Legal

Privacy Policy

Last updated: 25 August 2026

This Privacy Policy explains how Italy Work Guide collects and processes personal data through italyworkguide.com and its private assistance service, in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data controller

The data controller for personal data collected through this website is:

Legal company name
Italy Work Guide S.r.l.
Registered office
Via Garibaldi, 107, Milano, Italy
VAT number
02098690221
Contact email
tripastralstaff@gmail.com
Website
italyworkguide.com

For any privacy request you can write to tripastralstaff@gmail.com.

2. Personal data we collect

Depending on how you use the website, we may process the following data:

  • Eligibility form: name, gender, date of birth, nationality, country of residence, email address, WhatsApp/phone number, passport details such as validity and expiry, education, languages spoken, work experience, preferred job sector or position and any additional notes you choose to provide.
  • Contact form and customer support: your name, email address, WhatsApp/phone number and the content of your messages, including WhatsApp conversations you start with us.
  • Document uploads: copies of documents you voluntarily upload (for example passport pages, CV, certificates) which may contain identification data.
  • Payment and checkout: billing name, email address, WhatsApp number, nationality, country of residence, order reference, payment status, amount and currency. Card details are entered directly on the payment provider's secure form and are never collected or stored by us.
  • Technical data: IP address, browser and device information and server logs, processed to keep the site secure and available.
  • Analytics data: aggregated usage statistics collected only if you consent to non-essential cookies (see the Cookie Policy).

Please do not send us data you are not asked for, in particular health data, religious or political information, or documents belonging to other people without their consent.

3. Purposes and legal basis of processing

  • Assessing your profile and replying to your requests — legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
  • Providing our private assistance service, including document guidance, profile preparation and coordination with potential employers or professionals where legally permitted — legal basis: performance of the contract (Art. 6(1)(b) GDPR).
  • Processing payments, invoicing, accounting and tax obligations — legal basis: contract and legal obligation (Art. 6(1)(b) and (c) GDPR).
  • Customer support and communication via email or WhatsApp — legal basis: contract and our legitimate interest in assisting customers (Art. 6(1)(b) and (f) GDPR).
  • Website security, fraud prevention and defence of legal claims — legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Analytics and marketing measurement, where activated — legal basis: your consent, which you can withdraw at any time (Art. 6(1)(a) GDPR).

Providing the data marked as required in our forms is necessary to assess your profile and deliver the service; without it we cannot process your request.

4. Service providers and recipients

We do not sell your personal data. We share it only with providers and parties that are necessary to run the service, each acting as processor or independent controller as applicable:

  • Stripe — payment processing and fraud prevention (independent controller for card data).
  • Hosting, database and file storage providers — to operate the website, store form submissions and uploaded documents.
  • Email and messaging providers (including WhatsApp) — to communicate with you.
  • Analytics and advertising providers — only after you consent to non-essential cookies.
  • Potential employers and qualified professionals (for example consultants or lawyers) — where this is necessary to progress your case, and only to the extent legally permitted.
  • Accountants, auditors and competent authorities — where required by law.

5. International transfers

Some providers may process data outside the European Economic Area. In that case the transfer is protected by an adequacy decision of the European Commission or by Standard Contractual Clauses adopted by the European Commission, together with additional technical and organisational safeguards. You can request further information about the safeguards in place by writing to tripastralstaff@gmail.com.

6. Data retention

  • Eligibility submissions that do not lead to a purchase: kept for up to 24 months, then deleted or anonymised.
  • Customer files and uploaded documents: kept for the duration of the service and for up to 5 years afterwards, to handle any request, dispute or legal claim.
  • Accounting and payment records: kept for 10 years, as required by Italian tax law.
  • Support messages: kept for up to 24 months from the last contact.
  • Consent records and analytics data: kept for the retention period of the relevant tool and in any case no longer than necessary.

7. Security

We apply appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access control on our database and document storage, restricted access on a need-to-know basis and use of reputable providers. Payments are handled entirely on Stripe's PCI-DSS compliant infrastructure. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

8. Your rights

Under the GDPR you have the right to:

  • access your personal data and obtain a copy;
  • rectify inaccurate or incomplete data;
  • request erasure of your data, where the conditions are met;
  • request restriction of processing;
  • object to processing based on our legitimate interest;
  • receive your data in a portable format;
  • withdraw your consent at any time, without affecting past processing.

To exercise your rights, write to tripastralstaff@gmail.com. We reply within one month. You also have the right to lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of your country of residence.

9. Cookies

Information about cookies and similar technologies, and how to change your choices, is available in our Cookie Policy.

10. Children

The website and the service are intended for adults. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, contact us and we will delete it.

11. Changes and contact

We may update this Privacy Policy to reflect changes in our service or in applicable law. The current version is always published on this page with its update date.

CONTACT SUPPORT