Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Alessandro Guida
c/o POSTFLEX PFX-335-423
Emsdettener Straße 10
48268 Greven
Germany

Email: admin [at] guida-ism.net

2. General information

I take the protection of your personal data seriously. Personal data is processed on this website only to the extent necessary to operate the website, ensure its security, and respond to enquiries.

Personal data means any information relating to an identified or identifiable natural person.

The legal bases for the processing of personal data are determined in accordance with the GDPR.

3. Hosting and server log files

This website is hosted by:

STRATO AG
Otto-Ostrowski-Straße 7
10249 Berlin
Germany

When you access this website, the hosting provider may automatically process technical information transmitted by your browser. This may include, in particular:

  • IP address
  • date and time of access
  • requested page or resource
  • referrer URL
  • browser type and version
  • operating system
  • HTTP status information

This information is processed to technically provide the website, maintain the security and stability of the service, and detect and prevent misuse.

The legal basis for this processing is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, reliable and technically correct operation of this website.

According to information provided by STRATO, IP addresses collected when visitors access hosted websites are retained for the detection and prevention of attacks for a maximum of seven days. Log files made available to hosting customers may be retained for longer periods in anonymised form.

Further information concerning the processing of server log data by the hosting provider can be found in STRATO’s privacy information. 

4. Contact form

A contact form is provided on this website so that you can contact me regarding my consulting services.

When you submit the contact form, the information you enter and certain technical information associated with the submission are processed. Depending on the information you provide, this may include:

  • first name
  • last name
  • email address
  • company
  • message content

The information is used solely to process and respond to your enquiry and, where applicable, to take steps at your request prior to entering into a contractual relationship.

In addition, technical submission information such as the IP address, date and time of submission, source URL, and browser or device information may be processed and stored. This information may additionally be processed for the purpose of detecting, investigating and preventing spam, abuse and misuse of the contact form.

The legal basis for this processing is Art. 6(1)(f) GDPR. The legitimate interest lies in maintaining the security and integrity of the contact form and investigating abusive submissions.

The legal basis for processing the information provided in your enquiry is Art. 6(1)(b) GDPR where your enquiry relates to a potential or existing contractual relationship. In other cases, processing is based on Art. 6(1)(f) GDPR, based on my legitimate interest in responding to enquiries concerning my professional services.

The contact form is implemented using Fluent Forms within the WordPress installation. Form submissions are stored within the WordPress installation hosted by STRATO. A notification containing the submitted information is also sent to an email account hosted by STRATO for the purpose of processing the enquiry.

Form submissions are not used for advertising or marketing purposes unless you have separately agreed to such use.

The submitted data will be retained only for as long as necessary to process your enquiry and to fulfil any applicable legal retention obligations.

5. Protection against automated submissions – Cloudflare Turnstile

This website uses Cloudflare Turnstile to protect the contact form against automated submissions, spam and abuse.

The service is provided by:

Cloudflare, Inc.
101 Townsend St.
San Francisco, CA 94107
USA

When Turnstile is used, technical information about your browser and device may be processed in order to determine whether a form submission originates from a human user rather than an automated system.

The processing is necessary to protect the website and contact form from abuse and to ensure their security and availability. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in protecting the website and its forms against spam, automated attacks and other misuse.

Personal data processed in connection with Turnstile may be transferred to or processed in countries outside the European Economic Area, including the United States. Cloudflare uses applicable safeguards for international data transfers, including the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

Further information about the processing of personal data by Cloudflare Turnstile can be found in Cloudflare’s Turnstile Privacy Addendum and Cloudflare Privacy Policy. Cloudflare describes Turnstile as processing minimal signals for the purpose of protecting websites against malicious activity. 

6. Cookies and similar technologies

This website does not currently use cookies or similar technologies for advertising, profiling or analytics purposes.

Technically necessary cookies or similar technologies may be used where required for the operation, security or functionality of the website, including session functionality and protection against automated abuse.

Such technologies are used only where technically necessary for providing the requested service or ensuring the security and functionality of the website.

If additional services requiring consent, such as analytics, advertising or marketing technologies, are introduced in the future, this Privacy Policy and, where required, the website’s consent mechanism will be updated accordingly.

7. Recipients of personal data

Personal data is disclosed to third parties only where this is necessary for the operation and security of the website, the processing of your enquiry, compliance with legal obligations, or where another legal basis permits such disclosure.

Service providers involved in operating this website may process personal data on my behalf. These currently include, in particular:

  • STRATO AG, as provider of website hosting, database and email infrastructure; and
  • Cloudflare, Inc., insofar as Cloudflare Turnstile is used to protect the contact form against spam and automated abuse.

Where a service provider processes personal data on my behalf as a processor, an appropriate data processing agreement pursuant to Art. 28 GDPR is concluded where required.

8. Data retention

Personal data is retained only for as long as necessary for the purposes for which it was collected.

Contact enquiries are deleted when they are no longer required for processing the enquiry, unless statutory retention obligations or the establishment, exercise or defence of legal claims require longer retention.

Following deletion from active systems, personal data may remain temporarily in technical backup copies. Such backup copies are retained and overwritten or deleted in accordance with the applicable backup lifecycle and are used for recovery and security purposes.

Technical data and server logs are retained in accordance with the periods described above and the applicable retention practices of the relevant service providers.

9. Your rights

Under the GDPR, you have rights regarding your personal data. Subject to the applicable legal requirements, these include the right to:

  • obtain information about personal data processed concerning you (Art. 15 GDPR);
  • request correction of inaccurate personal data (Art. 16 GDPR);
  • request deletion of your personal data (Art. 17 GDPR);
  • request restriction of processing (Art. 18 GDPR);
  • receive personal data you have provided in a structured, commonly used and machine-readable format where the requirements for data portability are met (Art. 20 GDPR); and
  • object to processing based on legitimate interests (Art. 21 GDPR).

Where processing is based on consent, you also have the right to withdraw your consent at any time with effect for the future.

To exercise your rights, you may contact me using the contact details provided above.

10. Right to lodge a complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

You may in particular contact the supervisory authority responsible for your place of residence, your place of work, or the location of the alleged infringement.

11. Security

Appropriate technical and organisational measures are used to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

This website uses encrypted HTTPS connections to protect information transmitted between your browser and the website.

12. Changes to this Privacy Policy

This Privacy Policy may be updated if the website, the services used on it, or applicable legal requirements change.

Last updated: August 2026

Scroll to Top