Informativa Clienti

INFORMATIVA CLIENTI – SITO WEB

ai sensi dell’art.13 del Regolamento UE 2016/679

Regolamento generale sulla protezione dei dati

Please find herewith below a brief description of the processing of your personal data carried out by the law firm Tonucci & Partners, acting as data controller. The processing will be carried out in compliance with Regulation (EU) 2016/679 General Data Protection Regulation (hereinafter the “GDPR”) and the Legislative Decree n. 196 of 30 June 2003 “Personal data protection Code” (the “Code”).

Please note that the term “personal data” means “any information relating to an identified or identifiable natural person” and the term “processing” means “any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction”. Please refer to the following full text of the privacy statement pursuant to art. 13 of the GDPR for further information.

*

1 – Identity and contact details of the Data Controller

Tonucci & Partners, with registered office in Via Principessa Clotilde n. 7 – 00196 Roma, VAT and fiscal code 0500841196 (hereinafter the “Firm” or the “Data Controller”), acts as data controller: Please find herewith below the Data Controller’s contact details:

Studio legale Tonucci & Partners

Via Principessa Clotilde 7

00196 Roma

Tel. 06362271

Fax: 063235161

E-mail: info@tonucci.com

PEC: tonucci.partners.pec@legalmail.it

2 – Purposes and legal basis for processing

Your personal data are processed, in compliance with the abovementioned regulations, for the following purposes:

        1. compliance with legal obligations deriving from the applicable law, regulations and/or EU legislation (e.g. tax, invoice accounting, insurance, anti-money laundering, anti-terrorism, rules of practice, etc.) related to the judicial, extrajudicial and/or professional assignment conferred (i.e. exercise or defence of a legal claim / carrying out defensive investigations);
        2. performance of the judicial, extrajudicial and/or professional assignment conferred, compliance with the related obligations and exercise of the rights arising from the assignment (including the quantification and payment of fees);
        3. exercise and defence of the Firm’s rights and claims arising from the assignment conferred, in or out of court.

The provision of your data for the aforementioned purposes is mandatory and failure to provide them will make it impossible for the Firm to fulfill its obligations arising from our contractual relationship and therefore to establish and/or preserve said relationship. The personal data provided may include the contact details of physical persons working for you, both as employees and autonomously (i.e. name, surname, corporate e-mail address, phone number). The Data Controller will not use these data for other purposes or with other processing method than the ones specified in this notice. Your data can be processed for the purposes and in the manner described in this privacy notice without your consent on the basis of:

  • the execution of the agreement between the parties and the connected legal obligations (pursuant to art. 6, par. 1, lett. b) and c) of the GDPR);
  • the Firm’s legitimate interest to the exercise and defence of the Firm’s rights and claims, in and out of court (pursuant to art. 6, par. 1, lett. f) of the GDPR).

    • Furthermore, should you grant the Firm with adequate and specific consent, your data (limited to first and last name and e-mail address) will be used to:

          1. send you informative communications and newsletters via e-mail regarding the main judicial and legislative news as well as conventions, webinars and events regarding the areas of practices of the Firm and its professionals.

    The provision of your data for such purpose is optional and failure to provide them will have no consequences. The processing of your data for this purpose will require your consent (pursuant to art. 6, par. 1, letter a) of the GDPR). You may at any time withdraw your consent by (i) clicking on the specific link available in all the e-mails; (ii) sending a notice to the e-mail addresses indicated below. Please note that the Firm may in any case use your e-mail address provided in the context of the performance of the assignment conferred, in compliance with the data protection regulations (i.e. article 130, par. 4 of the Code) to keep you updated on services similar to those already supplied, provided that you have always the chance of objecting to the sending of such communications as of now and in any subsequent communication, sending a notice to the e-mail addresses indicated in paragraph 8 or clicking on the specific link available in all the e-mails.

    3 – Special categories of personal data and personal data relating to criminal convictions and offences

    The personal data provided for purpose a) and b) may include “special categories of personal data” (i.e. data revealing “racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation”) or personal data relating to criminal convictions and offences relating to your person: either case your data can be processed without your consent on the basis of, as regards special categories of personal data, art. 9, par. 2, lett. f) of the GDPR and of “Regole deontologiche relative ai trattamenti di dati personali effettuati per svolgere investigazioni difensive o per fare valere o difendere un diritto in sede giudiziaria pubblicate ai sensi dell’art. 20, comma 4, del d.lgs. 10 agosto 2018, n. 101 – 19 dicembre 2018” (“Rules of conduct”); while, as regards personal data relating to criminal convictions and offences, pursuant to the combined provisions of articles 6, par.1, lett. f) and 10 of the GDPR and of the Rules of conduct, as well as in the cases provided for by art. 2 octies par. 3, let. b) and e) of the Code.

    4 – Processing methods

    Your data will be processed both on paper and electronically, in compliance with the GDPR and the Code, of the applicable professional regulations and rules of conduct and, in any event, in such a manner as to ensure their security and confidentiality.

    5 – Data processing recipients

    For the purposes listed at paragraph 2, your data may come to the knowledge of the following third parties: (i) legal, tax and accounting advisors; (ii) public entities in compliance with legal obliations (e.g. the Revenue Agency, for the purpose of the fiscal registration of the agreements, the Territory Office, for the purpose of the transcription of the agreement and its invoicing; the Civil Status Office, for the related formalities; the Business Register, for the corporate operations); (iii) credit institutions; (iv) companies supporting the Firm in managing the relationship with the clients (i.e. IT systems and management software providers); (v) the company entrusted with the management Firm’s IT systems; (vi) companies that provide Tonucci & Partners with services strictly related to our marketing activites (e.g. providers of information communication platforms). Where appropriate, these suppliers have been appointed by the Firm as data processors according to art. 28 GDPR. A complete list of the data processors can be obtained by sending an e-mail to info@tonucci.com.

    Your data may come to knowledge of the persons in charge of the processing operating within the Firm within their respective roles, assigned tasks and areas of competence and according to the instructions provided. Your data will not be disseminated.

    6 – Transmission of data outside the EU

    Within the purposes listed above, your personal data will not be transferred to countries not belonging to the European Union.

    7 – Storage period

    Your data will be stored for as long as it is necessary to fulfill the purposes listed at paragraph 2 of this Privacy Notice and in compliance with the consents granted, if any. Thereafter, the data will be destroyed or anonymized.

    In particular, data will be stored in accordance with the principles indicated in the tab below.

    Purpose

    Storage period

    (a) e (b)

    Your data will be stored for the time necessary to manage the professional assignment conferred and to comply with legal obligations. Regardless, your data will be stored for no more than 10 years from the termination of our professional relationship.

    (c)

    Your data will be stored for the time necessary to the defence of the Firm’s rights in or out of court.

    (d)

    Your personal data will be processed throughout the period of your subscription to the newsletter service, in compliance with the consents granted and without prejudice to their right to withdraw their consent at any time.
    8 – Rights of the data subjects

    You may at any time exercise the rights provided for by articles 15 to 22 of the GDPR, such as, in brief: (i) obtaining confirmation as to whether or not personal data concerning you is being processed; (ii) obtaining access to your personal data and to the information set out in Article 15 of the GDPR; (iii) obtaining the rectification of the inaccurate personal data that concern you without undue delay or the supplementing of incomplete personal data; (iv) obtaining the erasure of the personal data that concern you without undue delay; (v) obtaining the restriction of processing the personal data that concern you; (vi) being informed of any rectifications or erasures or restrictions of processing in relation to the personal data that concern you; (vii) receiving in a structured, commonly used and machine-readable format the personal data that concern you. Furthermore, in compliance with article 21 of the GDPR, you may object at any time, on grounds associated with your specific situation, to the processing of the personal data that concern you carried out for direct marketing purposes and for the purpose of the legitimate interest of the Data Controller (pursuant to art. 6, par. 1, lett. f) of the GDPR). You can find the full list of your rights on www.garanteprivacy.it.

    The exercise of the above mentioned rights is not subject to any form restriction and is free of charge. The data subjects may exercise their rights at any time, specifying the subject of the request and the right they intend to exercise, in the following ways:

    1. by sending a notice to the following addresses: info@tonucci.com o tonucci.partners.pec@legalmail.it. 
    2. ii. by writing by mail to: Studio legale Tonucci & Partners, con sede in Via Principessa Clotilde n. 7 – 00196 Roma

    Should a right provided under the GDPR be exercised, the Data Controller reserves the right to verify the identity of the User by requesting to send a copy of an identity document attesting the legitimacy of the request. Once the identity has been confirmed, the copy received will be immediately deleted.

    9 – Complaint before the Data Protection Authority

    Should you consider the processing of your data infringes the GDPR, you may in any event lodge a complaint before the Italian Data Protection Authority (www.garanteprivacy.it), or to the Data Protection Authority of the Member State of your habitual residence, place of work or place of the alleged infringement.

    10 – Data Protection Officer (DPO)

    You can contact the DPO appointed by the Firm pursuant to art. 37 of the GDPR at dpo@tonucci.com.

    Tonucci & Partners

    • Tonucci & Partners