Privacy Policy

The site provides the Training, Instructor Training and Open a Team forms. The fields collected are the same for all of them.

Required fields

• Name
• Email address
• City
• Message

Optional fields

• Phone number

Data added automatically on submission

• The category of the form used (to route the request to the right person)
• The site language in use (Italian or English), so we can reply in the same language
• A technical submission identifier, used to avoid duplicate sends

We do not ask for special-category data (for example health data) and we ask you not to include any in the message field. We do not use profiling or automated decision-making.

The form on the “Become an instructor” page collects broader data, needed to assess the application. This data is stored in the site database (Lovable Cloud infrastructure) and sent by email to LEGIO.

• First name, last name, age, city, province or state, country
• Email address and WhatsApp number
• Level of interest and chosen path (MMA, Striking, Grappling, Performance)
• Disciplines practised, main discipline, years of practice and overall experience
• Belts, qualifications, certifications and diplomas
• Weekly sessions, competitive experience, gym and coach
• Teaching experience, motivation, willingness to travel and interest in opening a Team
• If you request the assessment for direct access to Level 2: discipline, years of practice, qualifications, competitive and teaching experience, gym or organization, description of your technical background, any link to a curriculum, profile or references, and the specific consents for the video call and video test
• The internal status of the application, the history of status changes and any assessment notes
• The technical outcome of the confirmation and notification emails (address, date and time, any error), used only to verify delivery and retry sending

The companies and events form collects the data needed to assess the request and get back to the company. The data is sent by email to LEGIO; any attachments are uploaded to a private storage area and shared with LEGIO through temporary links.

• Company name, business sector and registered office or city
• Name, role, email address and phone number of the contact person
• Type of activities requested and any details in the “Other” field
• Date or period, location and estimated number of participants
• Goals and requirements described freely
• Any uploaded attachments (PDF, JPG, PNG), for example the completed form or a company presentation

The site stores only a few technical items in your browser’s local storage: the language you selected and your choices about the Spotify player and Google Analytics. They stay on your device and are not transmitted to us. Details are in the Cookie Policy.

To verify that the site works correctly we use PostHog, a technical analytics service whose servers are located in the European Union. We collect: the pages visited (including navigation within the site), aggregated interactions with page elements, performance indicators (Web Vitals) and any technical page errors.

• Session recording is disabled.
• Analytics data is kept only in the page’s memory: PostHog stores no cookies and no data in the browser’s local storage.
• From visited pages and links we remove URL parameters and fragments before sending.
• Private and restricted areas of the site do not send element interactions.
• Passwords and form field contents are not recorded.

Only if you consent on the Preferences page do we also use Google Analytics 4 for aggregated statistics on pages visited. Before consent Google Analytics is not loaded and receives no data. With consent Google may receive the full page URL, including any technical query parameters, as well as connection data; we do not intentionally send form contents or passwords; the private areas defined in the code remain excluded. You can withdraw consent at any time.

Ordinary contact requests and company/event requests are not stored in a site database: they remain in the mailbox. Instructor applications, however, are recorded in the site database (Lovable Cloud), because the assessment requires keeping them and updating their status. Attachments from company requests and applications are uploaded to private storage areas, accessible only to LEGIO through temporary links.

• Form data is sent from your browser to the site code, hosted on Lovable’s infrastructure (Cloudflare delivery network).
• The code passes it to Lovable’s built-in email service, which composes and delivers two messages: the notification to us and the confirmation to you.
• For instructor applications, the data is also saved in the Lovable Cloud database and consulted from LEGIO restricted area.
• The notification arrives in the legio.contatti@gmail.com mailbox, operated by Google (Gmail), with your email address set as Reply-To so we can reply to you.
• The email service and the mail systems involved keep technical delivery logs (for example sender, recipient, delivery outcome) for operational and security purposes.

The retention periods of our providers’ logs are outside our control and have not yet been verified: as soon as they are available they will be stated in this notice. We do not state periods we have not confirmed.

• Lovable — site hosting and code execution, through the Cloudflare delivery network.
• Lovable — built-in email service that delivers the notification and the confirmation from the sender noreply@notify.legioofficial.com.
• Google (Gmail) — mailbox where we receive and keep the requests.
• Spotify — only if you activate the player on the Podcast page, and limited to the connection data described in the Cookie Policy.
• PostHog — technical analytics of the site (pages visited, aggregated interactions, performance, errors), with servers in the European Union.
• Google (Google Analytics 4) — aggregated statistics on pages visited, only after your analytics consent.

The controller is based in the United States and the mailbox is US-based: the data you send us is therefore also processed outside the European Economic Area. Our providers’ contractual terms and the specific safeguards applicable to these transfers are being verified and will be stated here: we do not claim safeguards we have not yet ascertained.

We do not sell or transfer your data to third parties for advertising purposes.

For simple information requests: deletion from the mailbox within 12 months of the last contact, or earlier if the data is no longer necessary. This is a procedure carried out manually by the controller, not an automatic system deletion.

If a contractual relationship arises from the request, or if accounting documents or a dispute are involved, separate retention criteria apply, based on legal obligations and the protection of rights.

The 12-month period concerns our mailbox and does not apply to providers’ technical logs, whose retention periods remain to be verified.