PRIVACY POLICY

PURSUANT TO ART. 13 OF EU REGULATION NO. 2016/679 GDPR

  • Data Controller

The Data Controller is “Archè Studio Legale” (hereinafter referred to as the Firm), with registered office in Genoa, Via Bartolomeo Bosco 15/7, VAT number 02424940993.

 

  1. Categories of personal data processed

The data processing activity will concern the following categories:

  1. personal details and/or company name, contact details (landline and/or mobile phone numbers, email address);
  2. tax data (tax code and/or VAT number) and bank details (IBAN);
  3. special categories of data referred to in Article 9 of the GDPR and judicial data pursuant to Article 10 of the GDPR, if necessary;
  4. communications between the Parties, written and oral, including through the website and/or social networks.

 

  1. Purposes, legal basis, and retention period for data processing

The personal data of Data Subjects will be processed for:

 

A

Purpose

Correct and complete execution of the professional assignment received, both in and out of court.

Legal basis

Execution of the professional mandate conferred or of a contract to which you are a party or the execution of pre-contractual measures adopted upon request.

With regard to specific data in the extrajudicial sphere, explicit consent of the data subject.

Any refusal to provide data or its subsequent revocation could prevent the establishment or continuation of the relationship.

Retention period

For 10 years from the termination of the assignment.

 

B

Purpose

Regulatory, administrative, and accounting requirements imposed by law

Legal basis

Compliance with a legal obligation

Retention period

Timeframes set forth by applicable laws.

 

C

Purpose

Protection of the rights and property of the Data Controller, including in court

Legal basis

Pursuit of the legitimate interests of the Data Controller

Retention period

For the entire duration of the legal proceedings undertaken and any time required for the protection of the rights of the Data Controller

 

D

Purpose

Sending communications relating to updates and/or new legislation and/or case law on matters within the firm’s area of expertise, publications, and events organized and/or sponsored by the firm.

Legal basis

Optional consent of the data subject

Retention period

Until the data subject withdraws consent

 

After these periods, the data will be destroyed and/or anonymized in accordance with the above-mentioned timeframes and, where applicable, used exclusively for statistical and analysis purposes.

  1. Communication of data

Your personal data may be communicated to:

  • consultants and accountants or other legal professionals who provide services for the purposes indicated above;
  • banks and insurance companies that provide services for the purposes indicated above;
  • Parties that process data in compliance with specific legal obligations;
  • judicial or administrative authorities, for the fulfillment of legal obligations.

 

  1. Profiling and dissemination of data
  2. Your personal data will not be disclosed or subject to any fully automated decision-making process, including profiling.

Personal data is stored on servers located within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the servers outside the EU. In this case, the Data Controller hereby guarantees that the transfer of data outside the EU will be carried out in accordance with the applicable legal provisions.

 

  1. Rights of the data subject

The rights recognized to you by the GDPR include the right to:

  • request the professional to access, rectify, supplement, erase, and restrict the processing of your personal data;
  • Request and obtain your personal data from the professional in a structured and machine-readable format (the so-called right to data portability);
  • object at any time to the processing of your personal data in the event of particular situations concerning you;
  • withdraw your consent at any time, limited to cases where the processing is based on your consent. Processing based on consent and carried out prior to its withdrawal shall, however, remain lawful;
  • lodge a complaint with a supervisory authority (Data Protection Authority – www.garanteprivacy.it).

 

To exercise their rights, Data Subjects may contact the Data Controller at the telephone number 010.0897500 or by writing to the email address info@arche-lex.net or at the Firm’s registered office.

 

A response may take up to 30 days from the date of submission of the request.