INFORMATION PURSUANT TO ARTICLES 13-14 OF EU REGULATION NO. 2016/679 REGARDING THE PROCESSING OF PERSONAL DATA
Dear visitor,
Enrico Guidi hereby informs you that, pursuant to Articles 13 and 14 of European Regulation No. 2016/679 (GDPR), the data acquired and/or provided by you will be processed in compliance with the regulations referred to below.
ROLES
The Data Controller is: Enrico Guidi,
PURPOSES OF NON-MANDATORY PROCESSING
Processing of personal data for profiling
With your free and optional consent (Article 6, paragraph 1, letter a) of the GDPR), which can be expressed by selecting the appropriate consent box on the website, Enrico Guidi will process your personal data for profiling purposes. This allows us to send you personalized promotional communications consistent with your profile, to perform statistical analyses and processing of your personal characteristics, for clustering activities, i.e., to create target groups for internal analysis and monitoring of market and consumption trends, and to create new user clusters based on similar browsing habits and interests. If you do not consent to the processing of your personal data for profiling purposes, your ability to browse the website and benefit from its features will not be compromised in any way, nor will you suffer any other detrimental consequences. You may, in any case, freely and without charge withdraw your consent to the processing of your personal data for profiling purposes at any time by making a request in the appropriate contact section.
Processing of personal data for marketing
With your free and voluntary consent (pursuant to Article 6, paragraph 1, letter a) of the GDPR), we will process your personal data for marketing purposes, which include direct sales, sending advertising materials, conducting market research, commercial communications, and assessing customer satisfaction. We will send you information and offers relating to Enrico Guidi products and services that we believe may be of interest to you via post, email, SMS, fax, landline/mobile phone (with or without operator), WhatsApp, or social media (such as Facebook, Instagram, and Twitter).
Consent to the processing of your personal data for marketing purposes is free and optional. Failure to provide consent will not result in any detrimental consequences. You may withdraw your consent to the processing of your data for marketing purposes at any time and free of charge, without any consequences, using the methods indicated in the relevant section. You may also choose to withdraw your consent selectively, specifying which contact methods you no longer wish to receive.
Please let us know if you wish to consent to the processing of your personal data for marketing purposes and select the appropriate consent request box.
Processing of personal data by double opt-in
Registration for our direct marketing communications occurs through a process known as double opt-in. This means that, after completing registration, you will receive a confirmation email requesting your explicit consent to receive future communications. This process is designed to ensure that your email address is used correctly and only with your consent.
We store your newsletter registration details to document the registration process and the consent obtained, as required by law. This documentation process and the related data processing are based on our legitimate interests pursuant to Article 6(1)(f) of the GDPR.
You can withdraw your consent to receiving commercial communications at any time by unsubscribing. Each marketing email sent includes an unsubscribe link that allows you to exercise this right.
Processing of personal data for newsletters
To subscribe to our newsletter, you must enter your contact details and specifically accept the consent. We will only send the newsletter after you have registered and received your consent, in accordance with Article 6(1)(a) of the GDPR.
Our newsletters contain information about our products, offers, promotions, and updates. Therefore, by subscribing to the newsletter, your data will be processed for direct marketing purposes. Consent to the processing of your personal data for receiving the newsletter is free and optional;
If you do not consent, you will not receive marketing communications. However, failure to consent will not in any way compromise your ability to use the website and access the services.
Our newsletters contain information about our products, offers, promotions, and updates. Therefore, by subscribing to the newsletter, your data will be processed for direct marketing purposes. Consent to the processing of your personal data for receiving the newsletter is free and optional;
If you do not provide consent, you will not receive marketing communications. However, refusal to provide consent will not in any way affect your ability to use the website and access its features.
Other processing
In all other cases where you provide us with personal data in any other way, this will always be done on a voluntary basis. Your information will be processed by us to process your request in accordance with Article 6, paragraph 1, letter b) (if your request relates to a potential contract to be concluded with us or to a contract already concluded with us) or letter f) of the GDPR (for any other type of request) and, in this context, may also be transmitted to third parties solely for the purpose of fulfilling your request.
PROCESSING METHODS
Processing consists, for example, in the collection, recording, organization, storage, retrieval, consultation, use, communication, and deletion of personal data. It is carried out, for the aforementioned purposes, in accordance with the principles (pursuant to Article 5 of GDPR No. 2016/679) of lawfulness, fairness, transparency, data minimization, and accuracy. The data is processed using telephone, paper, computerized, and electronic means. Processing is carried out using appropriate tools and appropriate technical and organizational measures to ensure security, integrity, and confidentiality, particularly avoiding the risk of loss, unauthorized access, unlawful use, and dissemination, in compliance with the provisions of Article 32 of GDPR No. 2016/679, by the data subjects and in compliance with the provisions of Article 29 of GDPR No. 2016/679 and Article 2-quaterdecies of the Privacy Code.
NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL TO RESPOND
Providing data for mandatory purposes does not require explicit consent. Without such data, we will not be able to provide our services. Providing data for other purposes is optional and requires your explicit consent. If you do not provide consent, you will not receive newsletters, informational materials, or commercial communications regarding the services offered by the Data Controller or third-party companies. However, you will continue to have access to our services.
We process your personal information only when there is a legal basis for such processing. Legal bases include:
Your consent to the processing activities in question
Compliance with legal obligations to which we are subject
Implementation of provisions of laws or regulations, or contracts, agreements, or other legal instruments
Studies conducted by research institutions, preferably on anonymized personal information
Performance of a contract and related pre-contractual obligations, if you are a party to such a contract
Exercising our rights in court, in administrative proceedings, or in arbitration
Defense or protection of your physical integrity or that of a third party
Protection of health, in the context of procedures implemented by entities or healthcare professionals
Our legitimate interest, provided that your fundamental rights and freedoms do not prevail over such interests
Credit protection.
ACCESS TO DATA
Your data may be made accessible for the purposes listed below:
To the Data Controller's employees and collaborators in their capacity as data processors and/or system administrators;
To third-party companies or other entities (for example, professional firms, consultants, software houses that provide management software, credit institutions, insurance companies, etc.) that perform outsourced activities on behalf of the Data Controller, in their capacity as external data processors.
Among the Personal Data collected by this Website, independently or through third parties, are: Tracking Tools; Usage Data; name; email; website; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); number of Users; city; device information; session statistics; browser information; answers to questions; clicks; keypress events; motion sensor events; mouse movements; scrolling position; touch events.
DATA DISCLOSURE
The Data Controller may disclose your data to public administrations, supervisory bodies, and/or judicial authorities, as well as to all other entities to whom disclosure is mandatory or required by law. Your data will not be disclosed.
TRANSFER OF DATA TO THIRD COUNTRIES
I know your data has been sent to a responsible person in this country where the data processing is not if it is in a State Member of the European Union. Prima del trasferimento, siamo assicurati che il recipient guarantee a livello adeguato di protectione dei traverso a decisione di adeguatezza della Commissione Europea di cui all'article 45 del GDPR, mediante adeguate salvavaguardie quali l'autocertificazione del beneficiario ai sensi dell'articolo 45 of the GDPR and within the stipulation of its cosiddette clausole contract tuali standard UE with the importer of the data, have meaning of the article 46, paragraph 2, lettera (c) of the GDPR, oppure Lei abbia espresso il Suo consento a ta te transfero di dati ai sensi dell'art. 49, paragraph 1, letter a) of the GDPR.
DATA CONSERVATION
All personal information will be processed in accordance with the principle of law, correctness, relevance and proportionality, exclusively with the necessary conditions, also information and telematics, to ensure the purpose as described. I will keep your personal data for a period of 6 years after which you will finally be contacted if you are interested or will eventually cancel your part. In this case, it may be necessary to keep the data corresponding to the legal interest of the owner or necessary for the adjustment of the leg. If any information system is incorrect for information management, it is configured in its own configuration, without the origin, in minimal mode, use personal data.
DATA SUBJECT RIGHTS
As a data subject, you have the rights set forth in Articles 15 et seq. and 77 of the GDPR, specifically the right to:
Obtain confirmation from the data controller as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; where the personal data are not collected from the data subject, any available information as to their source; the existence of automated decision-making, including profiling, and, at least in such cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject;
Obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement;
Obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her, where one of the following grounds applies: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; the data subject withdraws consent on which the processing is based according to Article 6(1)(a), or Article 9(2)(a), and where there is no other legal ground for the processing; the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2); the personal data have been unlawfully processed; The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
Obtain from the controller restriction of processing where one of the following applies: the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data; the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims; the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject;
Receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is carried out by digital means. In exercising his or her right to data portability, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible;
Object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such marketing;
Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her;
Right to lodge a complaint with a supervisory authority pursuant to Article 77.
HOW TO EXERCISE YOUR RIGHTS
You may exercise your rights at any time by contacting the Data Controller at the following email address:
EXTERNAL PROCESSORS AND APPOINTED PERSONS
The updated list of external processors and persons in charge of data processing is kept at the Data Controller's registered office.
CHANGES TO THE CURRENT POLICY
This policy was drafted on May 23, 2025 and may be subject to change over time, including due to additions or amendments to applicable laws and regulations. The Data Subject is encouraged to consult this page frequently.
