Privacy and cookie notice
Versione italiana · This is a translation. If the two versions differ, the Italian version prevails.
1. Data controller
Eugenio Roveda, a private individual who runs Ripetiamo on a non-professional basis. For any request about your data, write to info@ripetiamo.eu.
2. What data we collect
- Account: email address, display name, date of birth, statement of parental consent (for users under 18).
- Listings: listing type, subjects, price, description, school or course, the area you enter and its coordinates rounded to about 100 metres.
- Availability and bookings: the times you are available, lessons requested or confirmed, length, format, agreed amount, whether the lesson has been paid.
- Reviews you write after a lesson (rating, text, your display name).
- “Verified student” badge: if you sign up with a university email, we derive the university name from the email domain and show it on your profile.
- Messages you send and receive in the built-in chat, and reports you send.
- Technical data: IP address and device information, recorded automatically by the providers that host the site and the database.
- Location: only if you tap “Use my location”. The location is rounded, used to calculate distances and stored only on your device.
3. Why we use it and on what basis
- To let you use Ripetiamo: account, listings, chat, bookings, calendar. Basis: performance of the contract (Art. 6(1)(b) GDPR).
- To apply the age rules (adult tutors, parental consent for minors) and protect users. Basis: legitimate interest in user safety, particularly of minors (Art. 6(1)(f)).
- To handle reports and meet the obligations of the Digital Services Act. Basis: legal obligation (Art. 6(1)(c)).
- To show advertising through Google AdSense, only if you agree in the cookie banner. Basis: consent (Art. 6(1)(a)). We only show non-personalised ads.
- To show local sponsors (businesses near the area you search) and tell sponsors how many times their ad was seen and clicked. We only count anonymous daily totals: we don't record who sees or clicks. Basis: legitimate interest in funding the service (Art. 6(1)(f)).
4. Minors
In Italy you can consent to online services on your own from the age of 14. For this reason, anyone under 14 cannot create an account on their own. Anyone aged 14 to 17 can sign up only by declaring that a parent knows and agrees, and cannot post listings offering lessons.
5. Who sees your data
- All visitors see active listings (display name, subjects, price, description, area and distance), reviews and, for people offering lessons, the public profile with verified university, number of lessons given and sign-up date. They never see your email, date of birth or precise coordinates. Users under 18 have no public profile.
- Other users see the messages you write to them and the bookings you make with them.
- Our providers, who process data on our behalf:
- Supabase Inc. (database and sign-in), with servers in the European Union (Ireland);
- Netlify Inc., to host the site;
- Resend, to send sign-in emails and notifications (new bookings, confirmations, new messages: we never include message text in emails);
- OpenStreetMap Foundation (Nominatim service), which receives the text of the area you type in order to find it on the map;
- Google Ireland Ltd for fonts (Google Fonts) and, if you agree, for advertising (AdSense);
- jsDelivr, the network that delivers part of the site's code.
We do not sell your data to anyone.
6. How long we keep it
For as long as you have an account. When you delete it from “My space”, we immediately delete your profile, listings, availability, bookings and messages. Reports may be kept for up to 12 months to handle disputes and legal obligations. Providers' technical logs follow their own retention periods.
7. Your rights
You can ask us at any time to access, correct or delete your data, restrict its use, receive a copy of it or object to its processing, by writing to info@ripetiamo.eu. You can withdraw consent to advertising from the “Privacy settings” link in the banner. If you believe your data is being processed unlawfully, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
8. Cookies and browser storage
Technical, always on: the site stores in your browser your sign-in session (so you don't have to sign in every time) and your preferences, such as language, the area and the distance you chose, plus a daily note of the sponsors already counted, so they are not counted twice. They are needed for the site to work and do not require consent.
Advertising, only with your consent: if advertising is active, Google AdSense may use cookies to show non-personalised ads, limit how often you see the same ad and prevent fraud. On your first visit a banner asks whether you agree; you can change your mind at any time.
9. Changes
If we change this notice significantly, we will tell you on the site before the changes take effect.