Data controller is Portolano Cavallo Studio Legale, via Rasella 155, 00187 – Rome; telephone no.: +39 06 696661; e-mail address: firstname.lastname@example.org.
Definition of “Personal Data”
Categories of Data Processed
1) Data Provided Voluntarily by the Data Subjects
2) Netsurfing Data
Computer systems and software procedures in charge of the correct functioning of the Website may collect, during their normal activity, some personal data, whose transmission is implicit in internet communication protocols. This type of information is not collected in order to be linked to identified subjects, but by its own nature, through processing and in combination with third party’s data, such information might be able to be used to identify users. Such category of data includes, among others: IP addresses relating to the computer used to access the Website, URI (Uniform Resource Identifier) addresses of the requested resources, time of the request, procedure used to forward the request to the server, the size of the answered file, the numeric code that points to the condition of the server’s answer (successful, error etc.) and any other parameter relating to the user’s operating system. This type of data is used only for the purpose of gathering statistic and anonymous information on the usage of the Website and to assure its correct functioning, and is immediately erased after the processing. The above mentioned data could be used to determine possible criminal liability arising from computer crimes in prejudice of the Website.
Purposes and Modalities of Data Processing
The Firm processes the abovementioned personal data only in relation to:
a) subscription to newsletter, invitation to events and seminars, or subscription to mailing lists concerning the sending of communications relating to the Firm (events organized, certifications and prices received, information concerning careers within the Firm);
b) requests for information on the Firm or contact requests;
The Firm protects your personal data adopting all security measures prescribed by the GDPR. The Firm shall process the personal data about you only for the time necessary for the achievement of the purposes above described. The processing may be carried out with or without the use of electronic means as well as with automated systems.
Legal Basis for the Processing
In relation to the cases described above in sub a):
– the data subject may request to subscribe to our newsletter specifically indicating the areas of his interest, through the specific section of the Website, thereby asking to receive scientific articles on judicial matters, jurisprudential changes and other legal matters relating to the practice areas of the Firm; or
– the data subject may receive information on our events and seminars on the basis of our legitimate interest to keep contacts with the data subject when the data subject already subscribed to one of our events or newsletters (also considering his reasonable expectations), save the right to object (“opt-out”); or
– the data subject may be entered into a mailing list as a result of contacts with the Firm or with a professional or collaborator of the Firm (for example, exchange of business cards or other contact that may constitute an active behavior demonstrating interest towards the Firm); in such a case it constitutes a legitimate interest of the Firm to keep in contact with him/her by sending communications concerning the Firm as well as events organized by the Firm and that the Firm thinks could be of interest to the data subject (duly considering the expectations of the data subject), save the right to object (“opt-out”).
Optional Personal Data Provision
Without prejudice to the provisions on netsurfing data, the data subjects have the ability to provide or not provide his/her personal data in the forms on the Website or through e-mail. Not providing the Firm with such data, however, may render it impossible for the Firm to send you the communications and information you asked for.
Communication and Disclosure of Personal Data – International Data Transfers
Rights of the Data Subjects with Reference to Their Personal Data
The data subject has the right to obtain at any time confirmation as to whether or not there is personal data concerning him or her being processed, to access such personal data, to ask to receive the data in a structured, commonly used and machine-readable format in order to transmit the data to another controller, as well as to request at any time the erasure of such personal data, to obtain the restriction of processing or to object, in whole or in part, on legitimate grounds, to the processing of his or her personal data, in particular where it is processed for direct marketing purposes, and the data subject may exercise such right also by clicking in the section for such purpose below every communication. The exercise of such rights, however, may be subject to some limitations and exclusions pursuant to the GDPR and the applicable regulations.
Where the processing is based on the consent of the data subject, it shall be understood that the data subject has the right to withdraw his or her consent at any time. Such withdrawal shall not affect the lawfulness of processing based on consent given before withdrawal.
Right to lodge a complaint
Without prejudice to any other administrative or judicial remedy, every data subject, where it considers that the processing of personal data relating to him or her infringes the law, shall have the right to lodge a complaint with a supervisory authority.
Exercise of Users’ Rights and Request of Information