GYBE CONSULTING

Privacy Policy

This information on the processing of personal data describes the processing of personal data entered or collected on the website www.gybeconsulting.it (hereinafter referred to as the “Website”) and any other websites on which it is published, in accordance with Article 13 of European Regulation No 2016/679 (hereinafter the “GDPR”).

1. Data Controller and Data Protection Officer (DPO)

The Data Controller is Gybe S.r.l. Via Zara, 28 00198 – Rome (RM) – Italy – Tax Code, VAT number and Company Registration No. 13722191007.
Telephone: +39 0687563904
Email: segreteria@gybeconsulting.it
Certified email (PEC): gybesrl@legalmail.it

For any enquiries regarding the protection of personal data, you may contact the Data Controller using the contact details provided on the website.

2. Purpose of the processing

The Data Controller processes personal data relating to you and/or the relevant staff (employees or contractors) and/or the shareholders or directors of the company you represent, to whom it is required to provide this privacy notice, such as:

  • first name and surname;
  • place and date of birth;
  • email address;
  • residential address or domicile;
  • tax identification number;
  • gender;
  • home and work addresses;
  • telephone and fax numbers;
  • billing details;
  • personal data capable of revealing the existence of any criminal convictions or ongoing criminal proceedings (judicial data);
  • any other data connected with the performance of the activities covered by the existing relationship with you (hereinafter collectively referred to as ‘personal data’ or simply ‘data’)

3. Purposes of processing and legal basis for processing

  1. The personal data referred to in point 2 above will be processed for the purpose of managing the business activities covered by the existing relationship with you and/or with the company you represent, including the associated legal and administrative obligations. The processing of all categories of data indicated may be necessary for the fulfilment of legal obligations to which Gybe Consulting S.r.l. is subject, such as, for example, the requirements of anti-money laundering and counter-terrorism legislation (Article 6(1)(c) of the GDPR) and for the performance of the activities covered by the existing relationship with you and/or the assignment entrusted to us (Article 6(1)(b) of the GDPR). The provision of such data is necessary for the performance of the aforementioned activity, and failure to provide it will make it impossible for Gybe Consulting S.r.l. to carry out that activity.
  2. In addition to carrying out the aforementioned activity, only the personal data referred to in point 2 above (excluding invoicing data and any other data connected with the performance of the activity covered by our existing relationship with you) may be used by Gybe Consulting S.r.l. to send communications relating to the activity via newsletters, corporate communications and invitations to events, using both automated and individualised methods.
    This processing is carried out on the basis of the legitimate interest (Article 6(1)(f) of the GDPR) of Gybe Consulting S.r.l. in developing relationships with its clients.
    The provision of data for this purpose is voluntary, and failure to provide such data will not affect the performance of the activities covered by our current relationship with you. You will always have the option to request that your data not be processed for this purpose or, if processing is already underway, to exercise your right to object.

4. Methods of processing

The processing of personal data involves the collection, recording, organisation, storage, consultation, processing, modification, selection, retrieval, comparison, use, disclosure, erasure and destruction of data. Your personal data is processed both on paper and electronically and/or automatically.

5. Data retention / Duration of processing

The data will be retained for the entire duration of the contractual relationship with Gybe Consulting S.r.l. and, thereafter:

a) for the purposes referred to in point 3.I) for the period of time provided for by the legislation, including accounting regulations, applicable to the aforementioned relationship and, in any event, for a period not exceeding 10 years (limitation period);

b) for the purposes set out in point 3.II) until such time as the data subject exercises their right to object; failing that, the data will be retained for as long as Gybe Consulting S.r.l.’s legitimate interest (Article 6(1)(f) of the GDPR) in developing relationships with its clients persists.
At the end of these periods, the data will be deleted or anonymised.

6. Access to data

Access to personal data is restricted to the Data Controller and the Data Processor, to internal personnel (partners, employees and contractors of Gybe Consulting S.r.l.) involved in data processing, and to system administrators, solely for purposes relating to their specific duties.
Access to personal data may be granted to third parties carrying out outsourced activities on behalf of the Data Controller, subject to their appointment as external data processors, limited to the purposes set out in this privacy notice and in compliance with the provisions of the GDPR.

7. Rights of the data subject

As provided for in the Regulation, the data subject may exercise the following rights:

  • the right of access to personal data;
  • the right to rectification;
  • the right to be forgotten: the data subject has the right to obtain from the data controller the erasure of personal data concerning them;
  • the right to restriction of processing; the right to data portability;
  • the right to object to processing;
  • the right to withdraw consent (it should be noted that the withdrawal of consent does not affect the lawfulness of processing based on consent given prior to the withdrawal);
  • the right to lodge a complaint with the supervisory authority (in Italy, this is the Garante Privacy).

Gybe Consulting S.r.l. guarantees you the rights described above. To exercise these rights or for further information on this matter, please write to us at: segreteria@gybeconsulting.it

8. Data transfer

Personal data will be processed and stored on servers located within the European Union belonging to the Data Controller and/or to third-party companies acting on its behalf. The servers are currently located in Italy. It is understood, however, that the Data Controller, should it become necessary, shall have the right to relocate the servers to Italy and/or the European Union and/or countries outside the EU. In such a case, the Data Controller hereby undertakes that any transfer of data outside the EU will take place in accordance with the applicable legal provisions, by entering into, where necessary, agreements that guarantee an adequate level of protection and/or by adopting the standard contractual clauses provided for by the European Commission.

9. Data sharing

Gybe Consulting S.r.l. will process your personal data with care and confidentiality and will not share it with third parties other than those specified herein, unless there is a specific, clear and transparent notification which you have approved and confirmed.
Gybe Consulting S.r.l. may share the personal data you have provided with third parties who carry out outsourced activities on behalf of the Data Controller, subject to their appointment as external data processors, limited to the purposes set out in this privacy notice and in compliance with the provisions of the GDPR, or with parties whose right to access your personal data is recognised by statutory provisions or by secondary or EU legislation.

10. Data protection

Gybe Consulting S.r.l is committed to protecting the personal data provided to it and to implementing appropriate technical and organisational security measures to protect such data from any attacks, such as unauthorised or unlawful processing, and from accidental loss, destruction or damage, in accordance with Articles 32 et seq. of the GDPR.

Last updated 16 September 2026