Privacy Policy

Privacy policy on personal data protection

This privacy policy (hereinafter referred to as “Privacy Policy”) referring to the brbstudiolegale.it website (hereinafter referred to as “Site”), managed by BRB Law Firm (hereinafter referred to as “Studio BRB”), describes the methods of processing personal data (hereinafter referred to as “Data”) provided by Users registered or not registered on the Website. In particular, the policy aims to provide Users with information about the data controller, the personal information collected in the Site, the purposes and methods for which such information is processed, the third parties involved in the processing, the possible transfer abroad of the data, the security measures taken to protect the collected data and the ways in which the User can verify the processing of data concerning him and exercise the rights granted to him by EU Regulation n. 2016/679 (hereinafter, “GDPR”) and other applicable laws.

Therefore, we invite you to read this Privacy Policy carefully, in order to better understand how your personal data is processed and what your rights are as provided for by the GDPR.

Data controller

The Data Controller is the Law Firm BRB, with registered office in Bologna (Italy), via Dal Luzzo n. 3, 40125;

Owner’s email address: info@brbstudiolegale.it

The Data Controller processes personal data in compliance with the principles of lawfulness, correctness, transparency, limitation of purposes and storage, minimization of data, accuracy, integrity and confidentiality.

Type of data collected and methods of processing

Different types of personal data are processed through the Site:

1 - Personal data voluntarily provided by the user

The term “personal data” shall have the meaning set out in the applicable legislation concerning the protection of personal data and shall indicate any information relating to you that could be used, directly or indirectly, to identify you.

The Studio BRB collects and processes personal data voluntarily provided by Users when interacting with the features and services of the Site, for example, when requesting for information. In the sections of the Site where the User’s personal data is collected, specific policies drawn up pursuant to Article 13 of the GDPR and applicable laws are published.

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this Site for the transmission of the CV or for the sending of requests for “contacts” involves the subsequent acquisition of the sender’s address, necessary to respond to any requests, as well as any other personal data entered in the message. In particular, Users who intend to submit their curriculum vitae via the Site are invited to pay due attention to what is stated in this policy. The Studio BRB informs Users that the Regulation and the Privacy Code provide that sensitive data [i.e., personal data from which elements about race or religion, political opinions, religious or philosophical beliefs, or membership of trade unions, as well as biometric data, genetic data, data on the health or sexual life or sexual orientation of the person] can be legitimately processed only with the consent of the data subject. Therefore, the Studio BRB urges Users not to include any sensitive data in their CV.

2 - Data on navigation

Technical data

When visiting and consulting the Site, the Studio BRB generally collects navigation data through cookies or other tracking technologies. The technology platform through which the Site is made available to the User automatically records certain browsing data – the transmission of which is implicit in the use of Internet communication protocols – such as, for example, name of the Internet Access Provider, Referral Site, pages visited, date and duration of visit, etc. This information allows access to the Site as well as the use of certain services and can be used anonymously and in aggregate form for statistical purposes and to verify the proper functioning of the Site. Studio BRB uses them to facilitate access to online services, authenticate the User if it is a previously registered User, for the purposes of studying the choices of Users in order to make the initiatives more responsive to the needs of its customers. Navigation data shall be stored for no more than 7 days and shall be deleted immediately after aggregation (excluding specific needs of court proceedings).

Cookie

The information related to the cookies used on the Site can be found in the Cookie policy at the bottom.

Purpose of the processing

Your personal data is processed:

A) without your express consent for the following Service Purposes:

operational management of navigation on the Site;
managing the security of the Site;
compliance with legal and regulatory obligations;
exercise of rights in court.
In the cases indicated above, the legal basis for the processing of your personal data consists in providing the service you have specifically requested or in fulfilling a legal obligation or protecting our legitimate interest.

B) Only after your specific and distinct consent for the following Other Purposes:

sending of the Studio BRB newsletter, unless the Users wish otherwise.

The legal basis for these purposes is to provide the service you specifically requested.

Duration of the processing

The Data are processed and stored for the time required by the purposes for which they were collected.

Therefore:

Personal Data collected for purposes related to the provision of the service that you have specifically requested will be retained until the provision of the service is completed.
Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until the satisfaction of this interest.

When processing is based on the User’s consent, the Data Controller may retain the Personal Data longer until such consent is revoked. In addition, the Data Controller may be obliged to store Personal Data for a longer period in order to comply with a legal obligation or by order of an authority.

At the end of the retention period, Personal Data will be deleted. Therefore, upon expiry of this period, the right of access, cancellation, rectification and the right to the portability of Data can no longer be exercised.

Nature of the transfer

Personal Data may be freely provided by the User or, in the case of Navigation Data, collected automatically during the use of this Site.

Unless otherwise specified, all Data requested by the Site are mandatory. If you refuse to provide them, it may be impossible for this Site to provide the Service. In cases where some Data is indicated as optional, Users are free to refrain from communicating them, without this having any consequences on the availability of the Service or its operation.

Users who have doubts about which Data is mandatory, are encouraged to contact the Data Controller.

Processing arrangements and security measures

The personal data of the User are processed by computer and other telematic means, mainly by electronic and automated means and, limited to particular operations, by paper, in any case, suitable to ensure the security and confidentiality, and to prevent unauthorized access to Personal Data by third parties.

In accordance with GDPR and other applicable laws, specific security measures are observed to prevent data loss, unlawful or incorrect use of data and unauthorized access.

However, despite all our efforts to protect personal data, including reviewing our security procedures in the light of new technologies, the User should know that no security measures (including those relating to the transmission and storage of data on the Internet) can be fully guaranteed against access by unauthorized third parties. By submitting personal data, the User agree to the above and will not hold us liable for any security breaches, except when they are due to our negligence.

Subjects involved in the processing

The personal data of the User are processed by employees and collaborators of the Data Controller as subjects authorized for processing in accordance with the GDPR.

The data may be brought to the attention of third parties such as professionals, consultants and more generally third parties that cooperate with the Studio BRB for the pursuit of the above purposes, or third parties to whom outsourced activities have been entrusted.

In any case, Studio BRB is committed to providing these third parties only the necessary data for the performance of the functions and activities entrusted to them; also undertakes to do everything possible to ensure that the third parties use the data received only for the purposes indicated by Studio BRB and in compliance with the applicable personal data processing legislation.

The User’s personal data may also be disclosed to legitimate recipients pursuant to law or regulation, for example in the event of requests by the competent public and judicial authorities or, broadly, in the context of judicial proceedings, as well as to protect and defend the Site and the rights of the Studio BRB.

These parties will process the data as independent Data Controllers or Data Processors as appropriate.

The updated list of all recipients of data can be requested from the data controller at info@brbstudiolegale.it

Transfer of data outside the european union

The management and storage of personal data will take place on servers located in Italy, at the operating offices of the Data Controller and in any other place where the parties involved in the processing are located. For further information, contact the Data Controller.

Personal Data is not transferred to third countries in relation to the European Union and the European Economic Area.

Should such transfer be necessary and/or unavoidable for the organizational needs of the Data Controller, it should be noted that:

this will only take place in countries where there is an adequacy decision taken by the European Commission;
in case of a country other than those referred to in the previous point, the transfer of data will be governed by the Standard Contractual Clauses, except for the adoption, with the agreement of the Parties involved, of another of the safeguard measures established by art.46 of the GDPR or by the application of one of the derogatory mechanisms referred to in art.49 of the GDPR.

links to third party sites and services

The Website may contain banners, advertising messages and advertisements of third parties or commercial partners of the Data Controller. By adhering to the proposals of the aforementioned third parties, the User can access multimedia pages of exclusive relevance to these third parties, which, being outside the control of the Data Controller, are in no way bound by the provisions of this Privacy Policy.

The Studio BRB therefore invites Users to pay attention to the services offered by third parties and to read the information provided by third parties regarding the processing of personal data carried out by them, in relation to which the Studio BRB can neither operate any control nor be held responsible.

Rights of users

Pursuant to art. from 15 to 22 of the GDPR, the Data Subject has the right to obtain, by the Data Controller, confirmation wether a Personal Data concerning him or her is being processed or not and in this case, to obtain access to his or her data.

In addition, the Data Subject has the right to:

know the purposes of the data processing;
know the categories of data subject to processing;
know the recipients or categories of recipients to whom the data have been or will be communicated, in particular in case of recipients of third countries or international organisations;
know, where possible, the expected data retention period or, if not possible, the criteria used to determine that period;
revoke the consent given at any time, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal;
ask the data controller to correct or delete the data or restrict the processing of the data concerning him;
object to the processing of data, without prejudice to the right of the Data Controller to assess the User’s request, which may not be accepted if there are compelling legitimate reasons to proceed with the processing that override the Users’ interests, rights and freedoms;
if the data is not collected from the Data Subject, receive all available information about their origin;
be informed of the existence of an automated decision-making process, including the profiling referred to in art. 22, par. 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and consequences expected for such processing vis-à-vis the Data Subject;
in the cases and with the limits provided for by the GDPR, the Privacy Code and any specific regulations, to obtain data portability, that is, to receive it from the Data Controller, in a structured, commonly used and machine-readable format, and transmit them to another Data Controller without hindrance.

These rights can be exercised without formalities with a simple request to the Data Controller as identified above, at the e-mail address info@brbstudiolegale.it.

Requests are filed free of charge and are processed by the Data Controller as soon as possible, in any case within a month.

Finally, Users have the right to lodge a complaint with the competent supervisory authority in the Member State where they habitually reside or work or in the State where the alleged infringement occurred.

Details of the right to object

When Personal Data is processed in the public interest, in the exercise of public powers vested in the Controller or to pursue a legitimate interest of the Controller, Users have the right to object to processing on grounds related to their particular situation.

Users are reminded that, if their Data is processed for direct marketing purposes, they can oppose the processing without providing any reasons.

Amendments to this document

This Privacy Policy may be amended to comply with new provisions of law, the changed methods of data processing by the Studio BRB, due to changes related to the operation of the Site or the provision of services rendered through it.

The Studio BRB will promptly notify each update through the publication in this section of the Site; therefore, invites Users to periodically consult the Privacy Policy to make sure to consult the latest published version.

Privacy Policy

Privacy policy on personal data protection

Data controller

Type of data collected and methods of processing

1 - Personal data voluntarily provided by the user

2 - Data on navigation

Studio Legale BRB

Privacy policy

Cookie policy

Studio Legale BRB

Privacy policy

Cookie policy