Skip to content

Last updated: October 7, 2026 · Policy version: 1.1

What changed from version 1.0: this version correctly names the three Joint Controllers and describes more precisely the tools the website actually installs. The tools and the consent categories have not changed, so the choices you have already made on the banner remain valid.

1. Who processes your data: the Joint Controllers

Mairuna – Centro Maternità Evolutiva is not a company: it is a project shared by three independent professionals, each with her own VAT number, who together determine the purposes and means of the processing of the data collected through the website. For this reason they act as Joint Controllers pursuant to art. 26 GDPR:

Joint ControllerVAT numberRole
Dott.ssa Elena Petris02879310304founder, perinatal educator
Dott.ssa Giorgia Nadin01779490935founder, midwife and IBCLC certified lactation consultant
Dott.ssa Chiara Tosolini02870420300founder, midwife

Operating locations: Via Cormor Alto, 134/4, 33100 Udine (UD), Italy — main location; Viale dello Sport, 31, 33074 Fontanafredda (PN), Italy. We see you by appointment.

Single point of contact for privacy matters: email [email protected], phone +39 351 404 8761. Every request is handled jointly, regardless of which Joint Controller receives it, and you may exercise your rights in respect of each of them (art. 26(3) GDPR). The essence of the joint controllership arrangement is published at point 3 of the Privacy Notice.

2. What cookies and similar technologies are

Cookies are small text files that websites store on your device. Together with similar technologies — the browser's localStorage, pixels, identifiers — they enable the website to function, measure traffic and, only with your consent, run marketing. On this page we use "cookies" to mean all of these technologies.

3. Legal basis and consent

Technical/necessary cookies require no consent (art. 122 of the Codice Privacy, the Italian Privacy Code, and the Italian Data Protection Authority's Guidelines of June 10, 2021). All the others — analytics and marketing — are installed only after your explicit consent, collected through the banner on your first visit, category by category. Until you choose, these tools remain disabled: the website sets Google Consent Mode v2 to "denied" by default and loads measurement and marketing scripts only after consent.

You can change or withdraw your consent at any time through the "Manage cookies" link at the bottom of every page. Withdrawal takes effect immediately on the website's tools and does not affect the lawfulness of processing carried out beforehand.

4. Tools and cookies used

4.1 Necessary (always on — no consent required)

Cookie / identifierProviderPurposeDurationType
cookie_consentMairuna (first party)Stores your banner choices (analytics yes/no, marketing yes/no) and the policy version in force when you made them12 monthsHTTP cookie
mairuna_doi_tokenMairuna (first party)Set only when you click the newsletter confirmation link, to complete the confirmation securely30 minutesHTTP cookie (httpOnly)
__cf_bm, cf_clearance (where applicable)Cloudflare, Inc.Protection of the website against automated traffic and attacks; set only when the protection system requires it__cf_bm: 30 minutes; cf_clearance: variable, set by the protection serviceHTTP cookie

No technical cookie is used to identify you or to follow you across other websites. The website's typefaces are hosted on our own servers and generate no connections to Google.

4.2 Analytics (consent required — "Analytics" category)

Cookie / identifierProviderPurposeDurationType / Transfer
ph_<id>_posthog (cookie) and ph_* keys in localStoragePostHog (EU Cloud instance)Usage statistics (page views, clicks, navigation paths), heat maps and session recordings with all form fields masked. We do not build individual profiles of visitors who do not identify themselves.12 monthsHTTP cookie + localStorage · data travels through our own domain (the /ingest path) and is hosted in the European Union

4.3 Marketing (consent required — "Marketing" category)

Cookie / identifierProviderPurposeDurationType / Transfer
_fbpMeta Platforms Ireland Ltd.Browser identifier used to measure and optimize campaigns on Facebook and Instagram3 monthsHTTP cookie · transfer to the US (Data Privacy Framework / Standard Contractual Clauses)
_fbcMeta Platforms Ireland Ltd.Ad-click attribution (fbclid parameter); set only if you reach the website from a Meta ad3 monthsHTTP cookie · US
gtmeecMeta Platforms Ireland Ltd. (through the Meta Pixel template in Google Tag Manager)Stores, in hashed form, the advanced-matching parameters used by the pixeluntil deletedlocalStorage · US
Meta Pixel + Conversions APIMeta Platforms Ireland Ltd.Sends a generic conversion event (Lead) from the browser and from our server when you submit a form; the email address is hashed (SHA-256) before sending and an event identifier prevents double counting. The event contains no reference to the course, the pathway or the page you came from.eventpixel + server-side · US

Google Tag Manager (Google Ireland Ltd.) is used solely as a tag manager: it sets no profiling cookies of its own and loads only the Meta Pixel tag, in accordance with your consent state (Consent Mode v2). Until you consent to the "Marketing" category, the pixel is not loaded.

4.4 Embedded third-party content

  • YouTube videos (Google Ireland Ltd.): videos are embedded through the youtube-nocookie.com domain, in privacy-enhanced mode. Google sets no cookies until you start playback; on playback it may set cookies or identifiers on its own domain, in accordance with its privacy policy.
  • WhatsApp buttons: these are plain links to the WhatsApp app or website. They set no cookies and send nothing to Meta until you click them.

5. Transfers outside the European Union

Analytics data (PostHog) is hosted in the European Union. Marketing data (Meta) and data processed by Google and Cloudflare may be transferred to the United States, on the basis of the EU-US Data Privacy Framework adequacy decision, for suppliers that adhere to it, and/or of the Standard Contractual Clauses approved by the European Commission. Further details at point 9 of the Privacy Notice.

6. Consent storage and proof

The cookie_consent cookie remembers your choice on your device for 12 months. So that we can demonstrate that we obtained valid consent (art. 7(1) GDPR), each time you make a choice on the banner we also record on our systems the date and time, policy version, categories accepted or refused, IP address and browser user agent; this record is kept for 5 years, as stated at point 5.10 of the Privacy Notice.

After 12 months, or when a new version of the policy requires it (for example because we add a tool or a category), the banner is shown to you again.

7. Managing cookies

  • Banner: on your first visit, with equally prominent "Accept all" and "Reject all" buttons, and "Customize" to choose category by category and then "Save preferences".
  • At any time: the "Manage cookies" link at the bottom of every page, to change or withdraw your choices.
  • Browser: you can also block or delete cookies from your browser settings (this may limit some features of the website).

8. Your rights

You may at any time exercise the rights provided for by art. 15–22 GDPR (access, rectification, erasure, restriction, objection, portability, withdrawal of consent) by writing to [email protected], in respect of any one of the Joint Controllers. You may also lodge a complaint with the Garante per la protezione dei dati personali (the Italian Data Protection Authority). Full details at point 10 of the Privacy Notice.

9. Links

  • Privacy Notice — full information notice on the processing of personal data
  • Terms & Conditions — conditions of use of the website and of participation in the courses
  • Manage cookies — link at the bottom of every page, to change or withdraw your choices
Cookie Policy