Privacy
How personal data is handled on LLC Community, under the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Italian law. This is not an official LUISS service.
1. Who we are
Data controller: Enda Flannelly, Via Tommaso Campanella 41, 00197 Roma, Italy. Email: [email protected]. The site is run by students of the LUISS Language Café.
2. The short version
- You can visit the public pages without an account. Clubs, events and the timetable need a sign-in with your LUISS email.
- No ads, no analytics, no tracking, no content loaded from other companies.
- Just two technical cookies (see Cookies).
- You can download or delete your data yourself, at any time.
3. What data we process, why, and for how long
- Browsing data. Our network provider (Cloudflare) handles your IP address, the time and browser details to deliver the pages and keep them secure. We do not keep them. Legal basis: legitimate interest (Art. 6(1)(f)).
- Sign-in. Your LUISS email and a one-time code, stored only in scrambled form and valid for 10 minutes. Sessions last at most 30 days; you can see your signed-in devices and sign them out on My account. If you cannot reach your email, the site owner can, at your request and only in person after checking your student card, make a code for you instead of emailing it; this is recorded in the admin log. Legal basis: providing the service you asked for (Art. 6(1)(b)).
- Profile and activity. What you enter: display name, real name, bio, pictures, links; your clubs, club profiles, roles, votes, events, games and club logs. Legal basis: Art. 6(1)(b). Kept until you delete your account.
- Who sees it. Only signed-in users see profiles. You choose whether your email, real name, roles and clubs are shown. Site admins always see email and real name. Invite-only clubs are visible only to their members.
- Team and photos. Team cards (name, position, origin, languages, description, photo) and photos in Moments are published only with the people's consent (Art. 6(1)(a)). Photos in which children can be recognised only with a parent's or guardian's consent. Write to us and we remove them.
- Team timetable. Interns and volunteers enter their shifts; only people on the timetable see them. Legal basis: organising the team's work (Art. 6(1)(b) or (f)). Deleted with the account.
- Friendly poker games. For a friendly game, staff may type in the name of a player without an account; it is used only to follow that game, is linked to no one and counts in no standings or scores (Art. 6(1)(f)). Write to us and we remove it.
- Admin log. Who changed roles, events and club settings, for security and accountability (Art. 6(1)(f)).
- Messages. If you write to us (email, Instagram, WhatsApp), we use what you tell us to reply.
4. Who receives your data
- The server that hosts the site and its database is run by our team.
- Cloudflare, Inc. delivers the pages and protects them (data processor).
- Brevo (Sendinblue SAS, France) sends the sign-in code emails (data processor).
- Public authorities, where the law requires it. We do not sell data and do not profile anyone.
Some technical data (such as the IP address) may be processed by Cloudflare outside the European Economic Area, relying on the EU–US Data Privacy Framework or Standard Contractual Clauses.
5. Cookies
We only use technical cookies that are strictly necessary for a service you asked for, which need no consent (Art. 122 Italian Privacy Code; Garante cookie guidelines of 10 June 2021). That is why there is no banner.
__Host-session: keeps you signed in. Up to 30 days, or until you sign out.lang: remembers your language. 1 year.
No analytics, advertising or third-party cookies. Fonts, pictures and code are served from the site itself.
6. Your rights
You have the right to access, correct, erase, restrict, port and object (Arts. 15–21), and to withdraw consent at any time. On My account you can download all your data and delete your account. For anything else, write to [email protected]: we answer within one month. You can also complain to the Garante per la protezione dei dati personali.
7. Security and changes
The site is served only over HTTPS and uses no passwords. If the way we handle data changes, we update this page. Last updated: 27 October 2026.