PRIVACY POLICY

PURSUANT TO ART. 13 OF EU REGULATION NO. 2016/679 GDPR

  1. Data controller

The data controller is “Archè Studio Legale” (hereinafter referred to as the Firm), with registered office in Genoa, Via Bartolomeo Bosco 15/7, VAT number 02424940993.

 

  1. Categories of personal data processed

The data processing activity will concern the following categories:

  1. personal data, contact details (landline and/or mobile phone numbers, email address);
  2. communications between the Parties, written and oral, including through the website and/or social networks.

 

  1. Purposes, legal basis, and retention period for data processing

The personal data of Data Subjects will be processed for:

 

Purpose

Respond to the request made by the data subject.

Legal basis

Consent of the data subject

Retention period

For 10 years from the termination of the assignment.

 

Purpose

Sending communications relating to updates and/or new legislation and/or case law on matters within the firm’s area of expertise, publications, and events organized and/or sponsored by the firm.

Legal basis

Consent of the data subject

Retention period

Until the data subject withdraws their consent

 

After these periods, the data will be destroyed and/or anonymized in accordance with the above-mentioned timeframes and, where applicable, used exclusively for statistical and analysis purposes.

  • Communication of data

Your personal data may be communicated to:

– consultants and accountants or other legal professionals who provide services for the purposes indicated above;

– banks and insurance companies that provide services for the purposes indicated above;

– parties that process data in compliance with specific legal obligations;

– judicial or administrative authorities, for the fulfillment of legal obligations.

 

  1. Profiling and dissemination of data

Your personal data will not be disclosed or subject to any fully automated decision-making process, including profiling.

Personal data is stored on servers located within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the servers outside the EU. In this case, the Data Controller hereby guarantees that the transfer of data outside the EU will be carried out in accordance with the applicable legal provisions.

 

  1. Rights of the data subject

The rights recognized to you by the GDPR include the right to:

  • request the professional to access, rectify, supplement, erase, and restrict the processing of your personal data;
  • request and obtain your personal data from the professional in a structured and machine-readable format (the so-called right to data portability);
  • object at any time to the processing of your personal data in the event of particular situations concerning you;
  • withdraw your consent at any time, limited to cases where the processing is based on your consent. Processing based on consent and carried out prior to its withdrawal shall, however, remain lawful;
  • lodge a complaint with a supervisory authority (Data Protection Authority – www.garanteprivacy.it).

 

To exercise their rights, Data Subjects may contact the Data Controller at the telephone number 010.0897500 or by writing to the email address info@arche-lex.net or at the Firm’s registered office. A response may take up to 30 days.