Privacy Policy

Data Controller

The data controller for personal data processing is:

Elisabetta Galluzzi
VAT ID: IT01519520520
Email: info@hypatia.blue

Data Collected

We collect only the data you voluntarily provide. Depending on the service used, collected data may include:

Contact data (newsletter subscription):

• Name
• Email address

Data for birth chart generation:

• Full name
• Gender
• Date of birth
• Time of birth (optional)
• Place of birth (city, geographic coordinates, timezone)
• Email address

Gender is used exclusively to personalize the grammatical form of the astrological report text (e.g., adjective agreement in Italian). It is not used for profiling purposes nor shared with third parties.

Legal Basis and Purpose of Processing

Your data is processed on the following legal bases:

• Performance of a contract (Article 6(1)(b) of the GDPR): your birth data and gender are necessary to generate your personalized birth chart. Without this data, the service cannot be provided.
• Consent (Article 6(1)(a) of the GDPR): email communications (newsletter, updates) are sent only with your explicit consent, given via a dedicated checkbox at the time of registration.

Data Processors and Data Retention

Data is processed by the following external parties, acting as data processors pursuant to Article 28 of the GDPR:

• Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992: user account management, authentication, and birth chart data storage. Data is stored on servers within the European Union (Frankfurt, Germany).
• Brevo SAS (formerly Sendinblue), 106 boulevard Haussmann, 75008 Paris, France: contact list management and marketing/newsletter email communications. Data is stored on servers within the European Union.
• Resend Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA: delivery of transactional emails (login links, birth chart delivery). Your email address is transmitted solely for delivery purposes and is not retained for marketing.

Retention periods:

• Account and birth chart data (Supabase): retained for as long as your account remains active. You may request deletion at any time.
• Newsletter data (Brevo): retained until you withdraw consent.

Your Rights

Under Articles 15-22 of the GDPR, you have the right to:

• Access your personal data
• Request rectification of inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Request data portability
• Withdraw consent to email communications at any time via the unsubscribe link included in every email, without affecting the lawfulness of processing based on consent given prior to withdrawal

To exercise your rights, contact us at: ciao@hypatia.blue

Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority: Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy, www.garanteprivacy.it.

Cookies

This website uses only technical cookies necessary for the operation of the service (e.g., session cookies for authentication). No profiling or third-party cookies are used. No tracking or analytics tools are used.