Privacy Notice — Article 13 GDPR
Information provided under Article 13 of Regulation (EU) 2016/679 (the General Data Protection Regulation, or GDPR), in connection with personal data obtained by the firm when you entrust it with a matter.
Data Controller and Data Protection Contact
The data controller is Ricciardi Cipollini Leccese – Studio Legale Associato, Piazza Verdi 19, 19121 La Spezia (SP), Italy, tax identification and VAT number 01289940114, represented by Attorneys Fabrizio Ricciardi (Italian tax code RCCFRZ69S08I138I), Claudio Cipollini (CPLCLD81P13E463M) and Massimiliano Leccese (LCCMSM81A17E625Q), with their professional address at the firm. The controller may be contacted by certified email (PEC) at claudio.cipollini@pec.rclex.it or by email at studio@rclex.it.
Purposes of Processing
Personal data are processed to perform the professional engagement properly and fully, including both litigation and non-litigation services. They are also processed to comply with tax and accounting requirements and other legal obligations applicable to the firm’s professionals. Data may be processed in paper and electronic files, including on portable devices, using methods strictly necessary for these purposes.
Legal Bases for Processing
Processing is lawful where it is necessary to perform a professional mandate or contract to which you are a party, or to take pre-contractual steps at your request; to comply with legal obligations binding on the professionals; or where it is based on your express consent, including for newsletters and other informational communications not strictly related to the professional engagement.
Consequences of Not Providing Data
Where personal data are required to perform a contract or meet a legal obligation, including accounting and tax recordkeeping requirements, failure to provide them will prevent the contractual relationship from being established.
Retention of Personal Data
Personal data processed for the purposes described above will be retained for the duration of the contract and thereafter for as long as the professionals are required to retain them under applicable tax laws or other statutory or regulatory obligations.
Recipients of Personal Data
Personal data may be disclosed to: (1) advisers, accountants or other legal professionals providing services relevant to the purposes described above; (2) banking and insurance institutions providing related services; (3) persons or entities processing data in compliance with specific legal obligations; and (4) judicial or administrative authorities where required by law.
Disclosure, Profiling and Automated Decision-Making
Your personal data are not subject to public dissemination or decisions based solely on automated processing, including profiling.
Your Rights
Subject to the conditions and exceptions provided by the GDPR, you may request access to your personal data and related information, rectification of inaccurate data, completion of incomplete data, erasure under Article 17 and restriction of processing under Article 18.
Where processing is based on consent or a contract and carried out by automated means, you may request your data in a structured, machine-readable format and transmit them to another controller (data portability).
You may object to processing where grounds relating to your particular situation apply. You may withdraw consent at any time where processing is based on consent, including in respect of ordinary personal data or special categories of personal data. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
You may lodge a complaint with a supervisory authority, including the Italian Data Protection Authority (Garante per la protezione dei dati personali): www.garanteprivacy.it.