NOTICE ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679 GDPR”.

Studio Legal and Engineering (hereinafter the “Firm”) aims to bring its privacy policies in line with the provisions of EU Regulation 2016/679 on the protection of personal data (hereinafter the “Regulation” or “GDPR”), Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018, containing the “Personal Data Protection Code” (hereinafter the “Italian Privacy Code”) and current privacy legislation.

DATA CONTROLLER
The Data Controller is Studio Legal and Engineering – VAT no. 02788700355 – with registered office at Via F.lli Cervi no. 59 – Reggio Emilia.

PURPOSE AND LEGAL BASIS OF THE PROCESSING
The Firm processes the data subjects’ personal data to fulfil the professional engagement granted to the firm’s professionals. Processing for this purpose is necessary for the fulfilment of contractual and/or legal obligations.
Failure to provide personal data, in whole or in part, will make it impossible for the Firm to provide the services requested.

PROCESSING METHODS
The processing of personal data is carried out through the activities specified in Article 4(2) of the GDPR, namely: collection, recording, consultation, storage, disclosure, erasure and destruction. Your personal data will be processed on paper, as well as by electronic means.
The Firm will process personal data for the time necessary to fulfil the above purposes, in compliance with the civil and tax laws in force.
In any event, processing will be based on principles of fairness, lawfulness and transparency and will be carried out with the aid of tools and procedures that avoid the risk of loss, unauthorised access, unlawful use and dissemination.

ACCESS TO AND DISCLOSURE OF PERSONAL DATA
Personal data may be made accessible for the abovementioned purposes:

  • to professionals who are part of the Firm or who cooperate on the firm’s files in their capacity as persons in charge of for processing;
  • to third parties who carry out processing on behalf of the Firm in their capacity as Data Processors, an updated list of which is kept at the Data Controller’s registered office.

Without the need for express consent – Article 6(b) and (c) GDPR – the Firm may disclose personal data to: Inspection Bodies, Judicial Authorities, as well as to those subjects to whom disclosure is mandatory by law.
These subjects will process the data in their capacity as independent data controllers.

DATA TRANSFER
Personal data will be processed by the Firm within the European Union territory.
In any event, it is understood that the Data Controller may move the servers and storages outside the EU, if necessary. In this case, the Data Controller hereby ensures that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, subject to the conclusion of the standard contractual clauses provided for by the European Commission.

RIGHTS OF DATA SUBJECTS
In relation to the processing of personal data, data subjects have the right:

  • to be informed of: data and location of the Data Controller; the purposes and methods of processing; data and location of the Data Processor;
  • to obtain by the Data Controller or the Data Processor, without delay:
    1. confirmation as to whether or not personal data concerning them are being processed, and disclosure in an intelligible form of such data and their origin, as well as of the purposes on which the processing is based;
    2. the erasure of personal data concerning them, when: i) the data are no longer necessary in relation to the purposes for which they were collected, ii) consent has been withdrawn and there is no other legal basis for the processing, iii) the data have been unlawfully processed, iv) the data subject has objected to the processing and there are no overriding legitimate grounds for the processing, v) the data controller is under a legal obligation to delete the personal data;
    3. the updating, rectification or, if applicable, the integration of data;
    4. certification to the effect that the operations referred to points 2) and 3) above have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is protected.
  • to object, on grounds relating to their specific situation, to the processing of personal data concerning them, pursuant to Article 6(1)(e) or (f)
  • to object to the processing of personal data concerning them for direct marketing purposes;
  • to lodge a complaint with a supervisory authority;
  • to receive the personal data concerning them in a structured, machine-readable format and to transmit such data to another Data Controller without hindrance from the data controller to which the personal data have been provided. When exercising their rights regarding data portability, data subjects have the right to obtain the direct transmission of personal data from one Data Controller to another, if technically feasible;
  • not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or may similarly significantly affect them.

The Controller shall provide a copy of the personal data being processed; if the data subject requests other copies, the Data Controller may charge a fee based on the administrative costs actually incurred.
Data subjects may exercise the above rights at any time by sending:

  • a registered letter Studio L&E -Legal and Engineering with registered office in Reggio Emilia, Via F.lli Cervi no. 59;
  • an e-mail to emanuela.arduini@studio.le.it.

AMENDMENTS TO THIS NOTICE
This notice may be subject to amendments from time to time – also in connection with the entry into force of any new sector regulations, the updating and/or provision of new services or technological innovations -; therefore, we invite users to periodically consult this page.