Privacy policy
- this notice the Studio Legale De Vita (De Vita Law Firm, the “Law Firm”) provides the Users information on how the Law Firm manages the devita.law Website (the “Website”), and in particular the purpose and manner by which the personal data of the Website users (the “Users”) is collected and processed.
- This notice applies exclusively to the devita.law Website and no other third-party website which the Users may gain access to or consult by using any of the links provided on the Website.
Owner of the Website and Personal Data Processing Controller
2.1. The Law Firm, with head offices in No. 7 Via Lariana, 00199 Rome, Italy, as Owner of the devita.law Website, is the controller (the Controller) of the personal data processing of all those who interact with the Website and therefore provides all Users this information notice pursuant to Art. 13 of EU Regulation 679/16 (hereinafter the “Code”).
2.2. This notice aims to inform all Users upon the Law Firm privacy policy and to understand how their personal data is processed while using the Law Firm Website. For any enquiries pertaining to this notice, please contact the Controller at studio@devita.law.
Type of data collected and purpose of processing
3.1. The data that the Law Firm collects from the Website, either independently and/or via third-parties, consists of:
- Data provided voluntarily by the Users, and
- Navigation data / Cookies.
1. Data provided voluntarily by the Users
The optional, elective and voluntary transmission of emails to the address indicated on the Website for the transmission of Curriculum Vitae or the transmission of “contact” requests entail the subsequent acquisition of the sender’s email address, necessary to answer any requests, as well as any other personal data included in the email or attachments.
The personal data provided by the Users who send contact requests or transmit their Curriculum Vitae is collected only with the purpose to satisfy or reply to the requests transmitted to the Law Firm and may be disclosed to third-parties solely should that be necessary for such specific purpose.
2. Navigation Data/Cookies
The computer systems and the software procedures responsible for the operation of the Website collect in the course of their normal exercise specific personal data whose transmission is implicit in the use of Internet communication protocols.
Such information is not collected to be associated with identified data subjects or Users, but which could by their very nature and through processing and association with data retained by third-parties, enable User identification.
This category of data includes IP addresses or domain names of computers used by Users connecting to the Site, addresses in URI notation (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (good end, error, etc.) and other parameters related to the operating system and computer environment of the User.
This data is used only for the purpose of obtaining anonymous statistical information on the use of the Website and to check its proper functioning, to identify anomalies and/or abuses.
As to the type of Cookies used, the specific purposes and methods of processing, please refer to the Website cookie policy which is an integral part of this privacy policy.
In any case, the possible use of Cookies – or other tracking tools – by this Website or third-party service owners used by this Website, unless otherwise stated, is intended to identify Users and to record their preferences for purposes strictly related to the provision of the service requested by the very Users.
3.2. The personal data referred to in point 3.1. may be entered voluntarily by the User, or collected automatically during the use of this Website: failure by the User to provide some of the indicated personal data may prevent this Website from providing its services.
3.3. The User undertakes responsibility for the personal data of third-parties published or shared through this Website and guarantees to have the right to disclose or disseminate them, releasing the Owner from any liability to third parties.
3.4. Other data collected may be indicated in other sections of this privacy policy or by means of information texts displayed time to time in concomitance with the data collection.
Legal Basis for Personal Data Processing
4.1. The legal basis for the processing of personal data referred to in point 3.1. is provided by Art. 6, paragraph 1, lett. b of the GDPR, as the processing performed is necessary for the provision of the services offered by the Website, or to reply to the requests of the User.
Personal Data Processing Methods
5.1. The Law Firm processes Users’ personal data while implementing the appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of personal data. The processing is carried out using computer and/or electronic tools whose organizational methods and logic are strictly related to the stated purposes.
5.2. In some cases, personal data may be disclosed, for the purposes referred to in par. 3 above, with:
- a. persons acting typically as controllers as provided by former Art. 28 of the Regulation that is: i) subjects with which it is necessary to interact for the supply of services (e.g. hosting providers), ii) or subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communications networks); the list of data controllers may be requested from the Controller.
- individuals, entities or authorities, autonomous controllers of the processing, to whom it is obligatory to communicate your personal data pursuant to legal provisions or orders of the authorities.
- c. persons authorised by the Law Firm to process personal data pursuant to former Article 29 of the Regulation necessary to carry out activities closely related to the provision of services, whether committed to confidentiality or having an adequate legal obligation of confidentiality (e.g. appointees).
5.3. Finally, the Law Firm may process the personal data of Users in the pursuit of “legitimate interests“ be they own or of third-parties, for example for the purposes of dealing with any litigation, contention, disputes, complaints, and the protection of its information systems, as well as to comply with the applicable provisions of law and regulatory requirements.
Data Retention
6.1. The personal data processed for the purposes referred to in paragraph. 3 will be retained for as long as is strictly necessary to achieve the same aims in accordance with the principles of minimisation and limitation of conservation as provided by former Art. 5 of the GDPR. In any case, the Controller will process personal data for the time necessary for contractual and legal compliance.
6.2. Further information on the period of data retention and the criteria used to determine this period may be requested in writing to the Controller.
6.3. In any case, Users may at any time request the interruption of the processing or deletion of their data, with the knowledge that such a choice could prevent the use of the services offered by the Website.
Other Data
7.1. Interaction with social networks and external platforms
Interaction services with social networks and external platforms allow interactions with social networks, or with other external platforms, directly from the pages on the Website. Any interaction and information collected by the Website are in any case subject to the User’s privacy settings related to each social network. In the event that an interaction service with a social networks is installed, it is possible that even if Users do not use the service, such may collect traffic data related to the pages where it is installed.
Twitter share button (Twitter, Inc.)
The share button on Twitter and is an interaction service with the Twitter social network, provided by Twitter, Inc.
Personal data collected: Cookies and usage data.
Place of processing: USA – Privacy Policy
Facebook share button (Facebook, Inc.)
The Facebook share button is a service of interaction with the Facebook social network, provided by Facebook, Inc.
Personal data collected: Cookies and usage data.
Place of Processing: USA – Privacy Policy
Linkedin share button (Linkedin, Inc.)
The Linkedin share button is a service of interaction with the Linkedin social network provided by Linkedin, Inc..
Personal data collected: Cookies and usage data.
Place of Processing: USA – Privacy Policy
7.2. Visualization of contents from external platforms
Content visualization services from external platforms allow you to view content hosted on external platforms directly from the pages of this Website and to interact with them.
In the case such a service is installed, it is possible that even if Users do not use the service, it will collect traffic data relating to the pages where it is installed.
Widget Video Youtube (Google Inc.)
Youtube is a video content viewing service operated by Google Inc. that allows this Website to integrate such content on its pages.
Personal data collected: Cookies and usage data.
Place of processing: USA – Privacy Policy
Widget Google Maps (Google Inc.)
Google Maps is a map viewing service operated by Google Inc. that allows this Website to integrate such content on its pages.
Personal data collected: Cookies and usage data.
Place of processing: USA – Privacy Policy
Users Rights
Pursuant to Articles 15 et seq of the Regulation, the users (those “concerned” by the processing) have the right at any time to request access to their personal data, its rectification or erasure, to restrict processing in the cases provided by Article 18 of the GDPR, as well as the right to obtain a copy of the personal data in a structured, commonly used and machine-readable format as provided by Art. 20 of the Regulation.
In the cases where provided as legal basis for processing, and according to former Art. 7 of the GDPR, Users may at any time withdraw their consent. The Users may also to lodge complaints with the competent supervisory authority (Guarantor for the Protection of Personal Data, garanteprivacy.it) pursuant to Art. 77 of the GDPR should they consider the processing of their data unlawful.
Users may exercise the right to object to the processing of their personal data pursuant to Article 21 of the GDPR. Any such request must clearly state the reasons underlying the objection. The Owner reserves the right to assess the request, which it may refuse where able to demonstrate compelling legitimate reasons to continue processing the personal data that may prevail over the Users’ interests, rights and freedoms.
Requests should be addressed in writing to the Owner.
Changes
The Law Firm reserves the right to modify or simply update the content of this privacy policy, in part or completely, also due to changes in applicable law. The Firm will inform Users of such changes as soon as they are introduced and they will be binding as soon as they are published on the Website. The Law Firm therefore invites the Users to visit this section regularly to be always updated on the data collected from the Website and how the Law firm uses it.