiling, advertising or third-party analytics cookies. No consent is required for technical cookies only.

9. Security

We apply appropriate technical measures: hashed passwords, encrypted video stream (AES-128), keys served only to authorized users, single session per account.

10. Minors

The service is not intended for children under 16. If you are a parent/guardian and believe a minor provided us data, contact us for removal.

11. Changes

This policy may be updated. The date at the top shows the latest version.