Privacy Policy
Last updated: 1 October 2026
This Privacy Policy describes how personal data may be processed when you visit and use THE MINDFUL LAB, available at www.tobejoyfultobesoul.com.
The website is operated by Romea Ponza, based in Rome (RM), Italy.
For any request concerning privacy or the processing of personal data, you can contact:
privacy@tobejoyfultobesoul.com
1. Data Controller
The Data Controller is:
Romea Ponza
Rome (RM), Italy
Email for privacy and data protection matters: privacy@tobejoyfultobesoul.com
The above email address is intended specifically for requests concerning privacy, personal data and the exercise of data protection rights.
2. Data Collected When You Visit the Website
When you visit this website, certain technical information may be processed automatically as part of the normal operation and security of the website and its hosting infrastructure.
This information may include, for example, the IP address, browser and device information, date and time of access, requested pages or resources, and technical information relating to the request.
Such data may be processed for purposes including:
- providing and displaying the website correctly;
- maintaining the security and integrity of the website;
- preventing or detecting abuse, malicious activity and technical problems;
- ensuring the proper functioning of the website and its services.
Where technically necessary, this processing is based on the legitimate interest in operating and protecting the website and its infrastructure, pursuant to Article 6(1)(f) GDPR. Where processing is necessary to provide a service specifically requested by the user, Article 6(1)(b) GDPR may also apply.
Ora inseriamo la sezione 3, dedicata a Burst Statistics. Visto che abbiamo già configurato Burst in modalità cookieless, il testo deve riflettere esattamente questa scelta:
3. Website Statistics – Burst Statistics
This website uses Burst Statistics to obtain aggregated information about website usage and performance.
Burst Statistics is configured on this website in cookieless mode. In this configuration, statistical analysis does not rely on cookies for tracking visitors.
The information collected is used to understand, in aggregate, how the website is used and to improve its content, usability and performance. It is not used by the website owner to create advertising profiles or to track visitors across different websites.
The processing of aggregated website statistics in this configuration is carried out for the legitimate interest of understanding and improving the website and its performance, pursuant to Article 6(1)(f) GDPR.
4. Newsletter and Email Subscriptions
Visitors may choose to subscribe to THE MINDFUL LAB in order to receive new posts by email.
The subscription service is provided through Jetpack / WordPress.com, services operated by Automattic Inc.
When you subscribe, your email address and certain technical information necessary to process and protect the subscription may be processed. A confirmation email is sent to the address provided, and the subscription becomes active after the required confirmation process.
The data is processed for the purpose of providing the subscription service requested by the user. The legal basis is Article 6(1)(a) GDPR (consent) and, where applicable, Article 6(1)(b) GDPR for steps necessary to provide the requested subscription service.
Subscribers can manage their subscription preferences or unsubscribe using the options provided by WordPress.com and in subscription-related emails.
Subscription data may be processed by Automattic in connection with the operation and security of the service. Where personal data is transferred outside the European Economic Area, applicable safeguards required under the GDPR are used.
Email addresses collected for newsletter subscriptions are not used by the website owner for unrelated marketing purposes.
5. Anti-Spam Protection – Akismet
This website uses Akismet, an anti-spam service provided by Automattic, to help protect the website from spam and abusive or malicious submissions.
When Akismet processes a submission, technical and contextual information may be analysed for anti-spam purposes. Depending on the type of interaction, this may include information such as the IP address, user agent, referrer and other data associated with the submission.
This processing is carried out for the purpose of protecting the website and its services from spam, abuse and malicious activity. The legal basis is the legitimate interest in maintaining the security and integrity of the website and its services, pursuant to Article 6(1)(f) GDPR.
Data processed through Akismet may be transmitted to and processed by Automattic in accordance with its applicable privacy and data protection safeguards.
6. Cookies and Consent Management
This website uses a consent management system provided through Cookie Compliance for WordPress / Hu-manity.co to manage visitors’ privacy and cookie preferences.
When you visit the website, the consent interface allows you to select and save your privacy preferences. These preferences may determine whether optional services or content that may involve cookies or other similar technologies can be activated.
Information necessary to record and respect your consent choices may be stored or processed for this purpose.
Where a service requires consent, it is activated only in accordance with the preferences expressed through the consent interface. You can review or change your choices through the available consent controls.
Strictly necessary technologies may be used without consent where they are required for the operation, security or delivery of the website or for recording privacy choices.
Further information about the cookies and similar technologies used by this website, their purposes and the available choices is provided in the Cookie Policy.
7. Embedded Content – YouTube
Some pages or posts on this website may contain videos embedded from YouTube, a service provided by Google.
YouTube content that may involve non-essential cookies or similar technologies is blocked before the required consent is given. A placeholder may be displayed instead of the video, allowing the visitor to decide whether to enable the content.
If you choose to enable and view YouTube content, your browser may establish a connection with Google/YouTube. In this case, information such as your IP address, device and browser information, and information relating to your interaction with the embedded content may be transmitted to Google. Cookies or similar technologies may also be used by YouTube according to your consent choices and Google’s own policies.
The legal basis for activating non-essential YouTube content and related technologies is your consent pursuant to Article 6(1)(a) GDPR and, where applicable, Article 5(3) of the ePrivacy Directive and the corresponding national rules.
You can refuse consent and continue to use the website without activating the embedded YouTube content. Where available through the consent management system, you can also review or change your preferences later.
8. Social Sharing
This website provides sharing options that allow visitors to share content through third-party platforms and services, including social networks and messaging services.
These sharing features are provided through Jetpack. Depending on the service selected, clicking a sharing option may direct you to the relevant third-party platform or initiate a sharing function.
When you choose to interact with a third-party service, that service may process information about you according to its own privacy policy and terms. This may include technical information such as your IP address and browser or device information, as well as information associated with your account if you are logged in to that service.
THE MINDFUL LAB does not control the processing subsequently carried out by these independent third-party platforms. You should refer to the privacy information provided by the relevant service for details about its processing activities.
9. Jetpack and Automattic Services
This website uses Jetpack, a service provided by Automattic, for selected website functions, including security, technical functionality, resource delivery, sharing and subscription-related features. In connection with the operation of Jetpack, certain website and technical data may also be transmitted to or synchronised with Automattic as necessary to provide and maintain the enabled services.
In providing these functions, Automattic may process technical information necessary for the operation, security and delivery of its services, such as IP address, browser and device information, requested URLs and other technical request data.
The website uses only selected Jetpack features. Features that are not active on this website are not intended to be covered by this section merely because they are available within the Jetpack platform.
Where processing is necessary for the technical operation and security of the website, it is carried out on the basis of the legitimate interest in maintaining a functional and secure website pursuant to Article 6(1)(f) GDPR. Where a visitor specifically requests a service, the processing necessary to provide that service may also be based on Article 6(1)(b) GDPR. Where consent is legally required for a particular technology or service, that service is subject to the visitor’s consent choices.
Automattic may process data outside the European Economic Area. Where applicable, international transfers are subject to the safeguards provided for under applicable data protection law.
Ora passiamo alla sezione 10 – Data Retention. Qui evitiamo di inventare periodi fissi che non abbiamo verificato: la durata dipende dal servizio e dallo scopo.
10. Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected or processed, taking into account legal, technical and security requirements.
In particular:
- data relating to newsletter subscriptions may be retained for as long as the subscription remains active and as necessary to manage the subscription and related records;
- consent preferences and related records may be retained for the period necessary to document and respect the visitor’s choices;
- technical and security data may be retained for the period reasonably necessary to ensure website security, prevent abuse and investigate technical or security incidents;
- anti-spam data is retained according to the operation and retention practices of the relevant anti-spam service.
Where data is processed by third-party service providers, their applicable retention periods may also apply. Data may be retained for a longer period where this is required by law or necessary for the establishment, exercise or defence of legal claims.
When personal data is no longer required for the relevant purpose, it is deleted or anonymised where appropriate.
11. Your Data Protection Rights
Under the General Data Protection Regulation (GDPR), where applicable, you have the right to:
- request access to your personal data;
- request the correction of inaccurate or incomplete personal data;
- request the deletion of your personal data where the legal requirements are met;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive personal data in a structured, commonly used and machine-readable format where the right to data portability applies;
- withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
- lodge a complaint with a competent data protection supervisory authority.
To exercise your data protection rights in relation to this website, you can contact:
privacy@tobejoyfultobesoul.com
Requests will be handled in accordance with the time limits and requirements established by applicable data protection law.
12. International Data Transfers
Some of the service providers used by this website may process personal data in countries outside the European Economic Area (EEA), including the United States.
Where personal data is transferred outside the EEA, such transfers are carried out in accordance with applicable data protection law and, where required, on the basis of appropriate safeguards, such as an adequacy decision, the EU-U.S. Data Privacy Framework where applicable, Standard Contractual Clauses approved by the European Commission, or other legally recognised transfer mechanisms.
Further information about international transfers and the safeguards adopted by individual service providers can be found in their respective privacy policies.
13. External Links and Third-Party Websites
This website may contain links to external websites or services operated by third parties.
When you follow an external link and leave this website, the processing of your personal data by the external website or service is governed by that third party’s own privacy policy and practices.
THE MINDFUL LAB does not control the privacy practices, content or data processing activities of independent third-party websites. Visitors are therefore encouraged to review the privacy information provided by the relevant third party.
14. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes to the website, the services used, or applicable legal and regulatory requirements.
When this Privacy Policy is updated, the “Last updated” date at the beginning of the document will be revised accordingly.
Visitors are encouraged to review this page periodically for any changes.
15. Supervisory Authority
If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.
As the Data Controller is established in Italy, you may contact the:
Garante per la protezione dei dati personali
You may also lodge a complaint with another competent supervisory authority where provided for under the GDPR.