The controller of personal data collected through our Website is Studio Legale Garbarino Vergani.
“Personal data” in this Privacy Notice has the same meaning as in the EU General Data Protection Regulation 2016/679/EU (GDPR). Essentially, it means information which is connected to a living individual who can be identified from that information, either by itself or when combined with other data likely to come into our possession. Personal data can include information collected by certain cookies or tracking technologies if it builds up a profile of you.
Use of personal Information
We collect and use personal data in order to carry out a business which provides legal services. Any other activities and processing which we carry out is to support this primary aim. Our purposes and lawful grounds for processing your personal data vary, depending on our relationship with you and on the activity in question.
We will only keep your personal data for as long as necessary to fulfil the purposes for which we collected and continue to process it, and to satisfy any legal, accounting or reporting requirements.
Where applicable we respect your data protection rights, including to request access, rectification, restriction, deletion or “porting” of your data, and to object to our use of your data, including for marketing. We do not make decisions about you based on electronic profiling. You also have the right to complain to the applicable data protection Supervisory Authority, but please contact us first so that we can address your concerns.
We respect the privacy of all our Website visitors and you do not need to provide us with any personal information in order to use the majority of the features of the Website. However, if you choose to contact us or to subscribe to our newsletter bulletins or receive details of our events then it will be necessary for you to provide us with some personal information.
We will use the information provided to respond to your enquiries or requests, to keep you updated about legal topics, and other firm-related announcements or events. If you no longer wish to receive updates then please let us know by email at the address below or unsubscribe via the subscription form on this site.
Sharing of Personal Data
We will not share any of your data, or give it to any third party, other than our contractors for the purpose of providing services to us, or on our behalf, and they will all be required to ensure that they comply with the security requirements of the data protection laws. Otherwise we will only share your data if it is a legal or regulatory requirement such as a Court order.
Links to Third Party Websites
Rectification and Access to your Data
Under the data protection laws you are entitled to a copy of your personal data and to have it corrected if it is inaccurate. To request a copy or to update your information, please contact us (details below).
If you are based in the EEA you have a number of rights under the GDPR. These rights apply to any processing carried out by our firm.
Please see more information below on what we will require from you before we can respond to such requests.
- Right to object to direct marketing
You have the right to ask us not to process your personal data for marketing purposes, including profiling (eg. tracking your usage of our Website) to the extent that it is related to direct marketing. Within a reasonable time after receipt and consideration of your objection we will no longer process your personal data for direct marketing purposes. You can exercise your right to prevent such processing by ticking certain boxes on the forms we use to collect your personal data, or by contacting us at any time.
- Access to Information
The GDPR gives you the right to find out whether we are processing your personal data and, where that is the case, to receive a copy of the personal data we process and information on:
- why we are processing it;
- the categories of personal data we process about you;
- the recipients or categories of recipient to whom the personal data has been or will be disclosed;
- where possible, how long we plan to keep your personal data or the criteria we use to determine that period;
- information on your rights under the GDPR;
- information on where we received your personal data from if we did not receive it directly from you, and
- if we transfer your personal data outside of the EEA, details of the appropriate safeguards we have used to protect your personal data and uphold your personal data protection rights.
We will not charge you for complying with your request and providing you with a first copy. Any further copies may be subject to a reasonable administrative fee. Where your personal data is inseparable from the personal data of others, we reserve the right to redact or withhold it if it will infringe the rights of those third parties.
- The right to withdraw your consent to the processing of your personal data
If we process your personal data on the grounds of your consent, you have the right to withdraw your consent at any time. This will not affect the legality of our processing of your personal data up until the point at which you withdraw your consent. Please also note that we may still need to process your personal data on other grounds, for example to fulfil a contract with you or as required by law.
- The right to object to processing of your personal data
You have the right to object to our processing of your personal data if we are using the lawful grounds ‘legitimate interest’ or that the processing is in the public interest. When we receive your objection we will assess our legal grounds for processing and will stop processing the personal data if we cannot demonstrate compelling legitimate grounds to continue processing the personal data.
- The right to request the restriction of your personal data
You have the right to ask us to restrict our processing of (ie. stop using) your personal data if you think that it is inaccurate, that we are processing it illegally, or that we no longer need it for the purposes for which it was collected. While we consider your request we will stop processing your personal data within a reasonable time from the date we receive your request. We will notify you of our decision and any justifications for continuing to process your personal data as soon as we can.
- The right to request amendment or erasure of your personal data
You have the right to request the amendment of your personal data at any time if it is inaccurate. If it is incomplete, you have the right to have the information completed, taking into account the purposes of processing. You also have the right to require us to delete your personal data as soon as possible where one of the following applies:
- the personal data is no longer necessary for the purposes for which they were collected or otherwise processed;
- you withdraw your consent to us processing your personal data and we have no other legal grounds for processing it;
- the personal data has been unlawfully processed;
- the personal data must be erased for compliance with an Italian or EU legal obligation on us;
- the personal data relates to a child under 18.
- The right to personal data portability
You have the right to receive personal data which you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit those personal data to another personal data controller, if we are processing it on the grounds that you have consented to that processing or because it was necessary in order to perform a contract with you, and if we have no other legal bases for processing it. This will not apply to most of our processing of your personal data, but we mention it for completeness.
- The right to complain to the Supervisory Authority
If you feel that we have processed your personal data unfairly or unlawfully, you have the right to complain about us to the relevant Supervisory Authority, although please contact us first so that we can put things right.
How to exercise your rights
You can exercise your rights at any time by contacting us at email@example.com.
Please include in your email:
- A clear statement on which rights you are seeking to enforce;
- A full description of the information or type of information that you are writing about; and
- Details which will confirm your identity, such as a scan of your passport or identity card.
This is so that we can keep your personal data secure and respond to you as quickly as possible. If you are asking for a large range of personal data we may ask you to be more specific, so that we can manage your request as quickly and efficiently as possible.
No fee usually required
You will not usually have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
Time limit to respond
We aim to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
How to contact us
To contact us about anything to do with your personal data and data protection, please use the following details:
Postal address: Studio Legale Garbarino Vergani, Salita S. Caterina 4/11, 16123 Genoa, Italy.