Privacy Policy

Last updated: February 2026

Gui Athia ("I," "me," "my") operates the website guiathia.com (the "Site"). This Privacy Policy explains how I collect, use, store, and protect your personal data when you visit the Site or use my services, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable data protection laws.

1. Data Controller

Gui Athia 66 Paul Street, London, EC2A 4NA Email: iloria@decisionoffice.com Phone: +44 (20) 46 344 332

2. What Personal Data I Collect

I collect personal data only when you voluntarily provide it through the Site:

Contact Form

• First name and last name

• Email address

• Topic of inquiry (Speeches or Decision Room)

• Message content

Newsletter Subscription

• Email address

Website Usage Data

• Cookies and similar technologies (see Section 7)

• IP address, browser type, device information, pages visited, and time spent on the Site

3. Why I Collect Your Data (Legal Basis)

PurposeLegal Basis (GDPR Art. 6)

Responding to your inquiry via the contact formLegitimate interest (Art. 6(1)(f)) — to respond to your request

Sending the Passion Field newsletterConsent (Art. 6(1)(a)) — you actively subscribe

Improving the Site and understanding how it is usedLegitimate interest (Art. 6(1)(f)) — to maintain and improve the Site

Compliance with legal obligationsLegal obligation (Art. 6(1)(c))

4. How I Use Your Data

Your personal data is used to:

• Respond to inquiries about keynote speeches, the Decision Room, or other services

• Send the weekly Passion Field newsletter (only if you have subscribed)

• Improve the Site's functionality and user experience

• Comply with applicable legal requirements

I do not sell, rent, or trade your personal data to third parties. I do not use your data for automated decision-making or profiling.

5. Who I Share Your Data With

I may share your data with the following categories of recipients, only to the extent necessary:

• Email service provider — to deliver the Passion Field newsletter

• Website hosting provider — to operate the Site

• Professional advisors — legal, accounting, or tax advisors, where required

• Law enforcement or regulatory authorities — where required by law

All third-party processors are bound by data processing agreements in compliance with GDPR Article 28.

6. International Transfers

If your data is transferred outside the European Economic Area (EEA), I ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or transfers to countries with an adequacy decision.

7. Cookies

The Site may use cookies to improve your browsing experience and analyze site traffic. Cookies are small text files stored on your device.

Types of cookies used:

• Strictly necessary cookies — required for the Site to function (no consent needed)

• Analytics cookies — to understand how visitors use the Site (used only with your consent)

You can manage or disable cookies through your browser settings. Disabling cookies may affect your experience on the Site.

On your first visit, you will be presented with a cookie banner allowing you to accept or decline non-essential cookies.

8. How Long I Keep Your Data

DataRetention Period

Contact form submissions24 months after last communication

Newsletter subscriber dataUntil you unsubscribe

Website analytics data26 months

After the retention period, your data is securely deleted or anonymized.

9. Your Rights Under GDPR

You have the right to:

• Access — request a copy of the personal data I hold about you

• Rectification — request correction of inaccurate or incomplete data

• Erasure — request deletion of your data ("right to be forgotten")

• Restriction — request that I limit how I use your data

• Data portability — receive your data in a structured, machine-readable format

• Objection — object to processing based on legitimate interest

• Withdraw consent — withdraw your consent at any time (for newsletter subscriptions, use the unsubscribe link in any email)

To exercise any of these rights, contact me at iloria@decisionoffice.com. I will respond within 30 days.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk.

10. Security

I implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted data transmission (SSL/TLS) and secure storage with access controls.

11. Third-Party Links

The Site may contain links to third-party websites (such as Amazon, LinkedIn, or podcast platforms). I am not responsible for the privacy practices of those websites. I encourage you to read their privacy policies before providing any personal data.

12. Children

The Site is not directed at individuals under the age of 16. I do not knowingly collect personal data from children. If I become aware that I have collected data from a child under 16, I will delete it promptly.

13. Changes to This Policy

I may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. I encourage you to review this policy periodically.

14. Contact

For any questions about this Privacy Policy or your personal data, contact:

Gui Athia Email: iloria@decisionoffice.com Phone: +44 (20) 46 344 332 Address: 66 Paul Street, London, EC2A 4NA