PRIVACY POLICY - EUROPEAN REGULATION (G.D.P.R.) 679/2016

WHAT KIND OF DATA DO WE COLLECT?

When you use our services, you agree that our company may collect some of your personal information. This page is intended to tell you what data we collect, why and how we use it.

We process two types of data:

  • data provided by you
  • data that we automatically collect
  • DATA PROVIDED BY THE USER

    When you use our forms for the purpose of requesting information, we ask you to provide us with certain information which is necessary to make use of our service.

    These are the personal data that we ask you to provide:

  • Name
  • Surname
  • E-Mail
  • Phone
  • As part of our internal procedures and/or use of certain services, we may ask you to send us attached files such as identity documents or photographs.

    THIRD PARTY DATA

    If you provide personal information about others, such as your family or friends, you should ensure that they have been properly informed and have consented the processing of data in the manner described in this policy.

    DATA OF MINORS UNDER THE AGE OF 16

    If you are under 16 years of age you cannot provide us with any personal data, and in any case, we do not accept responsibility for any false statements you could provide to us. If we become aware of any false statements, we will proceed with the immediate deletion of any personal data acquired.

    DATA THAT WE AUTOMATICALLY COLLECT

    We collect the following data through the services you use:

  • technical data: e.g. IP address, browser type, information about your computer;
  • data collected using technical cookies or similar technologies.

  • 1. HOW DO WE USE THE DATA COLLECTED?

    We use the collected data to offer you our service every day, to inform you about our legal activities and services.

    1.1. TO ENSURE THAT YOU HAVE ACCESS TO OUR SERVICES AND IMPROVE THEIR DELIVERY

    We use your data to ensure the enjoyment of our services, including:

  • communications related to the provision of the service
  • activities of an administrative, financial or accounting nature
  • These treatments are necessary to correctly provide the services of Studio Legale Dinacci to the users who adhere to them.

    We also use your data to improve and implement the service, through the following treatments:

  • communications regarding services similar to those used by you
  • market research, voluntary surveys and user satisfaction survey activities
  • Such processing is based on the legitimate interest of the data Controller (see point 3.1) and you may object at any time.

    1.2. TO INFORM YOU ABOUT OUR ACTIVITIES

    We use the data collected, if you have expressly given us your consent, to inform you about activities and services that may be of interest to you.

    In particular we use them for:

  • communicate activities, legal services, initiatives or partnerships of Dinacci Law Firm by e-mail.
  • make analysis and reporting activities related to communication systems, such as the detection of the number of open e-mails, the clicks made on the links within the communication, the type of device used to read the communication and its operating system or the list of unsubscribed to the newsletter.
  • 1.3. E-Mail Management

    The Dinacci Law Firm adopts a centralized internal communication system; each e-mail message sent to one of the different e-mail addresses referable to the Dinacci Law Firm is filed in an e-mail recipient (segreteria@studiolegaledinacci.it) which can be accessed by the secretarial staff (Dr. Elena Ragusa) expressly designated to the processing of personal data pursuant to art. 2-quaterdecies of Legislative Decree no. 101/2018.


    2. IS THE PROVISION OF DATA MANDATORY?

    The supply of personal data is mandatory only for the necessary processing of data related to the provision of the services offered by Studio Legale Dinacci. (any refusal for the purpose of providing the service makes it impossible to use the service itself). While for promotional purposes, the provision of data is optional and any refusal of consent does not have negative consequences on the provision of the service offered on the website www.studiolegaledinacci.it (including any sub-domains) and related applications.


    3. WHO ARE THE SUBJECTS OF THE PROCESSING?

    3.1. DATA CONTROLLER

    The data controller is Studio Legale Dinacci in the person of its legal representative, with registered office in Rome (IT), Viale Giulio Cesare 6, P.IVA 09711850587.

    The data controller makes use of data processors to achieve the purposes specified in point 1 and of a Data Protection Officer (DPO) to oversee the protection of personal data.

    Please refer to point 3.2 below for each request relating to your personal data.

    3.2. Data Protection Officer (DPO) AND CONTACT INFORMATION

    The designated Data Protection Officer pursuant to Art. 37 of the GDPR is Antonio Ugo Palma.

    TWe remind you that you can, at any time, contact the DPO and send any question or request relating to your personal data and respect for your privacy by writing to privacy@studiolegaledinacci.it.

    3.3. SUBJECTS TO WHOM PERSONAL DATA MAY BE COMMUNICATED

    The data collected as part of the provision of the service may be communicated to:

  • companies that perform functions closely related and instrumental to the operation – also technical - of the services of Studio Legale Dinacci, such as suppliers providing services for content review and verification, providers of direct marketing and customer care services, companies that provide storage, administrative, payment and billing services
  • administrative bodies, judicial bodies and authorities pursuant to legal obligations
  • Your personal data may be transferred outside the European Union for processing by some of our service providers. In this case, we ensure that this transfer is carried out in accordance with applicable legislation and that an adequate level of personal data protection is guaranteed based on an adequacy decision, standard clauses defined by the European Commission or Binding Corporate Rules.

    Under no circumstances do we transfer or sell personal data to third parties.


    4. HOW CAN YOU OBTAIN INFORMATION ABOUT THE DATA, MODIFY IT, DELETE IT OR HAVE A COPY OF IT?

    4.1. ACCESS TO PERSONAL DATA FROM YOUR PRIVATE AREA AND WITHDRAWAL OF CONSENT (OPT-OUT)

    You may, at any time, request by email at privacy@studiolegaledinacci.it to view your personal data and/or modify it, or revoke the consent you have provided in accordance with GDPR.

    4.2. EXPORT AND CANCELLATION OF PERSONAL DATA PROCESSING

    To export your personal data (takeout) or to ask for their cancellation you can send a request to privacy@studiolegaledinacci.it

    Your personal data will be exported within 30 days or, if the export becomes particularly complex, within three months.

    The cancellation will be carried out within the technical timescale foreseen and in accordance with the storage period explained in point 5 below.

    4.3. EXERCISING YOUR RIGHTS

    Any individual using our service can:

  • obtain from the Data Controller, at any time, information about the existence of their personal data, the origin of the same, the purposes and methods of treatment and, if present, to obtain access to personal data and information referred to in Article 15 of the GDPR
  • request the updating, rectification, integration, cancellation and limitation of data processing if one of the conditions provided for in Article 18 of the GDPR is met, the transformation into anonymous form or the blocking of personal data, processed in violation of the law, including data whose retention is not necessary for the purposes for which the data were collected and/or subsequently processed.
  • oppose, in whole or in part, for legitimate reasons, to the collection and processing of data intended for commercial purposes such as the sending of commercial information, advertisement materials or direct selling, market research or commercial communication. Each user also has the right to revoke his or her consent at any time without prejudice to the lawfulness of the processing based on the consent given before revocation.
  • receive your personal data, provided knowingly and actively through the use of the service, in a structured format, in common use and readable by automatic device, and to transmit them to another data controller without impediment
  • lodge a complaint with the Guarantor Authority for the protection of personal data in Italy
  • We remind you that for any question or request concerning your personal data and respect for your privacy you can write to the dedicated address privacy@studiolegaledinacci.it


    5. HOW AND FOR HOW LONG WILL YOUR DATA BE STORED?

    Personal data will be stored in paper and/or electronic/informatics form for the time strictly necessary to fulfil the purposes set out in point 1, in compliance with your privacy and current regulations.

    For purposes of analysis aimed at developing and improving the service, your personal data will be kept for a period not exceeding 3 years.

    For direct marketing and profiling purposes we will keep your data for a maximum period equal to that provided for by the applicable regulations (respectively 24 and 12 months).

    Invoices, accounting documents and transaction data are kept for 11 years in accordance with the law (including tax obligations).

    If you exercise your right to erasure (right to be forgotten) through a request for express cancellation of the personal data processed by the Data Controller, please note that such data will be stored, in a protected form and with limited access, only for the purpose of investigation and prosecution of crimes, for a period not exceeding 12 months from the date of the request and then will be deleted securely or anonymously irreversibly.

    Finally, we remind you that for the same purposes, data relating to telematic traffic, excluding in any case the contents of communications, will be kept for a period not exceeding 6 years from the date of communication, pursuant to art. 24 of Law no. 167/2017, which implemented EU Directive 2017/541 on counter-terrorism.


    6. HOW DO WE ENSURE THE PROTECTION OF YOUR DATA?

    The data is collected by the subjects indicated in point 3 - according to the instructions of the reference legislation - with particular regard to the security measures provided for by the GDPR (art. 32) for the treatment of the data through computerized, manual and automated tools with logic strictly related to the purposes indicated in point 1, with the aim of ensure the security and confidentiality of the data.


    7. CAN THE PRIVACY POLICY BE MODIFIED OVER TIME?

    This policy may be subject to changes. If substantial changes are made to the use of data relating to the user by the Owner, the latter will notify the user by publishing them with the utmost prominence on its pages or by alternative or similar means.