PRIVACY POLICY

Data Controller

Enrico Guidi, with registered office at Via Santuario 35A, Abano Terme (PD), ZIP code 35031, Italy, VAT no. IT05520650283 (hereinafter referred to as the “Controller” or “Guidi Enrico”), as Data Controller, hereby provides, pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR), the following information on the processing of personal data.

  1. Categories of data processed

The Controller processes personal identification data (e.g. name, surname, address, telephone number, email) provided by the data subject upon signing contracts for the services of Guidi Enrico. or received from third parties pursuant to Art. 6, para. 1, letters a) and b) of the GDPR.
No special categories of personal data (Art. 9 GDPR) are required. Should processing of such data become necessary, the data subject will be provided with specific information for related consent. If Guidi Enrico receives CVs or documents containing special categories of data, processing will be carried out in compliance with Articles 6 and 9 GDPR.

  1. Purpose of processing

Data is processed, without the need for explicit consent (Art. 6 letters b), e), f) GDPR), for the following purposes:

  • to enter into contracts for the Controller’s services;
  • to fulfil pre-contractual, contractual and tax obligations deriving from existing relationships;
  • to pursue the legitimate interest of the Controller, unless overridden by the fundamental rights and freedoms of the data subject;
  • to comply with national or European legal obligations;
  • to exercise the rights of the Controller.
Processing methods

Processing is carried out by means of collection, recording, organisation, storage, consultation, use, communication, erasure or destruction (Art. 4, no. 2 GDPR), both on paper and electronically, in non-automated form.
Guidi Enrico processes data pursuant to Art. 6, para. 1, letters a), b), f) GDPR, based on legitimate interest related to its activities and the need to execute contracts and pre-contractual measures.
Appropriate technical and organisational measures are adopted to ensure confidentiality, integrity, and availability of personal data, also by suppliers and external processors, in compliance with Art. 32 GDPR.

Data retention period

Data will be retained for the time necessary to achieve the aforementioned purposes and in any case no longer than 10 years after contract termination, to comply with ongoing legal obligations.

Access to data

Data may be accessible, for the purposes mentioned above, to employees and collaborators of the Controller or to professionals bound by confidentiality obligations, in Italy or other EU countries, as persons authorised to process data or as data processors.

Data disclosure

Without the need for consent (Art. 6 letters b) and c) GDPR), data may be disclosed to supervisory authorities, judicial authorities, or other subjects to whom communication is mandatory by law or necessary to achieve the above purposes. Such parties will act as autonomous controllers. Data will not be disclosed to third parties without explicit consent, unless required for service provision, with prior notice to the data subject.

Data transfer and technical cookies

Data is stored on servers located within the European Union.
However, if necessary (Art. 6, para. f) GDPR), the Controller may transfer data to non-EU countries, ensuring that such transfer takes place only to countries with an adequacy decision (Art. 45 GDPR) or through standard contractual clauses approved by the European Commission (Arts. 46-47 GDPR).
The website uses technical cookies to collect aggregated information on visitor numbers and site usage. By browsing the site or clicking “OK” on the initial banner, the user consents to the use of cookies for these purposes.

Mandatory or optional nature of data provision

Data provision is mandatory for the purposes indicated in Art. 2. Failure to provide such data will make it impossible for Guidi Enrico to deliver the related services.

Rights of the data subject

Pursuant to Chapter III, Section I, GDPR, the data subject may exercise the following rights:

  • Access (Art. 15): confirmation of data processing and access to related information;
  • Rectification (Art. 16): correction of inaccurate data or integration of incomplete data;
  • Erasure (Art. 17): deletion of data in the cases provided by GDPR;
  • Restriction (Art. 18): restriction of processing in the cases provided;
  • Portability (Art. 20): receipt of own data in structured format and transfer to another controller without hindrance;
  • Objection (Art. 21): objection to processing unless there are overriding legitimate grounds of the Controller;
  • Complaint: lodging a complaint with the Italian Data Protection Authority (protocollo@gpdp.it).
  1. Exercising your rights

Rights can be exercised by contacting the Controller at:

  • Registered mail: Via Santuario 35A, Abano Terme (PD), ZIP code 35031, Italy.
  • Email: privacy@guidienrico.com