Privacy Policy

Privacy Notice regarding the processing of personal data through giuliasesti.com website

The purpose of this Privacy Notice is to inform you about the processing of your personal data and your rights under the General Data Protection Regulation (known as GDPR) on giuliasesti.com website. 

1. Personal data we process on our website

In accordance with GDPR, when you browse our website we act as Data Controller of the personal data we collect and process via the website. 

This website does not use cookies. We use the Yoast SEO plugin for SEO optimization. According to Yoast information about the plugin and their GDPR compliance guide, the Yoast plugins do not process, collect, or store any personal data at Yoast premises or servers. Every analysis performed is done on our website and none of our content is used by Yoast off-site. 

Your personal data might be processed in several ways through our website:

a. If you choose to use the contact form to contact us. 

In this situation, the data is collected directly from you (name/alias, e-mail address, message). 

The data you fill in will be sent to us through an e-mail. In this situation, your personal data is processed through the provider which hosts my website and the company which provides my e-mail service, Namecheap, which hosts our data in the USA. 

The data that you send via the contact form is processed based on your and our legitimate interest, in order to respond to your request and to keep records of our correspondence.

We’ll store this type of personal data for a period of 3 years from the time of collection.  

According to the GDPR Regulation, the subsequent processing of personal data for historical, statistical or scientific purposes is compatible with the original purpose of the processing.

2. Disclosure of personal data

In accordance with the above purposes, your personal data will not be sold or rented to third parties.

We will share your personal data only to the extent necessary and only to the following categories of third parties:

  • Entities which provide us services for hosting, maintaining and developing the website as designated above.
  • Entities which provide us legal, accounting or other consulting services.
  • Public authorities and institutions, if we have a legal obligation to disclose them.

We may disclose your personal data to third parties:

  • If you request or consent to this; 
  • If those people can demonstrate that they have the legal authority to act on your behalf;
  • If we have a legitimate interest to administer, expand or develop our business: in the event that the Company or a substantial part of the Cpmany’’s assets is acquired by a third party, and the personal data held by us will be part of the transferred assets; 
  • In order to respond to any claims, to protect the rights of a third party, to protect the safety of any person or to prevent any illegal activity; 
  • In order to protect the rights of the Company or our employees and customers, as well as others.

3. Transfer of personal data outside the Economic European Area

The personal data may be processed by our processors operating outside the Economic European Area (EU, Iceland, Norway and Liechtenstein), for the purposes mentioned in Section 1. Whenever your personal data is provided to entities outside the EEA, we will take appropriate measures to ensure that this transfer is in accordance with GDPR.

4. Security

We take organisational and technical measures like encryption, passwords for access to our systems and built-in security features for our computers.

5. Your rights and how do we respect them 

Personal data legislation gives you a number of rights in relation to your data; please find below details about your rights and how you can exercise them:

  • Right to access – you have the right to request information about your personal data that we process, including the purpose of the processing, if and with whom it is shared and how long it will be kept.
  • Right to rectification – if your processed data is inaccurate, you have the right to obtain their rectification or completion. 
  • Right to erasure (“the right to be forgotten”) – you have the right to ask us to delete data we process about you, except in the case where the data is necessary for us: to exercise the right to free expression and information; for compliance with our legal obligations; for archiving purpose in the public interest, for scientific purpose, historical or statistical research; for establishing, exercising or defending a right in court. 
  • Right to restriction – you can request the restriction of the processing of your personal data if: you dispute the correctness of the data, for the period in which we verify the accuracy of the respective data; the processing is illegal and you object to the deletion of your personal data, requesting instead the restriction; the data are no longer necessary for us to process, but you request them to establish, exercise or defend a right in court; you have objected to the processing, for the period of time in which we check whether our legitimate rights prevail over your rights. 
  • Right to data portability – you have the right to receive your personal data from us if you have previously provided it to us in a structured, machine-readable form. You also have the right to ask us to transfer your data to another data controller. 
  • Right to object – you have the right to object at any time, given your particular situation, to the processing of your data if we are processing it on the basis of our legitimate interests or the legitimate interests of a third party. In such a situation, we will no longer process your data with the following exceptions: (i) if we can demonstrate legitimate grounds and an interest that prevails over your interests, rights and freedoms and (ii) if the purpose of the processing is to establish, exercise or defend a right in court.
  • Right to withdraw your consent – if your personal data is processed based on your consent (e.g. subscribing to the newsletter), you can withdraw your consent at any time. 
  • Right to lodge a complaint to the National Data Protection Authority. 

Please contact us directly if you have any complaints about the way in which we process your personal data. To send us any requests or complaints, please write a message in the contact form available on the website. 

We will inform you, within one month of receiving your request, about the actions taken. This term can be extended to two months when necessary, taking into account the complexity, the number of applications or the impossibility of identifying the applicant. If we are not able to identify you, we will inform you and give you the chance to give us additional details in order to identify you.

If the deadline is extended, you will be informed within a month of the first request, also presenting the reasons for the delay. If we do not resolve your request affirmatively, we will inform you about this within a maximum of one month after receiving the request, regarding the reasons why we did not take measures and the possibility to lodge a complaint to the National Data Protection Authority or to the national court.

As a result of legal restrictions, in certain situations, we may not be able to give you access to all or some of your personal data. If we deny your request, we will inform you about the reason for refusal.

For more details regarding how to lodge a complaint to the Luxembourg Data Protection Authority.

6. What can happen if you do not wish to transmit your personal data to us? 

In most cases, you do not have to provide us with your personal data. However, there are situations in which, without additional data, we cannot resolve your request. Also, if you do not provide us with this data, it will not be possible for us to provide you our services.

7. Further processing of personal data

We use your personal data only for the purpose for which it was collected. According to the GDPR, the further processing of personal data for historical, statistical or scientific purposes is compatible with the initial purpose of processing.

8. Absence of automated decision-making process

As a user of our website, you will not be subject to a decision based exclusively on the automatic processing of your data without any human involvement.

9. Changes to this privacy notice

This Privacy Notice may change from time to time. Changes are in force from the moment they are placed on the website. Each time your consent is required, we will inform you. We therefore recommend that you consult the Privacy Notice each time you use the website. This version of the Privacy Notice is stored at Privacy Notice.

IN FORCE 

Version 1 – in force since June 2024