Privacy
Privacy notice
and cookie policy.
This website handles personal data in the most reduced way possible: no tracking, no analytics, no data shared with third parties. Below is the complete detail, as required by Regulation (EU) 2016/679 (GDPR).
1. Data controller
The data processed on this website is owned by Alessandro Di Coste, in the capacity of owner of the Life Rocks™ — Innovative Vital League trademark.
Contacts for data-subject rights: WhatsApp +39 334 1331094.
2. Personal data processed
No data is collected passively on this website (no analytics, no profiling cookies). The personal data are those you provide voluntarily by filling out the forms:
- Waitlist form (Applications page): full name, email address.
- Partner form (Partner page): company name, full name, email address, optional message.
In addition, the IP address of the request is processed, only in irreversible hash form (SHA-256 with salt), exclusively for anti-abuse purposes: it is not possible to trace back to an identity from this value.
3. Purposes and legal basis
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Managing the request sent through the forms and contacting you about it | Consent (lit. a) — given by filling out the form |
| Communications relating to the waitlist of the food application | Consent (lit. a) |
| Anti-abuse protection of the forms (IP hash, Turnstile verification) | Controller's legitimate interest (lit. f) |
4. Storage and place of processing
The data is stored in a database managed by Cloudflare (D1 service) in the data centers of the Cloudflare infrastructure. The form data is kept for the time strictly necessary for the purpose: up to 24 months from collection, unless an earlier deletion is requested. The IP hash is not associated with any other personal data.
5. Categories of recipients and sub-processors
The data is not sold or shared with third parties. The only entity that accesses the data in the capacity of data processor (Art. 28 GDPR) is:
- Cloudflare, Inc. — website hosting, anti-bot verification (Turnstile), D1 database. Cloudflare operates as a processor under a dedicated Data Processing Agreement; transfers outside the EU are based on the Standard Contractual Clauses approved by the European Commission.
6. Data-subject rights
At any time you can exercise the rights provided for in Arts. 15–22 GDPR: access, rectification, erasure, restriction, data portability and objection to the processing. To do so, it is enough to write on WhatsApp (+39 334 1331094) indicating the subject of the request; we will reply within 30 days.
7. Complaint
You always have the right to lodge a complaint with the Data Protection Authority (Garante per la protezione dei dati personali — www.garanteprivacy.it).
8. Changes to this notice
Any updates to this page will be published here, with the date of the last update.
Last updated: 31 August 2026.