Privacy Policy
This Privacy Policy is made available by Giunti Psychometrics Holding S.r.l., pursuant to Article 13 of EU Regulation 2016/679.
Please note that this policy applies to the website “www.giuntipsy.com” (hereinafter also referred to as the “Site”) and does not extend to other websites that the user may consult via links and/or buttons on the site itself. Users are invited to read the respective privacy policies of these external sites.
For information on the processing of browsing data, including through cookies, please refer to the specific privacy policy.
Data Controller and Data Protection Officer
The Data Controller is Giunti Psychometrics Holding S.r.l., with registered office in Via Fra’ Paolo Sarpi 7/A, 50136 Florence, Italy, Tax Code, Florence Companies Register and VAT no. 00421250481, REA FI-119169. The Data Protection Officer (DPO), appointed by the Data Controller pursuant to Article 37 of the GDPR, can be contacted at the following email address privacy@giuntipsy.com.
Data categories, purposes, legal basis, nature of provision, and data retention
| Purpose of processing | Description of processing | Data processed | Legal basis | Data retention |
|---|---|---|---|---|
| Website Functionality | Automatic collection of technical data relating to connection and use of the website; installation of cookies for technical functions or, subject to consent, for marketing and profiling purposes. | Browsing data and cookies | For technical cookies, the consent of the data subject is not required, pursuant to Article 122 of the Privacy Code, while the legal basis for certain types of cookies (marketing, profiling, etc.) is the consent of the data subject, Article 6(1)(a) of the GDPR. Nature of data provision Required for the use of certain services; optional for non-technical cookies. | Browsing data deleted immediately after statistical processing; cookies according to the durations indicated in the Cookie Policy. |
| User requests | Users may request information via the designated e-mail address or the specific form provided by the Data Controller. Data provided freely and voluntarily by the User (e.g., first name, last name, e-mail address) for information requests will be processed by the Data Controller solely for the purpose of responding to such requests. In particular, the processing of personal data shall be aimed at providing services to users / visitors / customers, relating to the stipulation and execution of the contract for the purchase of materials, publications and/or content. In the case of purchases, specific information on the processing of personal data will be provided. | Name, surname, e-mail, telephone number (optional), any other data provided in the message. | The legal basis is the performance of a contract to which the data subject is party or the implementation of pre-contractual measures taken at the request of the data subject, Art. 6(1)(b) GDPR. Nature of data provision Required to respond to requests. | For the time necessary to provide feedback and subsequently in accordance with regulatory provisions, including those relating to the limitation period for rights (ten years). |
| Market surveys or marketing | With the specific consent of the interested party the data may also be processed in order to identify customers’ tastes, preferences and/or habits, the degree of customer satisfaction, to send commercial information or advertising materials, to organise direct marketing campaigns, to allow customers to participate in games, competitions and/or prize draws, to provide customer protection services, to carry out market research as well as other transactions directly or indirectly attributable to marketing activities. | Name, surname, e-mail. | The legal basis is the consent of the data subject, Article 6(1)(a) of the GDPR. Nature of data provision The provision of these data is not mandatory. The possible refusal to consent to the processing of personal data and/or the withdrawal of such consent shall not affect the establishment/continuation of the main relationship with the Company. | The data will be processed until the data subject withdraws their consent. |
The publication of images on the website, in which the persons concerned may be identifiable or identified, has been carried out in full compliance with current legislation on the protection of personal data, as well as in accordance with copyright provisions.
Data processing method
Personal data is processed by the Data Controller in both paper and electronic format, applying security, technical, and organizational measures (Art. 32 GDPR) such as to guarantee a level of security appropriate to the risk, taking into account the state of the art and the costs of implementation or, where applicable, security measures prescribed by specific legislation, including, but not limited to, measures issued by the data protection authority, regulations, measures, statutory provisions.
Categories of subjects to whom the data may be disclosed
Your personal data may be disclosed if this is necessary or in any case functional to the management and execution of the purposes and within the limits established by law. In the case of suppliers of goods or services external to the Data Controller’s organization, they will be formally appointed as Data Processors, pursuant to Article 28 of EU Regulation 2016/679, chosen from among subjects with sufficient guarantees for the protection of the rights of the data subject (the list of subjects may be requested from the Data Controller by the data subject). The data subject’s data may also be processed by persons appointed with prior authorization pursuant to Article 2 quaterdecies of the Privacy Code (as amended by Legislative Decree 101/18) and/or a suitable confidentiality commitment. Any other communications to external parties not involved in the achievement of the Data Controller’s main purposes may only take place with your explicit consent, where applicable, except in the case of requests from judicial authorities or specific legal requirements.
Transfer of data to third countries
The Data Controller, within the scope of the purposes described above, transfers your data to third countries (outside the EU). For the relevant data transfer, appropriate safeguards will be adopted in accordance with the adequacy decisions issued by the European Commission and/or the national Data Protection Authority, as appropriate in each case. Further information regarding any transfers of data to countries outside the European Union, the relevant safeguards adopted, and information regarding the companies appointed as data processors will be provided to the data subjects.
Rights of the data subject
With regard to the processing of personal data, the Data Subject may, at any time, exercise the rights provided for in the GDPR, where applicable: Articles 15 – “Right of access by the data subject,” 16 – “Right to rectification,” 17 – “Right to erasure,” 18 – “Right to restriction of processing,” 19 – “Notification obligation regarding rectification or erasure of personal data or restriction of processing,” 20 – “Right to data portability,” 21 – “Right to object,” 22 – “Automated individual decision-making, including profiling” of the GDPR within the limits and conditions set forth in Art. 12 GDPR. Where deemed appropriate, you may lodge a complaint with the supervisory authority (Art. 77 GDPR). Please note that if processing is based on consent, this may be freely revoked by the data subject by sending a request to the Data Controller. The revocation of consent does not affect the lawfulness of processing based on consent before revocation. The data subject may exercise the above rights at any time by sending a written request to the addresses indicated in point 1 of this policy.
Changes and updates
The features, functions, and services offered, as well as the methods of data processing by the Data Controller, may undergo changes in the future and, consequently, this policy may be subject to changes, updates, and/or additions. Users are therefore invited to periodically check the content by consulting the Website and/or the dedicated web pages.