INFORMATION PURSUANT TO ART. 13 OF THE EU-REGULATION 2016/679
we wish to inform that the „European Regulation 2016/679 concerning the protection of individuals, with regard to the processing of Personal Data, as well as the free circulation of such data“ (infra GDPR), provides for the protection of individuals with regard to the processing of personal data such as fundamental right.
Respect for privacy and protection of personal data are important issues to which we pay attention in all our professional relationships. We respect the confidentiality of personal data and always act in accordance with the provisions of the legislation on the protection of personal data and for the following.
In this document is described the manage the website in relation to the processing of personal data of users who consult it. This information applies only to personal data collected through this website (hereinafter: the Web Site) and does not apply to other websites owned by third parties, which can be accessed via link from the Web Site.
This information is also provided pursuant to art. 13 of the EU Regulation 2016/679 to those who consult the website DusiLaw Legal & Tax Law Firm, accessible online at: http://www.dusilaw.eu/ corresponding to the home page of the official website of DusiLaw Legal & Tax Law Firm.
This document also describes the methods for managing the sending of our Newsletter, with reference to the processing of personal data of users, who consult and receive it.
DISCLAIMER (LIMITATIONS OF LIABILITY AND CONDITIONS FOR USING THE WEB SITE):
The Web Site includes informations concerning in general the activity of our Law Firm as well as the legal, tax and fiscal field in which we operate and in particular it accepts in-depth information on these matters, especially with regard to international law issues and „cross-border“ issues.
All informations included on the Web Site cannot and must not be considered as a substitute for consulting your lawyer and/or trusted consultant. Anyone who has problems relating to the areas in question on the web site can contact us, based on the information contained on the site itself.
The DusiLaw Legal & Tax Law Firm does not guarantee or assume any responsibility for the completeness of the information included in the Web Site, therefore it can never be held responsible for the use and/or abuse of the information included therein .
The DusiLaw Legal & Tax Law Firm does not control and is not responsible for the information included in other websites possibly connected to ours, and, therefore, can never be held responsible for any damages and/or inconveniences caused by the use of such information.
TYPE OF DATA PROCESSED BY THE DUSILAW LEGAL & TAX STUDIO THROUGH THE WEBSITE
By means of the Web Site, the following types of personal data provided by the Users of the website are processed when they are browsed, consulted and/or voluntarily notified to the website, in particular:
- Data collected automatically
The computer systems and applications, dedicated to the functioning of this website detect, during their normal operation, some data (the transmission of which is implicit in the use of the Internet communication protocol) potentially associated with identifiable users. The data collected includes, for example, the IP addresses and domain names of the computers used by users connecting to the Web Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used by submitting the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters concerning the operating system, the browser and the IT environment used by Users. These data are processed, for the time strictly necessary, for the sole purpose of obtaining statistical information on the use of the Web Site and to check its regular operation. Providing such data is mandatory, as it is directly linked to the web browsing experience.
- Personal data provided by users
No registration is required to access and consult the Web Site.
The „Contacts“ page is present: the use of the form therein as well as the optional, explicit and voluntary sending of data, as requested by other sections of the Web Site, determines the processing of the data provided in order to process the requests of the User (for example when requesting performances or services or information or clarifications by calling the numbers indicated on the Web Site or by writing to the e-mail addresses therein).
PURPOSE OF THE PROCESSING AND NATURE OF THE PROVISION OF DATA
The personal data communicated to us will be processed by DusiLaw Legal & Tax Law Firm, both manually, with paper support and with the help of electronic equipment, for the following purposes:
The personal data collected also automatically may be processed to allow viewing of the web pages and use the services offered within the Web Site.
DISPOSAL OF REQUESTS REQUIRED
Personal data (such as, for example, the sender’s address and any other personal data included in the communication) may be used to respond to requests received.
In the processing of personal data that can, directly or indirectly, identify the sending User, the objective of the DusiLaw Legal & Tax Law Firm is to follow the principle of strictly necessary. For this reason the DusiLaw Legal & Tax Law Firm has set up this Web Site in such a way as to minimize the use of personal data: therefore, personal data are not processed when the purpose of a specific activity can be achieved using anonymous data.
The provision of data for these purposes by users is free and optional. Failure to provide data may make it impossible to obtain the requested information.
OPERATION AND PROTECTION OF THE WEBSITE AND THE NETWORKS, STATISTICS
The computer systems and software procedures used to operate the Web Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with specific data subjects, but which, by its very nature, could – by means of processing and association with data held by the Data Controller or by third parties – allow the identification of Web Site Users.
The data collected will be processed for the following purposes, related to the implementation of legislative or contractual obligations:
– Technical and Functional Access to the Web Site, no data is retained after closing the Browser;
– Purpose of Advanced navigation or personalized content management;
– Statistical purpose and analysis of navigation and of users.
Navigation data may eventually be used to ascertain illegal activities, as in the case of computer crimes, to the detriment of the Web Site.
The processing of functional data for the fulfillment of these obligations is necessary for a correct management of the relationship and their conferment is obligatory in order to implement the aforementioned purposes.
The data (such as the sender’s address as well as any other personal data included in the registration form, including the type and sectors of interest) sent by the user and voluntarily used to send the newsletter (as per user request) also through segmentation by type and sector of interest chosen, so that the interested user can receive information and/or invitations in a way that is specific and relevant to him. In any case, the interested subject can change the preferences expressed at any time if he deems it appropriate, by sending an email to firstname.lastname@example.org.
The provision of data is optional, although any refusal to answer will make it impossible for the owner to process requests to send the newsletter.
Personal data may be processed, subject to specific and separate consent, through automated tools (such as email and SMS) as well as traditional means (such as telephone contact through an operator), also for marketing purposes and promotional activity by the Owner. The interested subject has the right to object at any time to the processing of their data for this purpose, for which the provision is optional, by sending an email to email@example.com. Any refusal to treat does not compromise the continuation of the relationship, or the adequacy of the treatment itself.
LEGAL BASIS OF THE TREATMENT
The data provided by the User will be processed without the prior consent of the User pursuant to art. 6, lett. b) GDPR, in order to allow navigation of the Web Site and to reply to the questions received and to provide the requested answers. Therefore only the data relating to the e-mail address, where the reply and the data contained in the question formulated, are to be considered necessary.
The legal basis of the processing is the consent to the processing of the aforementioned data, consent that is necessary. Consent shall be deemed to have been made by flagging the appropriate boxes at the bottom of the online form.
METHOD OF TREATMENT
The processing of user data is carried out by means of the operations indicated in art. 4 n. 2) GDPR and in particular: the collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, distribution or any other form of making available, comparison and interconnection, limitation, cancellation or destruction.
Users‘ data are processed with and without the aid of automated processes, only for the time strictly necessary to achieve the purposes for which they were collected and processed in compliance with the times established by law for the purposes of service, through IT procedures and in any case by telematic means or paper supports by internal or external subjects, specifically appointed for this purpose and committed to confidentiality.
The data are processed with automated processes for the time strictly necessary to achieve the purposes for which they were collected and in compliance with the principle of necessity and proportionality, avoiding processing of personal data if the operations can be performed using anonymous data or by other means and are stored in paper, electronic and/or digital archives, with full assurance that adequate security measures are in place, as required by current legislation. All in compliance with all the precautions necessary to ensure the security and confidentiality of information.
The DusiLaw Legal & Tax Law Firm has put in place adequate technical and organizational measures to prevent the loss of personal data, illicit or incorrect uses and unauthorized access and to guarantee and be able to demonstrate that the processing of data provided by the User is carried out in compliance with Legislative Decree 196/2003 and the GDPR, taking into account the nature, scope of application, context and purpose of the processing.
It should be noted, however, that it is essential for data security that the User’s devices are equipped with constantly updated antivirus and that the provider for the Internet connection guarantees the secure transmission of data through the implementation of firewalls, anti-spam filters and similar.
RECIPIENTS OF DATA
The personal data collected through the Web Site will not be disseminated, sold or exchanged with third parties, without the prior express consent of the interested party, except for any authorized parties – committed to confidentiality or in the case appointed as data processors pursuant to ex art. 28 EU Regulation 679/2016 (as IT support companies and hosting companies) – where necessary for the purposes referred to in this information notice.
For the maintenance of the Web Site and for the provision of communication services to its customers, the DusiLaw Legal & Tax Law Firm avails itself of the collaboration of selected third-party companies. If necessary, personal information can be processed by these third-party companies, only if this is instrumental to the collaboration of this third party with DusiLaw Legal & Tax Law Firm and in compliance with strict contractual confidentiality restrictions; the data can also be communicated to the consultants who assist DusiLaw Legal & Tax Law Firm in the management of the electronic transaction (mainly internet service providers, shipping companies).
The data may be eventually transmitted to the competent Authorities that expressly request it for administrative or institutional purposes, according to the provisions of the current national and European legislation.
The updated list of these third parties Responsible for Processing, appointed by the Data Controller pursuant to art. 28 EU Regulation 679/2016, is available at the slot of the Law Firm.
PERSONS AUTHORIZED FOR DATA PROCESSING
The personal data collected through the Web Site may be processed by employees and collaborators of the Data Controller in their capacity as subjects authorized to use the data processing and appointed to achieve the aforementioned purposes. These subjects received adequate operating instructions.
This website uses only „technical“ COOKIES, in order to get better navigation on the website.
What are cookies
A cookie is a small text file that websites save on the user’s computer or mobile device while you visit them. Thanks to cookies, the site remembers actions and preferences (for example login, language, font size and other display settings) so that you do not have to re-enter them when you return to the site or browse from one page to another.
– display preferences, for examples contrast settings or font sizes;
– if you have already responded to a pop-up survey on the usefulness of the contents found, to avoid repeating it;
Moreover, some videos included in our pages use a cookie to process statistics, anonymously, about how you arrived on the page and which videos you saw.
It is not necessary to enable cookies for the website to work, but doing so improves navigation. It is possible to delete or block cookies, but in this case some website functions may not work properly.
Information regarding cookies is not used to identify users and browsing data is always under our control. These cookies are used exclusively for the purposes described here.
How to control cookies
You can check and/or verify the cookies as you wish. You can delete cookies already present on your computer and set almost all browsers to block installation. If you choose this option, you will have to manually change some preferences every time you visit the website and it is possible that some services or certain functions are not available. Most internet browsers are initially set up to accept cookies automatically.
You can change these options to block cookies or to warn you that cookies are being sent to the user’s device. There are various ways to manage cookies. You can refer to the instruction manual or the browser help screen to find out how to adjust or change the settings. In the case of different devices (for example, computer, smartphone, tablet, etc.) you will need to ensure that each browser on each device is adjusted to reflect your cookie preferences.
Facebook, social plugins and other social networks
Our web pages may contain social network plug-ins (for example Facebook, Linkedin, etc.). if you access one of our web pages equipped with a similar plug-in, the internet browser connects directly to the social network server and the plug-in is displayed on the screen thanks to the connection with the browser.
If an interested user of a social network visits our web page, while it is connected to its social account, its personal data may be associated with the social account. Even if the functions of the plug-in are used, the information will be associated with the social account. Further information on the collection and use of data by social networks in general, as well as on the rights and methods available to protect the privacy of the data subject in this context, are present in the pages of the account’s social networks, on the protection of data. If the interested party does not wish to associate the visit to our web pages with his social account, he must log-off from the social network before visiting them.
The data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed („principle of limitation of conservation“, art. 5, GDPR) or based on the deadlines set by law.
Once the aforementioned storage terms have expired, personal data will be destroyed, erased or made anonymous, consistent with the cancellation and back-up procedures.
RIGHTS OF THE INTERESTED PARTY
At any time, the interested party may exercise, pursuant to articles 15 to 22 of the GDPR, the right to:
- request confirmation of the existence or not of your personal data in our databases;
- obtain access to data concerning him, information about the purposes of the processing, categories of personal data, recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the period of storage;
- obtain the rectification of inaccurate data, data deletion and integration of incomplete data;
- obtain the treatment limitation;
- obtain data portability in the event that the processing is carried out with automated tools and to receive the data in a structured format, commonly used and automatically readable, and, if technically feasible, to transmit them to another holder without impediments;
- oppose the processing, also for direct marketing purposes; in this case the Data Controller will abstain from processing, except for legitimate reasons which prevail over the interests, rights and freedoms of the data subject or for verification, exercise or defense of a right in court;
- oppose an automated decision-making process relating to natural persons, including profiling;
- make a complaint to the competent control authority in the Member State in which he mainly resides or works, or of the State in which the alleged violation occurred.
METHOD OF EXERCISE OF RIGHTS
To exercise the rights referred to in the previous article, the User may contact us in any time by sending a written request to DusiLaw Legal & Tax, Corso di Porta Vigentina 35, 20122 Milano, or to the email address firstname.lastname@example.org.
OWNER AND MANAGER OF TREATMENT
The data controller is Avv. Mario Dusi, with Studio in Milan Corso di Porta Vigentina 35, email address email@example.com.
The updated list of data processors is kept at the headquarters of the data controller.
UPDATE OF THE INFORMATION
Please note that this information will be subject, if necessary, to periodic updates which will be highlighted on the website.
This information was updated on 05/04/2019.