PRIVACY
POLICY.

privacy policy

The following information notice has been prepared pursuant to Articles 13 and 14 of the EU Regulation 2016/679 (“GDPR”) in order to enable you to understand how your personal data, as defined below, will be processed in the context of your use of the website https://www.villaeassociati.it (hereinafter, “Site”), and to learn about our privacy policy. In general, any information or personal data that you provide through the Site, or that is otherwise collected through the Site, in the context of the use of the services offered (e.g. submitting an unsolicited application, requesting information and/or legal assistance or consultancy services, both judicial and extrajudicial, hereinafter “Services”), will be processed in strict compliance with the principles of lawfulness, correctness, purpose limitation and storage, minimisation, accuracy, integrity, while ensuring maximum transparency on the procedures and security measures adopted.

TABLE OF CONTENTS

  • Data controller
  • Type of personal data being processed
  • Purpose and legal basis of the processing
  • Modalities and obligatory or optional nature of the processing
  • Sharing and transfer of personal data
  • Retention of personal data
  • Rights of the data subject
  • Complaints to the Supervisory Authority
  • Updates and amendments

data controller

VILLA e Associati S.T.A. a r.l. (from now on, “VILLA e Associati”, “We” or the “Owner”), Fiscal Code and VAT No. 02635760396, with registered office in Ravenna, Via Traversari 29, postcode 48121, is the owner of the processing of the personal data collected during the use of the Site

Type of personal data being processed

a) Contact details and identification data

As part of your use of the Site and the Services, we may process personal data which may consist of your name, contact details and/or an online identifier. In some sections of the Site (e.g. Contact Us), you may be asked to enter information such as your first name, last name, telephone number, e-mail address, etc.

(b) Data collected in connection with the submission of an application


In the “Work with us” section, you may also submit a spontaneous application for a job position, attaching your Curriculum Vitae. In this context, you may provide – in addition to common personal data – also personal data relating to you that fall under the special categories of personal data referred to in Art. 9 GDPR (i.e. “[…] data capable of revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as […] genetic data, biometric data capable of uniquely identifying a natural person, data concerning a person’s health or sex life or sexual orientation”). We urge you not to provide personal data falling within the special categories of personal data unless strictly necessary.

Without prejudice to the need to process special categories of personal data for specific job positions, Villa e Associati has no interest in receiving such information and will refrain from any processing in the event that you have provided special categories of personal data as part of your application.

(c) Data of third parties provided voluntarily by the data subject

In some parts of the Site (such as, for instance, in the ‘Contacts’ section) you may enter text messages or information that may contain personal data of other persons. With respect to such hypotheses, you act as autonomous data controller, assuming all the obligations and responsibilities of law. In this sense, you grant Villa e Associati the widest indemnity in respect of any contestation, claim, request for compensation for damage caused by processing, etc. that may be received by Villa e Associati from third parties whose personal data have been processed through your use of the functions of the Site in violation of the applicable data protection regulations. In any case, should it provide or otherwise process personal data of third parties in the use of the Site, it guarantees as of now – assuming all related responsibilities – that this particular hypothesis of processing is based on the consent of said third party or on another suitable legal basis legitimising the processing of the information in question.

d) Navigation data

This is information that is not collected in order to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, to identify anomalies and/or abuses, and is deleted immediately after processing.

e) Cookie

More information on the cookies served through the Site can be found in the dedicated information notice, available here.

Methods, purposes and legal basis of processing

Your personal data will be processed – by manual, computerised or telematic means however suitable to guarantee the security and confidentiality of such data – for the following purposes

a) Provision of Services

To provide you with the Services provided by the Site, such as – by way of example – responding to your request. In the event that you have requested legal assistance or advice, your personal data and/or those of further data subjects involved will be processed for the performance of the professional assignment received, both in and out of court.

In such circumstances, the processing is based on the need to execute a contract or pre-contractual measures within the meaning of Article 6(1)(b) GDPR. It is not compulsory to provide your personal data for this purpose, but otherwise it will not be possible to provide you with the requested Services.

b) Application management

In the event that you have submitted an application, your personal data will be processed in order to analyse the CV transmitted and to contact you again to initiate the selection process.

Also in this case, the processing is based on the need to execute a contract or pre-contractual measures within the meaning of Art. 6(1)(b) GDPR, and thus to be able to consider your application in order to initiate the selection process. It is not obligatory to provide your personal data for this purpose, but otherwise we will not be able to consider your application.

We repeat our request not to provide, unless strictly necessary, special categories of personal data relating to you (e.g. data concerning your state of health, religious beliefs, etc.). Should you nevertheless provide us with such information, Villa e Associati will refrain from processing such data unless strictly necessary for the assessment of your application within the context of a specific job position: in this case, processing will be based on the need to fulfil specific obligations and/or exercise rights in the field of labour law and social security and social protection, pursuant to art. 9(2)(b) GDPR and the pro tempore authorisation of the Garante per la protezione dei dati personali.

c) Fulfilment of legal obligations

Your personal data may be processed in order to fulfil any legal or regulatory obligations incumbent on Villa e Associati under the applicable sectoral provisions, as well as in order to comply with any further obligations incumbent on the professionals of Villa e Associati in the context of the provision of legal assistance or advice.

Processing for this purpose is therefore carried out by Villa e Associati in order to comply with any legal obligations under Article 6(1)(c) GDPR. When it provides personal data, it will in fact have to be processed in accordance with the applicable legislation, which may entail its storage and communication to the Authorities for accounting, tax or other obligations.

d) Sending promotional or informative communications of a professional or cultural nature

Your personal data may also be processed in order to send you promotional or informative communications of a professional or cultural nature in the context of the activities in which Villa e Associati is involved, by e-mail and/or through the social pages of Villa e Associati. Processing for this purpose is based on your consent in accordance with Article 6(1)(a) GDPR. You are not obliged to provide your consent for this purpose and you are free to withdraw it at any time without any consequences (except for the fact that you will no longer receive promotional or informative communications from Villa e Associati). Should you wish to object to the processing of your personal data for this purpose or revoke your consent for such processing carried out by the means indicated herein, you may do so at any time by contacting Villa e Associati at the contact details indicated in this Privacy Policy, without prejudice to the lawfulness of the processing based on your

e) Safety and security audits

Finally, your personal data may be processed as part of internal verification activities aimed at preventing or detecting any abuse in the use of the Site and ensuring the security of the Services provided, on the basis of the legitimate interest of Villa e Associati pursuant to Article 6(1)(f) GDPR aimed at adequately protecting its reasons where necessary.

Sharing and transfer of personal data

We may share your personal data with individuals expressly authorised by us, who are bound in this respect by specific confidentiality agreements.

In addition, your data may be shared with companies, entities, or credit institutions that provide us with specific accounting or administrative services, as well as with consultants, accountants, banking and insurance institutions, or other lawyers that provide functional services to the Services.

It is understood that your personal data may also be communicated to persons, entities or authorities in order to comply with specific legal provisions or orders from the competent authorities.

As a general rule, we do not intend to transfer your personal data, but in the event that it is necessary to share your personal data with one of the above entities outside the European Economic Area, we assure you that the transfer will take place with appropriate safeguards in place (including, depending on the circumstances, adequacy decisions, the use of the Standard Contractual Clauses approved by the European Commission and/or any additional safeguards).

Retention of personal data

The personal data processed for the purpose of providing Services, including therefore the personal data of those who make use of the legal assistance or consulting services of Studio Legale Villa (both judicial and extrajudicial), are retained for the entire duration of the contract or mandate for the professional assignment received and, subsequently, for the time in which Studio Legale Villa and/or the professionals involved in the activity are subject to specific retention obligations provided for by sector regulations (e.g. for tax purposes, etc.) or other legal or regulatory obligations. This is without prejudice to further retention periods provided for by applicable regulations (e.g. art. 2946 of the Italian civil code) in order to protect Studio Legale Villa with regard to possible civil or criminal actions or claims for the Services rendered.

Personal data processed for the purpose of Application Management shall be kept for 12 months from receipt and subsequently deleted.

Personal data processed for the purpose of Fulfillment of legal obligations will be retained by Studio Legale Villa for the period provided for by specific legal obligations or applicable law.

For the purpose of sending promotional or informative communications of a professional or cultural nature, your personal data will be kept until you revoke your consent or until you wish to object to the processing for that purpose.
 
Personal data processed for the purpose of Checks for security and protection will be processed for the time strictly necessary to achieve this purpose, and in any case for no longer than 12 months.

Rights of the data subject

You have the right to ask us at any time:

  • access to your personal data;
    rectification or erasure of your personal data;
  • to object to the processing of your personal data in the cases provided for by Article 21 GDPR;
  • to request the restriction of the processing of your personal data in the cases provided for by Article 18 GDPR;
  • to obtain in a structured, commonly used and machine-readable format your personal data in the cases provided for by Article 20 GDPR.

To exercise any of the above rights, you may write to us at info@studiolegalevilla.eu

complaint to the supervisory authority

In any case, you always have the right to lodge a complaint with the competent supervisory authority (Garante per la Protezione dei Dati Personali), in accordance with Article 77 GDPR, if you believe that the processing of your personal data is contrary to the legislation in force.

We also reiterate that you have the right to withdraw your consent at any time, in cases where consent is the legal basis for the processing. You may withdraw your consent without any special formalities by writing to the address given above.

This Privacy Policy is in force from 30 October 2023. Villa e Associati reserves the right to modify or simply update its content, in part or completely, also due to changes in the applicable legislation. Villa e Associati invites you to regularly visit this section to become acquainted with the most recent and updated version of the Privacy Policy in order to be always updated on the data collected and on the use made of them.


License

The icons in this information sheet were developed by the Maastricht European Centre on Privacy and Cybersecurity – ECPC, whose graphic design was one of the winners of the ‘Informative Clarity’ contest promoted by the Garante per la Protezione dei Dati Personali. Use of the icons is subject to the terms of the CC BY 4.0 licence.

Updates and possible changes

Last updated: 01/04/2024

Scroll to Top