of users visiting the Studio Legale Associato Vestuti Cairoli website
pursuant to Article 13 of EU Regulation 2016/679
This page contains a description of the policies for managing the website with regard to the processing of the personal data of users who visit the site and their privacy. This information is provided, also as required by article 13 of EU Regulation 679/2016 on the Protection of Personal Data, to those interacting with Studio Legale Associato Vestuti Cairoli’s web services, electronically accessible via the following address: www.vecalex.it which corresponds to the home page of the official website of Studio Legale Associato Vestuti Cairoli, Via G. B. Grassi, 16 – 22100 Como.
This Privacy Notice is provided only for the aforementioned website and not for any other website accessed by the user via links.
THE “DATA CONTROLLER”
Visiting the website may lead to the processing of data relevant to identified or identifiable persons. The “Data Controller” of the personal data collected following a visit to our website or any other data used for providing our services is Studio Legale Associato Vestuti Cairoli, Via G. B. Grassi, 16 – 22100 Como, which can be contacted at firstname.lastname@example.org.
PLACE OF PROCESSING OF THE DATA
Processing relevant to web services on this site [(physically hosted by SiteGround Spain S.L. (“https://it.siteground.com”)] takes place at the aforementioned office and is carried out exclusively by technical staff of the Department in charge of processing or persons entrusted with occasional maintenance operations.
Personal data provided by users submitting requests for informative material (informative notes, newsletters, registrations etc.) is used solely to carry out the service or performance required and shall not be disclosed to third parties, except in the following cases:
- Persons, companies or professional services firms that provide Studio Legale Associato Vestuti Cairoli with assistance and advice in accounting, administrative, legal, financial and tax matters;
- Subjects whose right to access the data is recognized by provisions of law or orders issued by the authorities.
CATEGORIES OF PROCESSED DATA
The information systems and software procedures relied upon to operate this web site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature it could enable users to be identified through processing and the association with data held by third parties. This data category includes IP addresses and/or the domain names of the computers used by any user connecting with this web site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (success, error, etc.), and other parameters related to the user’s operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information regarding the use of the website and to monitor its proper operation, and they are erased immediately after processing. The data could be used to ascertain responsibility in the case of hypothetical computer crimes against the website; except for this circumstance, any data on web contacts is currently retained for no longer than seven days.
Data voluntarily provided by the user
The optional, explicit and voluntary submission of e-mail messages to the address indicated on this website involves the subsequent acquisition of the sender’s address, necessary to respond to the requests, as well as any other personal data included in the message.
Data will be retained only for the registration required in order for Studio Legale Associato Vestuti Cairoli to send newsletters or other communications, and will not be disclosed to anyone.
Personal information regarding visitors to the website is neither collected nor used. Visitors remain anonymous. The only exception to this rule concerns the information for personal identification needed to fulfil any contractual obligations towards the user.
DATA RETENTION PERIOD OR CRITERIA USED TO DETERMINE SUCH PERIOD
In compliance with the provisions set forth in art. 5 sub-par. 1 lett. e) of Regulation (EU) 2016/679, collected personal data is kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
The retention periods of personal data provided through the website depend on the purposes of processing:
- storage of technical cookies for the correct functioning of the website: such data are retained only for the period of the relevant session, after which they are deleted;
- responding to requests for information or the supply of services (up to 12 months for contact requests; 10 years for administrative/accounting/ financial documentation relevant to the provision of a service);
- newsletters, marketing information or communications that are being sent via e-mail (up to 24 months);
- administrative/accounting/financial management: 10 years, as required by law for the retention of administrative/accounting/financial documentation.
No personal data concerning users are acquired by the website in this regard. No cookies are used to transmit personal information, nor are so-called persistent cookies or user tracking systems implemented. Use of the so-called session cookies – which are not stored permanently on the user’s computer and disappear upon closing the browser – is exclusively limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow a safe and efficient exploration of the site. The so-called session cookies used by this website avoid the need to implement other computer techniques which may be potentially detrimental to the confidentiality of user navigation, and do not allow the acquisition of personal data that identify the user. The only cookies used are WordPress cookies, which have the exclusive function of recognizing logged in users, allowing navigation of the site even in restricted areas.
OPTIONAL NATURE OF DATA PROVISION
Except as specified for browsing data, users are free to provide the personal data contained in the request forms to Studio Legale Associato Vestuti Cairoli or indicated in contacts with the aforementioned Law Firm when delivering e-mails or asking for the dispatch of informative material or other communications. However, failure to provide such data may make it impossible to receive what has been requested.
DATA PROCESSING METHODS
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected, as indicated in this Privacy Notice. Specific security measures are in place to prevent data from being lost, unlawfully or improperly used, or accessed without authorisation.
DATA SUBJECT’S RIGHTS
The Data Controller is Studio Legale Associato Vestuti Cairoli, Via G. B. Grassi, 16 – 22100 Como. You may contact the above Law Firm at any time to exercise your rights as provided for in Chapter 3 of GDPR 679/2016, in particular, the right to obtain confirmation as to whether or not personal data concerning you exist and the logic applied to their processing, the right to ask for their integration, the right to object to their processing on legitimate grounds, and the right to request rectification, updating, erasure (right to be forgotten) or blocking of data that have been processed unlawfully, the right to obtain a copy of the personal data being processed as well as the right to data portability, also by sending a written request to the following e-mail address: email@example.com.
RIGHT TO LODGE A COMPLAINT
Should a data subject deem that the processing of personal data relating to him or her as carried out via this website is in infringement of the Regulation, he or she shall be entitled to lodge a complaint with the Italian Supervisory Authority pursuant to Article 77 of the Regulation, or bring judicial proceedings against the controller or the processor before the Courts (Article 79 of the Regulation).