Information for interested parties pursuant to art. 13 of the European Regulation on the Protection of Personal Data (GDPR) n. 679/2016 and annexed provisions issued by the National and European Authorities
Privacy protection
The Del Re Law Firm (hereinafter “the Firm”) is constantly committed to providing visitors with a web experience in full respect and protection of their privacy and welcomes you to the website www.delre.it.
We invite you to read our Privacy policy and to read the following information provided – pursuant to art. 13 of the GDPR (General Data Protection Regulation) n. 679/2016 – EU Privacy Regulation; they are aimed at those who interact with the web services directly provided by the Firm and accessible electronically starting from the address www.delre.it and intend to describe the management methods of the aforementioned website and not also of other external websites that can be consulted by the user via link. Additional information may be provided within the different access channels.
The Data Controller of personal data – indication and contact details
Del Re Law Firm, Association of Lawyers, Lungarno degli Archibusieri n. 8, 50122, Florence, Italy. Tel. +39.055.2381572(89), e-mail: privacy@delre.it
Responsible for the processing of personal data and place of processing
Synthesis:
Subjects external to the Data Controller who can manage your personal data in our name and on our behalf. List available at our office and can be requested using the references above.
Insight:
The list of data processors possibly identified and specifically bound by contract or other legal act as well as the system administrator(s) is available at the headquarters. The treatments connected to the web services offered by this site take place at the headquarters of the Firm and possibly at the offices of the external data processors as well as at other subjects appointed and authorized for this purpose (as better specified below) and are handled by entities responsible for the management of the services requested, for the storage and processing of data as well as for the necessary maintenance operations.
Legal bases of the processing / Why we process your data
Basic purpose (mandatory consent)
Synthesis:
Statistics
User contact
Legislative and/or regulatory provisions
Sector specific provisions
Requests received from the user
Insight:
Personal Data is collected for the following purposes and using the following services:
Statistics.
Fulfillment of obligations established by contractual agreements, laws, regulations and/or Community legislation
To enforce the rights even by third parties in court, arbitration, administrative in compliance with the regulatory limitations
Response to specific user requests:
In the event of a manifest request from the user, the Firm undertakes to respond without archiving the data released for other purposes for which consent is optional (see below).
What data do we process and how?
Synthesis:
Cookies
Navigation and usage data
Name Surname – E-mail address – Profile
System and maintenance logs
Insight:
Personal Data may be entered voluntarily by the User, or collected automatically during the use of this Application.
Any use of Cookies – or other tracking tools – by this Application or by the owners of third-party services used by this Application, unless otherwise specified, has the purpose of identifying the User and recording the related browsing activities . Cookies are small files containing a string of characters which is sent to the user’s computer when he visits a website. Cookies can store user preferences and other information. It is always possible to configure your browser to refuse all cookies or signal the possible sending of a cookie by following the instructions provided by the browser itself.
This site, built on the WordPress platform, does not automatically install or use persistent cookies that allow or imply the identification of the user.
Failure by the User to provide certain Personal Data could prevent this Application from providing its services.
The User assumes responsibility for the Personal Data of third parties published or shared through this Application and guarantees that he has the right to communicate or disseminate them, freeing the Owner from any liability to third parties.
Viewing content from external platforms
These services allow you to view content hosted on external platforms directly from the pages of this Application and to interact with them.
If a service of this type is installed, it is possible that, even if the Users do not use the service, it may collect traffic data relating to the pages in which it is installed.
System and maintenance logs
For needs related to operation and maintenance, this Application and any third party services used by it may collect System Logs, i.e. files that record the interactions and which may also contain Personal Data, such as the User IP address. the treatment
Synthesis:
Paper and IT
Insight:
The processing of data concerning you takes place using manual and automated tools, with methods strictly related to the purposes indicated here and, in any case, in order to guarantee the security and confidentiality of your data.
In the event that you wish to obtain further information, we remind you of the rights that are guaranteed to you as specified here.
When is the user obliged to give us their data?
Synthesis:
Basic purpose: obligation
Other purposes (marketing/promotional): option
Insight:
The types of personal data collected and processed on the www.delre.it website are those necessary for the provision of the requested services and in the remaining cases derive from the user’s navigation. It is therefore evident that, if such data were not provided, the services that require the use of these tools cannot be provided. If you do not give your consent to receive advertising information or direct sales or interactive commercial communications, your e-mail address and telephone number will not be used for this purpose. Any voluntary sending of e-mails to the addresses indicated on the site involves the acquisition of the sender’s address as well as any other information contained in the message; such personal data will be used for the sole purpose of performing the service or provision requested.
Protection of minors
Synthesis:
The processing of data of minors can take place to the extent that consent is issued or authorized by the holder of parental responsibility.
Insight:
The Firm does not intentionally collect information of a personal nature (such as name, address and telephone number, etc.) from minors. In any case, if the parent or guardian of a minor should believe that the minor may have nevertheless provided information of a personal nature, he must contact us if he intends to have the aforementioned information deleted from our archives.
Categories of recipients to whom personal data may be disclosed
Synthesis:
employees and similar of the Firm qualified as subjects “authorized to process” and duly trained and monitored by the owner;
external subjects (e.g. legal consultants, administrative consultants, industry standards experts, technical service providers, hosting providers, information services companies, etc.)
Insight:
Your data/of the minor over whom you exercise parental authority will not be disclosed by us, with this term meaning giving them knowledge to unspecified subjects in any way, including by making them available or for consultation.
Your data/of the minor over whom you exercise parental authority in general may be communicated by us, with this term meaning giving knowledge to specific subjects, in the following terms:
to subjects who can access the data by virtue of the law, regulation or community legislation, within the limits set by these rules;
to subjects who need to access data for purposes strictly connected to fulfilling your request and for auxiliary purposes, within the limits strictly necessary for the connected tasks (public security subjects and other public and private subjects for the fulfillment of obligations provided for by law, also of an administrative nature, and the like);
to company employees qualified as persons authorized to process personal data;
to managers of the Firm’s institutional website who perform, on our behalf, tasks of a technical or organizational nature instrumental to the provision of the requested services as well as to any third parties involved in various capacities with the activities;
to system administrators specifically appointed by the writer in compliance with regulatory requirements.
NB: the data will not be disclosed to third parties for their marketing purposes.
Period of retention of personal data
Synthesis:
10 years
Insight:
Your personal data will be kept in our archives for the purposes mentioned here and on the basis of your authorizations for the period deemed appropriate or for a maximum of 10 years. This term could be reduced and/or increased (subject to communication to the interested parties) in the event, for example, of indications from Institutions and/or Supervisory Authorities.
The possibility remains at any time to revoke the consent without prejudice to the lawfulness of the treatment based on the consent issued before the revocation itself.
Transfer to non-EU countries
Synthesis:
The Data Controller could transfer your data to non-EU countries to use services such as archiving or for the creation of mailing lists; naturally in this case the Firm undertakes to verify the security in the transfer of personal data with the criteria established by the legislation (for example: the presence of a “legally binding instrument” having enforceable effect between public authorities or public bodies; the binding rules of company; standard data protection clauses adopted by the Commission; codes of conduct; certification mechanisms).
Insight:
The transfer of personal data to countries outside the European Union:
may involve greater risks and as such must be adequately monitored;
it is a complex activity that requires specific skills.
The starting point of an organization in this regard must be based on the adoption of countermeasures aimed at maintaining the same level of protection that personal data would have if it remained in the EU.
If the Firm makes use of this possibility, it undertakes to collect in advance and make available to the interested parties all the supporting documentation (for example: the presence of a “legally binding instrument” having enforceable effect between public authorities or public bodies; the binding corporate rules; standard data protection clauses adopted by the Commission; codes of conduct; certification mechanisms) in the same way in which rights can be exercised.
Complaint to the Guarantor Authority
The procedures at your disposal and protection (in addition to the exercise of rights against us) are:
Access from the site www.garante privacy.it in the appropriate section dedicated to complaints in the case where the Italian Authority is competent;
or
Respecting the procedures established by the Supervisory Authority of the Member State (where different from Italy) in which the interested party habitually resides, works or the place where the alleged violation occurred.
Your rights
Synthesis:
Access – Limitation – Rectification – Opposition – Withdrawal of consent – Cancellation (Oblivion) – Portability
Insight:
Right of access: you can receive a copy of the personal data being processed at any time.
Right to limitation: it can be exercised not only in the event of violation of the conditions of lawfulness of the processing but also in the event that the rectification of the data is requested or the interested party opposes the processing; the Data Controller undertakes to mark the data in question during the period of its evaluation on what to do through organizational measures suitable for this purpose.
Right of rectification: you can obtain the rectification of inaccurate personal data concerning you without delay and you can also obtain the integration of incomplete personal data also by providing a supplementary declaration.
Right to object: you can object at any time, for reasons related to your particular situation, to the processing of your personal data, even if used for direct marketing and/or profiling.
Right to withdraw consent when released for example for marketing and similar purposes.
Right to cancellation (to be forgotten): it is possible to request the cancellation of data in an enhanced form, for example even after the withdrawal of consent to the processing of personal data by the interested party.
Right to portability: it does not apply to non-automated processing, therefore to paper archives and/or registers; moreover, only the data provided by the data subject to the Data Controller and processed with the consent of the latter or on the basis of a contract stipulated with the Data Controller are portable.
Which references to use to exercise your rights?
Email: privacy@delre.it
Telephone: +39 055 2381572
Fax: +39 055 2381556
Term and methods of response from the Data Controller to anyone who wants to assert a right concerning their personal data
Synthesis:
- 1 (one) month extendable up to n. 3 (three) months in the most complex cases in written form
Insight:
We represent that if you exercise your rights, the Data Controller must provide a written response also through electronic tools that facilitate accessibility (orally only upon express request of the interested party) within the term of n. 1 (one) month which in particularly complex cases can be extended to no. 3 (three) months without prejudice to the obligation to provide feedback within one month of the request, even in the event of refusal.
Having assessed the complexity of the request formulated by the interested party, the Data Controller can establish the amount of any contribution to be requested from him but only if the requests are manifestly unfounded or excessive.
Changes to this information sheet
The Data Controller reserves the right to make changes to this information page at any time by giving notice to Users here. Therefore, please consult this page often, referring to the date of the last modification indicated at the bottom. In case of non-acceptance of the changes made to this privacy policy, the User is required to cease using this Application and may request the Data Controller to remove his Personal Data. Unless otherwise specified, the previous information sheet will continue to apply to the Personal Data collected up to that moment.
