Privacy Policy

Pursuant to EU Regulation 2016/679 (GDPR) — last updated: 16 June 2026

1. Data controller

The controller of personal data is:

Federico CherubinVAT no.: 04766100988E-mail: info@guitarhub.itWebsite: www.guitarhub.it

The Controller processes users' personal data in accordance with the principles of lawfulness, fairness, transparency and confidentiality laid down by Regulation (EU) 2016/679 ("GDPR").

2. Types of data collected

The following data may be collected through the website:

  • Identification data (first and last name)
  • Contact data (e-mail address, telephone number)
  • Data voluntarily provided through contact forms
  • Data required to manage orders and sales
  • Technical browsing data (IP address, browser type, operating system, access logs)

Data is collected only to the extent necessary to provide the services requested by the user.

3. Purposes of processing

Personal data is processed in order to:

  • a) Reply to requests sent through the contact form;
  • b) Handle requests for information, support and quotes;
  • c) Manage the sale of products and the performance of contractual obligations;
  • d) Comply with tax, accounting and administrative obligations required by law;
  • e) Ensure the security of the website and prevent fraudulent or unlawful activities;
  • f) Improve the technical operation of the website.

4. Legal basis for processing

Processing is based on the following legal grounds:

  • Performance of a contract or of pre-contractual measures requested by the data subject;
  • Compliance with legal obligations;
  • The Controller's legitimate interest in the security and proper functioning of the website;
  • The user's consent, where required by applicable law.

5. Processing methods

Data is processed using electronic and organisational tools suitable for ensuring its security, integrity and confidentiality.

Appropriate technical and organisational measures are adopted to prevent unauthorised access, disclosure, modification or destruction of the data.

6. Data retention

Personal data will be kept for the time strictly necessary to achieve the purposes for which it was collected and in any case in compliance with legal obligations.

Data relating to business relationships and sales may be kept for the period required by applicable tax and accounting regulations.

7. Disclosure of data to third parties

Data may be disclosed to third parties acting on behalf of the Controller, such as:

  • Hosting and cloud infrastructure providers;
  • Tax and administrative advisers;
  • Couriers and shipping companies;
  • IT service providers;
  • Public authorities in the cases provided for by law.

These parties process the data as Processors or as independent Controllers, as provided for by the regulations.

8. Hosting and infrastructure

The website is hosted on infrastructure provided by Amazon Web Services (AWS).

AWS adopts security measures that comply with international standards for the protection of personal data.

9. Content embedded from third parties

The website may embed video content provided by YouTube.

Interacting with such content may result in data being collected by Google LLC in accordance with its own privacy policies.

Users are invited to read the privacy policies of the services used.

10. Transfer of data to non-EU countries

Some service providers used by the website may transfer personal data to countries outside the European Economic Area.

Such transfers take place exclusively in compliance with the safeguards provided for by Articles 44 et seq. of the GDPR.

11. Rights of the data subject

The data subject may at any time exercise the rights provided for by Articles 15-22 of the GDPR, including:

  • Access to personal data;
  • Rectification of inaccurate data;
  • Erasure of data;
  • Restriction of processing;
  • Objection to processing;
  • Data portability;
  • Withdrawal of any consent given.

Requests can be sent to: info@guitarhub.it

12. Complaint to the Supervisory Authority

The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) if they believe that their data is being processed in breach of applicable law.

13. Changes to this policy

The Controller reserves the right to amend this policy at any time.

Any changes will be published on this page together with the date of the update.