Information for processing personal data – Information document pursuant to and for the purposes of Articles 13-14 of GDPR (General Data Protection Regulation) n° 679/2016

Dear User,
Wanda Carla Cerioli esq., Law INSiGHT leaders, as data controller of your personal data (hereinafter the “Controller“) provides this information to explain how the personal data you supply in accessing, browsing and using the Law INSiGHT leaders website is processed. This policy does not apply for any other sites consulted by the user through hypertext links (links) that lead from the Controller’s site to other sites. As a result, the existence of a link to another site does not imply the Controller’s approval or acceptance of responsibility regarding the content of the site to which the user is referred, also in relation to the policy adopted for the processing of personal data and its use.

Data Controller

The Data Controller is Wanda Carla Cerioli, Law INSiGHT leaders, Viale Abruzzi no. 39 – 20131 Milan, Italy, who can be contacted at +39 02 31055226 and at e-mail address: gdpr@law-insight.com

Legal basis of the processing

The Controller processes your personal data:

• to take actions (at your request) prior to the conclusion of a contract;
• with your express consent;
• for the legitimate interest of the Controller in relation to the proper functioning of the website and to ascertain responsibility in case of computer crimes.

Types of personal data processed and data collection methods

The personal data that may be collected by the Controller depends on the use you make of the website and the services it contains. In particular, the Controller collects:

1. Navigation data acquired by the computer systems and software procedures that regulate the functioning of the website. This information is not collected to allow subsequent identification of the user, but is used solely to obtain anonymous statistical information on the use of the site and to check its proper functioning; this category of data includes IP addresses or domain names of the computers used by users who connect to the site, the time of the request, the method used to submit the request to the server, the numerical code indicating the status of the response provided by the server (successful, error, etc.) and other parameters relating to the operating system and browser used by the user. These data may be used by the competent authorities to ascertain responsibility in the event of computer crimes against the website.
2. Personal data through the use of cookies (the Cookie Policy page supplies information on the use and type of cookies, as well as information on how to disable cookies).
3. Personal data (name, surname and e-mail address) voluntarily provided by you to request services and/or information in the “Contact” section.
4. In the “Contact” area, personal data (name, surname and e-mail address) may be processed, upon giving your free and express consent, for sending the newsletter (i.e. the sending of communications containing regulatory updates regarding the activities of the Controller as well as events organized and promoted by the latter).
5. Personal data such as name, surname, place and date of birth, residence, e-mail address and telephone contacts, educational qualifications, work experience, as well as data that may reveal, by way of example, the state of health (such as belonging to protected categories) possibly contained in the curriculum vitae if, by accessing the “Work with us” section, you wish to apply for a published job position or submit your curriculum vitae.

 

Purposes of personal data processing

Personal data will be processed for the following purposes:

• navigation on the website for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its proper functioning;
• providing the services/information requested by you from the Controller and the newsletter service;
• conducting search and selection processes for candidates to be employed by the Controller;
• for the legitimate interest of the Controller in relation to the proper functioning of the website and to establish responsibility in the event of computer crimes.

Processing methods and data storage term of personal data

The processing is carried out with the help of electronic instruments and, in some cases, on paper, according to principles of fairness, lawfulness, transparency, relevance, minimization and necessity, with processes strictly related to the purposes indicated. These processes are designed to safeguard the confidentiality of the data to be protected and the rights of the data subject, in compliance with the provisions of current legislation. To protect data from destruction or loss, even accidental, and against unauthorised access or disclosure, technical and organisational security measures have been adopted. With regard to storage times, personal data will be stored for the time strictly necessary to achieve the purposes for which they were collected. In any case, the Controller will take every care to avoid the use of the data for an indefinite period of time and will limit the storage to the time strictly necessary to achieve the purposes indicated, unless legal provisions or measures of the judicial authorities establish longer storage times.

Please note the following schedules related to the purposes indicated above:

• the personal data collected in order to provide the services you request will be kept for the duration necessary to process your request;
• the personal data collected to send the newsletter will be kept until your consent is withdrawn;
• the personal data collected in the “Work with us” area will be kept for 12 months from the sending of your application.

Once the retention periods indicated above have elapsed, the data will be destroyed, deleted or made anonymous.

 

Recipients of personal data

The Controller may communicate your personal data to:

• companies that provide the Controller with services for the management and maintenance of the website based in Italy;
• firms or companies in the context of assistance and consulting relationships based in Italy;
• law enforcement agencies or competent authorities for possible investigations and judicial measures.

The personal data collected may also be communicated to subjects who have the right and interest to access your personal data by law or on the basis of secondary and/or EU regulations, for the fulfilment of legal obligations.
Your personal data may also be communicated to the Controller’s collaborators assigned to pursue the above purposes, who have been expressly authorised to process the data and have received adequate operating instructions.
It is understood that the personal data will be stored in the servers available to the Controller located within the European Union, and will not be disseminated.
Your personal data may also be disseminated to third parties who may process such data on behalf of the Controller as “Data Processors”. By way of example, these include IT and logistics service providers appointed to manage the website, outsourcing or cloud computing service providers, professionals and consultants. A list of any data processors appointed by the Controller may be obtained at any time by submitting a request to the Controller at the following e-mail address: gdpr@law-insight.com

Consequences of refusal to provide personal data

Certain items of personal data are strictly necessary for the functioning of the website, whilst others are used solely for obtaining anonymous statistical information on the use of the site and to check its proper functioning.
The Controller has configured the site in such a way that the use of your personal data is kept to a minimum, and in such a way as to limit processing of personal data that only allows you to be identified when necessary, or at the request of the authorities and police forces (such as, for example, data relating to traffic and the time you spend on the site, or your IP address) or to ascertain responsibility in the event of hypothetical computer crimes against the website. It is necessary to provide your personal data when requesting information and/or services, or when submitting a curriculum vitae. Failure to provide your personal data will render it impossible for the Controller to perform the services requested, or to assess any employment opportunities.
The provision of data to subscribe to the newsletter is absolutely free and optional; as a result, refusing to supply the requested data will prevent the Controller from sending you such communications. It is understood that you may withdraw your consent to receive the newsletter at any time by writing to gdpr@law-insight.com or you may unsubscribe from the service directly upon receiving the newsletter.

Data Subjects’ Rights

According to articles 15 et seq. of the GDPR, you, as the Data Subject, have the right to ask the Controller, in the cases provided for, for access to your personal data, for their rectification, erasure or restriction or to object to their processing. Requests should be sent by e-mail to the address: gdpr@law-insight.com
It is understood that you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.
If you believe that the processing of your personal data is in breach of the provisions of GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority, using the references available on the website www.garanteprivacy.it or to take legal action

Update

This privacy policy may be subject to changes in order to comply with new legal provisions, changes in policies for the processing of personal data by the Controller and/or as a result of changes in the characteristics of the website.
Any updated version of this policy will be made available on this website indicating the date on which it was updated. Use of the site by you, after the publication of the changes, will constitute acceptance of the same.

DATE: 01/07/2021