The Data Controller for all personal data collected through the ISMIRA brand — including its websites, landing pages, funnels, advertising campaigns, and any other contact channel — is:

• Company: STEADY PATH LLC – Strategic Change Agency
• Registered Address: 30 N Gould St, Ste 60629, Sheridan, WY 82801, USA
• Brand: ISMIRA
• Contact Email: info@strategic-change.agency

For all data protection inquiries, opt-out requests, or exercise of rights, the User must contact the Company in writing at the email address above.

Il Titolare del Trattamento per tutti i dati personali raccolti tramite il brand ISMIRA è STEADY PATH LLC – Strategic Change Agency, 30 N Gould St, Ste 60629, Sheridan, WY 82801, USA. Per qualsiasi richiesta relativa alla privacy: info@strategic-change.agency.

By interacting with any ISMIRA touchpoint — including landing pages, opt-in forms, advertising campaigns (Meta Ads / Facebook / Instagram), webinars, free resources, checkout pages, or telephone contact — the User may provide the following categories of personal data:

• Identification data: first name, last name;
• Contact data: email address, mobile phone number, fixed phone number;
• Behavioural and advertising data: interactions with Meta Ads campaigns (clicks, views, conversions), pixel data, cookies, device identifiers, IP address, browser and device type;
• Commercial data: purchase history, package selected, payment status;
• Communication data: records of email, SMS, and telephone interactions with the Company or its authorised third-party vendors.

Provision of identification and contact data (name, email, phone number) is voluntary but necessary to receive the services and marketing communications of the ISMIRA brand. Failure to provide such data will prevent the Company from delivering the requested services or communications.

Interagendo con qualsiasi touchpoint ISMIRA (landing page, form di opt-in, campagne Meta Ads, webinar, checkout), l'Utente può fornire: nome, cognome, email, numero di cellulare/fisso, dati comportamentali pubblicitari (pixel Meta, cookie, IP), storico acquisti e dati di comunicazione. Il conferimento dei dati di contatto è volontario ma necessario per ricevere i servizi e le comunicazioni del brand ISMIRA.

The Company processes personal data for the following purposes:

3.1 Lead Acquisition and Direct Marketing (Meta Ads / Facebook / Instagram Ads)
The Company runs paid advertising campaigns on Meta platforms (Facebook, Instagram, and their Audience Network). By interacting with these advertisements and submitting an opt-in form or lead generation form, the User expressly consents to the Company collecting their data for marketing purposes. Legal basis: explicit consent (Art. 6(1)(a) GDPR).

3.2 Email Marketing
The email address provided by the User will be used to send commercial communications, promotional offers, educational content, event invitations, product launches, and follow-up sequences related to ISMIRA products and services. Legal basis: explicit consent given at the time of data submission. The User may unsubscribe at any time using the unsubscribe link included in every email.

3.3 SMS Marketing
The mobile phone number provided by the User may be used to send commercial SMS messages, reminders, promotional communications, and event notifications related to ISMIRA products and services. Legal basis: explicit consent given at the time of data submission. The User may opt out at any time by following the procedure set out in Article 7.

3.4 Sales Calls and Telephone Contact
The phone number provided by the User may be used by the Company or by authorised external sales teams and third-party service providers acting on the Company's behalf to contact the User by telephone for commercial, informational, or follow-up purposes related to ISMIRA products. Legal basis: explicit consent given at the time of data submission. By providing their phone number, the User expressly acknowledges and consents to being contacted by telephone, including by third-party sales teams authorised by the Company.

3.5 Contract Execution and Customer Support
Personal data is processed to manage the contractual relationship, provide access to purchased products, issue receipts, handle support requests, and manage payment plans. Legal basis: execution of a contract (Art. 6(1)(b) GDPR).

3.6 Legal Obligations and Legitimate Interests
Data may be processed to comply with applicable legal obligations or to pursue the Company's legitimate interests, including fraud prevention, platform security, and enforcement of contractual terms.

Finalità del trattamento: (3.1) acquisizione lead tramite Meta Ads e consenso esplicito; (3.2) email marketing con possibilità di disiscrizione; (3.3) SMS marketing con possibilità di opt-out; (3.4) chiamate commerciali da parte della Società o di team di vendita esterni e terze parti autorizzate — fornendo il numero di telefono, l'Utente acconsente espressamente al contatto telefonico anche da parte di tali soggetti; (3.5) esecuzione del contratto e supporto clienti; (3.6) obblighi legali e interessi legittimi.

4.1 Disclosure to Third Parties. The User expressly acknowledges and accepts that the personal data provided — including name, email address, and mobile phone number — may be shared with and processed by the following categories of third parties:

• External sales teams: independent or contracted sales professionals and agencies authorised by the Company to contact leads and manage commercial follow-up on behalf of ISMIRA;
• Email and SMS marketing platforms: third-party software providers used to send email sequences and SMS campaigns (e.g. CRM and automation tools);
• Advertising platforms: Meta Platforms Inc. (Facebook, Instagram) and related advertising technology providers for campaign targeting, pixel tracking, and Custom Audience creation;
• CRM and sales management platforms: tools used to record, organise, and manage lead and customer data;
• Payment processors: third-party services used to process transactions securely;
• Analytics and tracking tools: platforms used to measure website and funnel performance.

4.2 User's Awareness and Acceptance of Third-Party Processing. By submitting their personal data through any ISMIRA form, landing page, or opt-in channel, the User expressly acknowledges and irrevocably accepts that their data will be transmitted to and independently processed by the third-party categories listed above. The User is fully aware of this at the time of data submission.

4.3 International Transfers. Given that the Company is based in the USA and uses third-party platforms whose servers may be located outside the European Economic Area, personal data may be transferred to and processed in countries outside the EU/EEA, including the United States. Such transfers are carried out in accordance with applicable data protection regulations, including through Standard Contractual Clauses where applicable.

4.1–4.3 I dati personali (nome, email, telefono) possono essere condivisi con: team di vendita esterni autorizzati, piattaforme di email/SMS marketing, Meta Platforms Inc., CRM, processori di pagamento e strumenti di analytics. Fornendo i propri dati, l'Utente prende atto e accetta espressamente che questi saranno trasmessi a tali soggetti. La Società non è responsabile dell'uso autonomo dei dati da parte di terze parti. I dati possono essere trasferiti negli USA e in paesi extra-UE.

5.1 The Company uses the Meta Pixel (formerly Facebook Pixel) on its landing pages, websites, and funnels. This technology allows the Company to track user interactions (page visits, form submissions, purchases, video views) and to create Custom Audiences for advertising retargeting purposes on Facebook and Instagram.

5.2 By visiting any ISMIRA page or submitting a lead form, the User consents to the activation of the Meta Pixel and to the processing of behavioural data for advertising optimisation and retargeting purposes. The User may manage their Meta advertising preferences directly through their personal Facebook/Instagram account settings or through the Meta Ad Preferences tool.

5.3 Meta Platforms Inc. acts as an independent data controller for its own processing activities and is governed by its own Privacy Policy, available at https://www.facebook.com/privacy/policy/.

La Società utilizza il Meta Pixel sulle proprie landing page e funnel per tracciare le interazioni degli utenti e creare pubblici personalizzati per la pubblicità su Facebook e Instagram. Visitando una pagina ISMIRA, l'Utente acconsente all'attivazione del Pixel. Meta Platforms Inc. è titolare autonomo del trattamento per le proprie attività.

Personal data will be retained for the following periods:

• Marketing data (email, phone, SMS): for the duration of the User's active consent, and for up to 24 months from the last interaction, unless the User opts out earlier;
• Customer and purchase data: for the duration of the contractual relationship and for up to 10 years thereafter, in compliance with applicable US and international accounting and legal obligations;
• Advertising and behavioural data: in accordance with the retention policies of the relevant advertising platforms (Meta, etc.);
• Opt-out records: retained indefinitely to demonstrate compliance with the User's withdrawal of consent and to prevent future unsolicited contact.

I dati di marketing vengono conservati per la durata del consenso attivo e fino a 24 mesi dall'ultima interazione. I dati acquisti/contrattuali fino a 10 anni. I record di opt-out vengono conservati a tempo indeterminato come prova di compliance.

The User has the right to withdraw consent to marketing communications at any time, with immediate effect for future communications. The Company has established the following procedure to ensure that opt-out requests are communicated to all parties involved — including the Company itself, any external sales teams, and any authorised third-party service providers who may hold and use the User's contact data.

7.1 How to Submit a Marketing Stop Request. To stop all marketing communications — email, SMS, and/or telephone calls — the User must submit an explicit written opt-out request using one or more of the following methods:

7.2 Email Unsubscribe. Each marketing email sent by the Company includes an unsubscribe link at the bottom. Clicking this link will immediately remove the User from the Company's email marketing list. Note: this action applies to email communications only and does not automatically stop telephone or SMS contact.

7.3 SMS Opt-Out. To stop SMS communications, the User may reply STOP to any SMS received from the Company or its authorised senders, or submit a written request as described in Article 7.1.

7.4 Telephone Opt-Out. To stop telephone contact by the Company's internal team, external sales teams, or any authorised third-party vendor, the User must submit a written opt-out request as described in Article 7.1. Upon receipt of such request:

• The Company will immediately update its internal records to flag the User's opt-out status;
• The Company will notify all external sales teams and authorised third-party service providers who hold the User's contact data of the opt-out request, instructing them to cease all contact;
• External teams and third parties will be required to update their own records within a reasonable timeframe.

7.1–7.4 L'Utente può revocare il consenso al marketing in qualsiasi momento inviando email a info@strategic-change.agency con oggetto MARKETING STOP – [Nome] – [Telefono]. La richiesta verrà trasmessa alla Società, ai team di vendita esterni e a tutte le terze parti autorizzate che detengono il contatto. Per email: link di disiscrizione in ogni email. Per SMS: rispondere STOP. La Società non è responsabile per eventuali contatti residui da parte di terzi dopo la trasmissione della richiesta di opt-out.

Subject to applicable law, the User has the right to:

• Access: obtain confirmation of whether personal data is being processed and receive a copy;
• Rectification: request correction of inaccurate or incomplete data;
• Erasure ("Right to be Forgotten"): request deletion of personal data, subject to legal retention obligations;
• Restriction: request limitation of processing in certain circumstances;
• Portability: receive personal data in a structured, machine-readable format;
• Objection: object to processing based on legitimate interests or for direct marketing purposes;
• Withdrawal of Consent: withdraw consent at any time without affecting the lawfulness of prior processing.

All requests must be submitted in writing to: info@strategic-change.agency. The Company will respond within 30 days of receipt.

L'Utente ha diritto di accesso, rettifica, cancellazione, limitazione, portabilità, opposizione e revoca del consenso. Tutte le richieste devono essere inviate a info@strategic-change.agency. La Società risponderà entro 30 giorni.

The Company's web properties use cookies and similar tracking technologies for the following purposes: technical functionality, session management, analytics, conversion tracking (including Meta Pixel), and advertising optimisation. By continuing to use the Company's web properties after being informed of cookie usage, the User consents to the use of non-essential cookies. The User may manage cookie preferences through their browser settings at any time.

Le proprietà web della Società utilizzano cookie tecnici, analitici e di profilazione (incluso il Meta Pixel). Continuando a navigare dopo l'informativa sui cookie, l'Utente acconsente all'uso dei cookie non essenziali. È possibile gestire le preferenze tramite le impostazioni del browser.

The Company implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or disclosure. However, no data transmission or storage system can be guaranteed to be 100% secure. The User is responsible for maintaining the confidentiality of their own access credentials.

La Società adotta misure tecniche e organizzative adeguate per proteggere i dati personali. Nessun sistema può essere garantito al 100% sicuro. L'Utente è responsabile della riservatezza delle proprie credenziali di accesso.

11.1 Governing Law. This Privacy Policy is governed by the laws of the State of Wyoming, USA. For Users in the European Union, the Company processes data in accordance with the principles of the GDPR to the extent applicable to a non-EU controller offering services to EU residents.

11.2 Jurisdiction. Any dispute arising from this Privacy Policy shall be resolved exclusively before the courts of Sheridan County, Wyoming, USA.

11.3 Updates. The Company reserves the right to update this Privacy Policy at any time. The current version will always be published on the ISMIRA website. Material changes will be communicated to registered Users via email.

11.4 Controlling Language. The English version of this Privacy Policy is the legally binding version. The Italian translation is provided for convenience only.

La presente Privacy Policy è disciplinata dalle leggi dello Stato del Wyoming, USA. Per gli Utenti UE, la Società tratta i dati nel rispetto dei principi del GDPR. Foro esclusivo: Sheridan County, Wyoming. La Società si riserva di aggiornare la Policy in qualsiasi momento. La versione inglese è quella giuridicamente vincolante.