Privacy notice
Data controller
The data controller is AstriOnLine, the website available at www.astrionline.com. For data protection requests you can write to admin@astrionline.com.
Data processed while browsing
Our IT systems and hosting service may automatically collect technical data needed for the connection and for security: IP address, date and time of the request, URL visited, response code, user agent, referrer and information about the device or browser.
The site does not require you to create a public account. Data entered by administrators and authors in the WordPress area is processed for the editorial and technical management of the project.
Data used by the tools
The consultation pages may ask for data in order to produce a result. When a tool works entirely in the browser, the information is not necessarily sent to or stored by the site. If a feature transmits data to the server, the page must say so before you submit it.
Do not enter health, judicial or financial data or other particularly sensitive information in free-text fields. Questions for a tarot reading can be framed in your mind without sharing their content with the site.
Purposes and legal bases
- to deliver the pages and features you request;
- to protect the site from abuse, unauthorised access and malfunctions;
- to manage content, backups and updates;
- to respond to privacy-related requests;
- to comply with legal obligations or requests from the authorities.
Depending on the case, processing is based on carrying out a request made by the user, on the legitimate interest in the security and operation of the site, on consent where required, or on a legal obligation.
Providers, recipients and transfers
Technical data may be processed by hosting, maintenance, security and backup providers to the extent necessary for the service. These parties act as processors or independent controllers depending on their role.
If a provider processes data outside the European Economic Area, the transfer must rely on a basis provided for by the GDPR, such as adequacy decisions or standard contractual clauses. AstriOnLine does not sell personal data.
Retention periods
Technical logs are kept for as long as needed for security, diagnostics and protecting the service, unless longer periods are required by law or needed to establish abuse. Backups follow technical rotation cycles. Privacy requests are kept for as long as needed to handle them and document the outcome.
Your rights
In the cases provided for by Articles 15–22 of the GDPR you can request access, rectification, erasure, restriction, portability or object to processing. You can withdraw your consent without affecting the lawfulness of earlier processing. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the supervisory authority of the country where you live.
To exercise your rights, write to admin@astrionline.com with a sufficiently clear request. We may need to verify your identity to avoid disclosing information to unauthorised people.
Minors and updates
The site is not designed to knowingly collect data from minors. If you believe personal data has been submitted without valid consent, please contact the controller.
This notice may be updated following technical, regulatory or service changes. The version published on this page is the one that applies. Last updated: 25 September 2026.