LEGALLAB® Associazione Professionale (hereinafter “LEGALLAB”) with registered office in Via Museo, 31, 39100 Bolzano, BZ, Italy (tel: +39 0471 324932, mail: firstname.lastname@example.org, VAT no. IT02995140213), as data controller regarding the processing of personal data pursuant to the Regulation (EU) 679/2016 (hereinafter “GDPR”) and the Italian legislative decree no. 196/2003, as amended by legislative decree no. 101/2018 (hereinafter “Privacy Code”; hereinafter GDPR and Privacy Code and are collectively referred to as “Applicable Law”) recognizes the importance of personal data protection and considers that preserving the confidentiality of your personal data is one of the main objectives of its activity.
The present privacy statement is intended for the website www.legallab.it (“Website”) whilst it does not apply to other websites that could potentially be accessed by clicking external links; and is to be construed as an information notice pursuant to Article 13 GDPR, intended for those who interact with the Website.
LEGALLAB informs you that processing of your data will be carried out in accordance with the principles of, lawfulness, fairness, transparency, accuracy, purpose and storage limitations, data minimization, integrity and confidentiality. Your personal data will be processed in accordance with the legislative provisions of the Applicable Law and of the confidentiality obligations included therein.
1. DATA CONTROLLER
Pursuant to Applicable Law, the data controller of the processing activities is LEGALLAB as defined above.
2. PERSONAL DATA SUBJECT TO PROCESSING
“Persona Data” means any information relating to an identified or identifiable natural person, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, mental, economic, cultural or social identity of that natural person.
By means of the Website, the following Personal Data is collected:
a) Browsing Data
The computer systems and software procedures used to operate the Website collect some Personal Data, the transmission of which is an integral part of Internet communication protocols. This information is not collected to be associated with you but, by its very nature, it may allow you to be identified by processing and associating it with data held by third parties. Among collected Personal Data there are IP addresses or domain names of the devices used by you to connect to the Website, the URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file received as a reply, the numeric code indicating the status of the reply given by the server (successful, error, etc.) and other parameters regarding your operating system and device environment.
This data is used exclusively for the purposes of obtaining anonymous statistics on the use and proper functioning of the Website to control its correct functioning, to enable LEGALLAB to correctly provide the various functionalities to you, as well as for security reasons. This Personal Data may also be used to ascertain any liability in cases of alleged computer crimes against the Website or against third parties and they will be deleted after 7 days.
b) Data provided on a voluntarily basis
By means of the Website you may voluntarily provide Personal data such as your name, e-mail address for subscribing the newsletter service or to send a job application via the “Recruitment” form. LEGALLAB will process these data in accordance with the Applicable Law and on the presumption that they refer to you or to third parties who have authorized you to provide them pursuant to an appropriate legal basis which legitimize the processing at stake. In this case, you act as an independent data controller, assuming all relevant obligations and responsibilities according to the Applicable Law. In this regard, you hence waive, in the full sense of the term, the right to all disputes, claims, claims for damages due to processing etc., which may be submitted to LEGALLAB of the said third party whose Personal Data have been processed through your use of the Website in breach of the Applicable Law.
c) Cookies and similar technologies
LEGALLAB collects Personal Data using cookies. You may find further information on the use of cookie and similar technologies here.
3. PURPOSES OF THE PROCESSING AND VOLUNTARY OR OBLIGATORY NATURE OF PROVIDING THE DATA
The Personal Data that you provide by using the Website will be processed by LEGALLAB for the following purposes:
a) Purposes related to the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (e.g., contact request the “Recruitment” or “Newsletter” section);
b) Purposes related to research/statistical analyses on aggregated or anonymous data, without the possibility of identifying the data subject, aimed at measuring the functioning of the Website, traffic, usability, and interest;
c) Purposes related to the compliance with a legal obligation to which the controller is subject;
d) Purposes necessary for the establishment, exercise or defense of legal claims or whenever courts are acting in their judicial capacity.
The legal basis for the processing of Personal Data for the purposes referred to in point a) is the provision of a service or the response to a request that does not require you prior consent under the Applicable Law. The purpose referred to in point b) does not imply the processing of Personal Data, whilst the processing for the purposes referred to in point c) and d) constitutes a legitimate processing of Personal Data within the meaning of the Applicable Law because, once the Personal Data have been provided, the processing is indeed necessary to comply with a legal obligation to which LEGALLAB is subject or to defend rights of LEGALLAB during legal proceedings.
Providing your Personal Data for the above-mentioned purposes is voluntary, however, any refusal to provide such data may not allow LEGALLAB to provide certain services.
Your Personal Data may be disclosed, in close relation to the purposes specified above in section 3, only to:
a) employees, collaborators of LEGALLAB, administrative or accounting personnel, IT system administrators, who, acting under the direct authority of the Data Controller, are appointed as authorized persons pursuant to Articles 29 GDPR and 2-quaterdecies Privacy Code (and as such, they have an adequate legal obligation of confidentiality);
b) service providers, the platform operator hosting the Site, internet service providers depending on the processing, which have been appointed as data processors pursuant to Art. 28 GDPR, and receive adequate operational instructions in this regard (A list of the data processors can be obtained by sending a request to email@example.com);
c) law enforcement agencies and public authorities when so required by the Applicable Law.
5. DATA TRANSFER
Some of your Personal Data are transferred to Recipients who may be established outside the European Economic Area. LEGALLAB ensures that the processing of Personal Data by such Recipients is carried out pursuant to the Applicable Law. In fact, the transfer of Personal Data is based alternatively on an adequacy decision or the Standard Contractual Clauses issued by the European Commission. Further details and the signed agreements may be requested at firstname.lastname@example.org.
6. DATA RETENTION
LEGALLAB will process your Personal Data only for the duration necessary to achieve the purposes described in section 3 (e.g., LEGALLAB will process your Personal Data for newsletter service until you will decide to unsubscribe, or, processes data submitted trough the “Recruitment” form only for the duration necessary for the recruitment or evaluation of applicants and in any case for a period no more than six months). Apart from the above, LEGALLAB will retain your Personal Data for a period of time necessary or permitted to comply with the Applicable Law (e.g. according to Art. 2947 of the Italian Civil Code). Further information regarding the period of retention of Personal Data and the criteria used to determine such period may be requested by contacting email@example.com.
7. YOUR RIGHTS
Pursuant to and to the extent allowed by the Applicable Law, you have the right, at any time, to request to LEGALLAB access to, rectification, erasure, restriction of the processing concerning your Personal Data or to object to relevant processing activity and to receive in a structured, commonly used and machine-readable format the Personal Data concerning you.
Requests to exercise your rights can be sent to the following address: firstname.lastname@example.org.
In any case, pursuant to the Applicable Law, you have the right to lodge a complaint with the relevant supervisory authority (for Italy, the Garante per la Protezione dei Dati Personali) if you believe that the processing of your Personal Data is against the Applicable Law.