INFORMATION ON THE PROCESSING OF PERSONAL DATA

Avvocati.net (hereinafter also referred to as the Data Controller) provides the Data Subject or User, i.e. the person to whom the personal data refer, with the following information pursuant to Article 13 of EU Regulation No. 2016/679 of 27 April 2016 (hereinafter referred to as the GDPR), concerning the protection of natural persons with regard to the processing of personal data. This policy is intended to describe the characteristics of the processing carried out in relation to the personal data provided by the Data Subject and the measures taken to protect their rights.

Data controller

The data controller is Avvocati.net Società tra Avvocati S.R.L. (VAT No. 18030541009).

  • Registered office: Viale Liegi n. 7 – 00198 Rome

  • Operational headquarters: Viale Luigi Majno n. 28 – 20129 Milan

Email address: privacy@avvocati.net

Data subject to processing

The Data Controller essentially collects the following personal data:

  • User identification data, such as IP addresses and computer domain names

  • Data relating to the User’s use of the Website

  • Data provided voluntarily by the User (identifying information) to access certain services offered through the Website, for which reference should be made to the specific information notices in the relevant sections

  • Cookies. These consist of text files that are automatically generated on the User’s computer when visiting certain pages of the Website. Some of these files (session cookies) are automatically deleted when the browser is closed. Another type of cookie, however, is recorded and stored on the User’s computer (for example, to automate the login procedure to the reserved area, the User may choose to have their User ID and password stored in one of these files).

  • Contact details, provided voluntarily by the User when filling in the contact form published on the Website.

For more information about cookies, their use and how to disable them, please refer to the cookie policy published on the website’s home page.

Purpose of processing and retention period

Personal data will be processed for the following purposes:

  1. To manage the correct use of the Website

  2. To evaluate, in statistical form, the use of the Website by users.

  3. Direct and profiled marketing using third-party cookies.

  4. To ascertain any illegal acts committed by users to the detriment of third parties or the Data Controller.

  5. To comply with European and national legislation, as well as the provisions of the Data Protection Authority.

  6. Responding to a request from the Data Subject.

The data processed for the Purposes set out in points a), b), c), d) and e) will be stored as specified in the relevant information notices (e.g. cookie policy).

The data processed for the Purpose referred to in letter f) will be stored for a maximum period of 12 months from the last contact.

Lawfulness of processing

The processing is lawful because it is based on the following legal grounds:

  • legitimate interest of the Data Controller (to manage the correct use of the website and ascertain any illegal acts committed by users to the detriment of third parties or the Data Controller, to respond to a request from the Data Subject).

  • Consent of the Data Subject expressed during the browsing experience (e.g. non-essential cookies).

Methods of processing

Personal data is processed for the purposes indicated in this policy on electronic media.

Mandatory or optional nature of data provision

If the User prefers not to receive cookies, they can prevent their transmission by the website by configuring their Internet browser accordingly.

In some cases, however, the use of certain parts of the Website may be conditional upon the storage of cookies on the User’s computer. Further information is published in the relevant policy.

The provision of data is optional and refusal to provide such data will make it impossible for the Data Controller to respond to the Data Subject’s request, who will not be able to successfully complete the contact request by filling in the form published on the website.

Categories of subjects to whom personal data may be disclosed

The processing of personal data provided to us may be carried out, in accordance with the principle of strict necessity of processing:

  • by the Data Controller’s employees, who act and process the data under the authority and instructions of the Data Controller, in accordance with Article 29 of the GDPR, or by employees designated by the Data Controller, in accordance with Article 2 quaterdecies of Legislative Decree No. 101/2018.

  • By natural or legal persons whose right to access the personal data of the Data Subject is recognised by provisions of European Union law or Italian law, such as, for example, competent authorities and/or supervisory bodies for the fulfilment of legal obligations, and public administrations for their institutional purposes.

  • By natural or legal persons used by the Data Controller to carry out activities instrumental to the achievement of the Purposes (such as software providers, cloud partners, data centres). Third parties who access the data will do so in compliance with current legislation on the protection of personal data and the instructions given by the Data Controller and will in any case be appointed by the Data Controller as external Data Processors.

A list of Data Processors is available at the Data Controller’s headquarters.

Data dissemination

The data will not be disclosed under any circumstances.

Rights of the data subject

The GDPR guarantees specific rights to the data subject. For each processing operation, the data subject may exercise the following rights:

  • Right of access: you have the right to obtain a copy of your personal data that is being processed.

  • Right to rectification: you have the right to rectify your personal data stored by the Data Controller if it is not up to date or correct.

  • Right to object to the processing of their personal data for commercial purposes: they may request that the Data Controller cease sending commercial communications at any time.

  • Right to object to decisions based on exclusively automated processes: you may request not to be the recipient of decisions made on the basis of exclusively automated processes, including profiling.

  • Right to withdraw consent: you have the right to withdraw your consent to a specific processing operation at any time.

  • Right to contact the Data Protection Authority: you have the right to contact the Data Protection Authority if you have any doubts about the processing of your personal data by the Data Controller.

The data subject may also exercise the following rights in certain circumstances:

  • Right to erasure: you may request that the Data Controller erase your personal data if the purposes of the processing have ceased to exist and there are no legitimate interests or legal provisions requiring its continuation.

  • Right to object to processing: you may request that the Data Controller cease to carry out a specific processing operation on your personal data.

  • Right to restrict processing: you have the right to request that the Data Controller restrict the processing of your personal data.

  • Right to data portability: you have the right to obtain a copy of the data in a structured, commonly used and machine-readable format from another Data Controller.

To exercise any of the above rights, the Data Subject may send an email or write to the following address, specifying the request and providing the Data Controller with the information necessary to correctly identify the sender (also attaching a copy of their identity document):  

  • by e-mail: privacy@avvocati.net

  • by post: Avvocati.net STA SRL viale Liegi n. 7 -00198 Rome.

The Data Controller will respond within one month. If for any reason the Data Controller is unable to respond, it will provide a detailed explanation of why it cannot comply with the request.