Policy
INTRODUCTION AND LEGAL REFERENCES
This Privacy Policy describes the management methods of this website with regard to the processing of personal data of users who browse it.
This is an information notice that describes the protection of personal data of those who interact with the web services accessible electronically at the address: www.studioghidini.org
This information notice is provided in accordance with Article 13 of Regulation (EU) 2016/679 (hereinafter, the “Regulation”) of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, published in the Official Journal of the European Union on 4 May 2016, in force since 24 May 2016), Recommendation No. 2/2001 adopted on 17 May 2001 by the European authorities for the protection of personal data – meeting as the Working Party established under Article 29 of Directive 95/46/EC – to identify certain minimum requirements for online data collection, in particular the procedures, timing, and nature of the information that data controllers must provide to users when they connect to web pages, as well as in light of the Italian Data Protection Authority’s Provision of 8 May 2014 entitled “Simplified Arrangements to Provide Information and Obtain Consent Regarding Cookies” (hereinafter, the “Provision”), and in compliance with current privacy legislation.
This privacy notice is provided solely for this website, of which CE CONTINUING EDUCATION S.R.L. is the Data Controller, and not for any other websites that may be linked within this site.
DATA CONTROLLER
The data controller of personal data collected through this website is CE CONTINUING EDUCATION S.R.L., with registered office at Via Torquato Tasso, 14 – 46043 Castiglione delle Stiviere (MN), Italy.
The complete list of Data Processors is available at the company’s registered office.
GENERAL PRINCIPLES ON THE PROCESSING OF USERS’ PERSONAL INFORMATION
The user’s personal information will be collected, stored, processed, and transmitted in accordance with the criteria established by CE CONTINUING EDUCATION S.R.L. and the applicable laws and regulations concerning data protection.
The principles governing the processing of the user’s personal information are as follows:
The user’s personal information will be processed fairly and lawfully;
The user’s personal information will be collected for specified, explicit, and legitimate purposes and subsequently processed in a manner compatible with those purposes;
The user’s personal information collected will be relevant, complete, and proportionate to the purposes for which it is collected;
The user’s personal information collected will be accurate and, where necessary, kept up to date to the best of our ability;
The user’s personal information will be protected against unauthorized access and processing by means of commercially and technically reasonable technical and organizational security measures and controls;
The user’s personal information will be stored no longer than necessary for the purposes for which it was collected.
TYPES OF DATA COLLECTED
The website may collect various types of information when the user accesses or uses it.
This may include, for example, information such as name, surname, e-mail address, and telephone number.
Unless explicitly requested or specifically invited, users are asked not to send or disclose sensitive personal information through the website or in any other way. In cases where we may request or encourage users to provide sensitive information, we will obtain their explicit consent.
The systems used to provide the website may automatically record additional information about the user’s use of the site. For example, our systems may log information entered on the website, areas visited, activities carried out, IP address, or details of the device or software used to access the website.
These data are used solely to obtain anonymous and aggregated statistical information on site usage and to verify its proper operation, and are deleted immediately after processing. Data may also be used to ascertain responsibility in the event of potential cybercrimes against the site.
PURPOSES OF DATA PROCESSING
We collect, store, and process your personal data for the purpose of providing you with the services offered through our website or to comply with legal obligations.
The data collected will be used exclusively for the following purposes:
• To comply with legal obligations deriving from tax, accounting, or any other applicable laws;
• To contact users directly (for example, via e-mail) following requests made through the website.
PROVISION OF DATA
Apart from what is specified for navigation data, you are free to provide any personal data requested in the information request form.
Failure to provide such data may make it impossible to obtain what is requested.
METHODS OF PROCESSING AND DATA SECURITY
The use of your personal data will be carried out using paper-based, computer, or electronic tools for the purposes indicated below, and for the time strictly necessary to achieve the purposes for which they were collected, or, where applicable, until the Data Controller receives a request for deletion of data whose processing is optional.
Your personal data will be stored in secure databases on our servers or on the servers of trusted suppliers acting as Data Processors, and will mainly be processed using automated methods: Aruba S.p.A. – via San Clemente, 53 – 24036 Ponte San Pietro (BG)
Your personal data are processed in compliance with the confidentiality provisions of the Italian Data Protection Code, the Regulation, and the measures issued by the Data Protection Authority.
The data are handled only by authorized personnel. All staff who access your data are appointed as Data Processing Officers, in accordance with applicable legislation.
Collected data may be periodically updated with information acquired during the established relationship.
We use commercially reasonable technical and organizational security measures to protect users’ personal information from loss, misuse, and unauthorized access. Unfortunately, data transmitted or accessible via the Internet cannot be guaranteed to be 100% secure. Consequently, while we take all precautions to protect personal information, we cannot ensure or guarantee that such data will be completely protected from unlawful use by hackers or from criminal activity, or in the event of hardware or software failure.
The Data Controller will notify the user in the event of a security breach concerning their personal data (in compliance with applicable data breach notification laws).
If a user provides us with their e-mail address for any reason, they expressly agree to receive electronic notifications in the event of such a security breach.
DISCLOSURE OF PERSONAL DATA
Without prejudice to communications made in compliance with legal or regulatory obligations, your data may be disclosed to:
a) individuals and/or legal entities used to perform services and related activities;
b) parties delegated and/or appointed to carry out professional and technical maintenance activities (including maintenance of network devices and electronic communication networks where the data are hosted).
In all cases, only the data necessary and relevant for the purposes of the processing will be communicated to the above parties, who will act as external Data Processors, appointed in accordance with applicable law.
Personal data will not be disclosed to the public.
The Data Controller cooperates with law enforcement and other public authorities to ensure compliance with the law, the rights of other users and third parties, including intellectual property rights. Therefore, your personal data may be communicated, by way of example but not limited to, to public authorities if necessary for purposes of defense, state security, or crime prevention, investigation, or prosecution.
Such public authorities have the right to request and obtain your personal information if deemed necessary or appropriate for investigations relating to fraud, cybercrime, intellectual property infringement, piracy, or other illegal activities that could expose us or our users to civil or criminal liability.
DATA SUBJECTS’ RIGHTS AND EXERCISE OF RIGHTS
In accordance with applicable law, you may at any time request:
Confirmation of the existence or non-existence of your personal data;
To know the content and origin, purposes, and methods of processing;
The logic applied in the case of processing carried out with electronic means;
The identifying details of the Data Controller, Data Processors, and any parties to whom your data may be communicated.
You also have the right to obtain:
The updating, rectification, integration, or portability of your data;
The deletion, anonymization, or blocking of data processed unlawfully;
The right to object, for legitimate reasons, to the processing of data related to the purpose of collection;
The right to object to the processing of data for marketing purposes.
Pursuant to the Regulation, you also have the right to lodge a complaint with a supervisory authority.
To exercise your rights, you may contact the Data Controller:
CE CONTINUING EDUCATION S.R.L., Via Torquato Tasso, 14 – 46043 Castiglione delle Stiviere (MN), Italy
Tel. +39 0376 671213 – Email: info@studioghidini.org
If the user contacts us requesting access to or deletion of their personal information, in compliance with this Privacy Policy and legal obligations, we will endeavor to fulfill such requests within the required timeframe.
However, please note that due to technical constraints and system backups, users’ personal information may continue to reside, in part, in our systems for a limited period after deletion.
The Data Controller reserves the right to refuse access or deletion requests where disclosure or deletion is not permitted by law.
To protect against unlawful access requests, we reserve the right to request sufficient information to verify the identity of the requesting party before granting access or making corrections.
ADDITIONAL PROVISIONS
Data Transfer
Your personal data will be stored in databases on our servers or on those of our trusted partners acting as Data Processors, located within Italy, within countries of the European Economic Area, or in Switzerland, where approved contractual clauses for secure data transfer apply.
The information collected may also reside on servers located in the United States or other countries.
UPDATE OF THIS PRIVACY POLICY
This Privacy Policy was last updated on 2025/11/07.
The Data Controller reserves the right to make changes to the Website and to this Web Privacy and Cookie Policy at any time.
Users should always refer to the version of the Policy published online as the current and applicable version.
Any modifications will become effective as soon as they are published on the Website.
Continued use of the Website by the user following any changes shall be deemed to constitute acceptance of such changes.
All users may check, at any time, the latest updated version of the Web Privacy Policy by visiting the Website.