Privacy Information – Contact Section

(1.0 version of April 24-th)

Dear Visitor,

This website https://www.pvlegal.it/en/vinci is owned by the company Vinci Law Firm, with registered office in Amministrativa Galleria Ugo Bassi, 1 Bologna, VAT number 02964541201 also owner of the website https://www.pvlegal.it/en/vinci. As Data Controller of the websites, Users personal data provides the following privacy information pursuant to art. 13 of Legislative Decree 196/2003 (hereinafter, the “Privacy Code”) and pursuant to art. 13 of the EU Regulation 2016/679 of 27 April 2016 (hereinafter, the “Regulation”, the Regulation and the Privacy Code are defined as “Applicable Regulations”).

The website and any services offered through the website are reserved for persons who have reached eighteen yers old. Therefore, the Data Controller does not collect personal data relating to subjects under the age of 18. Upon the request of the User, the Data Controller will promptly delete all personal data accidentally collected relating to subjects under the age of 18.
The Owner takes the protectionot its Users privacy rights and personal data very seriously. For any questions regarding the Privacy Information, the User can contact the Data Controller at any time, using the following methods:

• by registered letter Galleria Ugo Bassi n. 1, 40121 Bologna
• by email pierpaolo.vinci@pvlegal.it,
• by fax +39 051/22.95.31

The Data Controller has not identified the Data Protection Officer (DPO), because it is not subject to the designated obligations provided by art. 37 of the Regulation.

1. Purpose of the processing

Users’ personal data will be processed lawfully by the Data Controller pursuant to art. 6 of the Regulation for the following processing purposes:

a) fulfill the User’s request: the User’s personal data are collected and processed by the Owner for the sole purpose of processing his/her request. The User’s data collected by the Owner for this purpose includes: name, surname, company, city and address of residence / domicile, email address, telephone number, as well as all personal information of the User possibly and voluntarily published. No other processing will be carried out by the Data Controller in relation to the personal data of the User, unless the User gives the Data Controller a specific and optional aggreement to the processing of his / her data for the further processing purpose provided for in paragraph 2. Without prejudice to what is stated in this privacy policy, the Data Controller cannot in any case make the Users personal data accessible to other Users and / or third parties.

b) administrative-accounting purposes, in order to carry out organizational, administrative, financial and accounting activities, such as internal organizational activities and activities functional to the fulfillment of contractual and pre-contractual obligations;

c) legal obligations, in order to fulfill the obligations under the law, or indicated by the authority, by a regulation or by European legislation.
The provision of personal data for the processing purposes indicated above is optional but necessary, since not providing will make it impossible for the User to make a request to the Owner.

2. Further processing purposes: marketing

With the User’s free and optional agreement, some personal data (the name, surname, the company, city and address of residence / domicile, email address, telephone number) may also be processed by the Data Controller for marketing and newsletter purposes (for sending advertising material, for direct sales and commercial communication, for sending newsletters containing information in relation to news relevant to the sector relating to the activities of the Data Controller), or for contacting the User through mail by the Owner, by e-mail, by telephone (fixed and / or mobile, with automated call or call communication systems with and / or without an operator) to propose to the User the purchasing of products and / or services offered by the Owner and / or third party companies, to present offers, promotions and commercial opportunities.

In the case of an unsigned agreement, the possibility of pursuing the purposes referred to in Article 1 will not be affected in any way.

In case of agreement, the User may at any time revoke it, by making a request to the Owner in the modes indicated in the following paragraph 5.

The User can also easily oppose further sending of promotional communications and e-mail newsletters by clicking on the appropriate link for revocation of agreement, which is present in every promotional e-mail. Once the agreement has been revoked, the Data Controller will send the User an e-mail to confirm the revocation. If the User intends to withdraw the agreement connected to promotional communications sent by telephone, while continuing to receive the promotional communications by email, or vice versa, a request to sent the Owner is needed in the mode indicated in paragraph 5 below.

The Data Controller informs the User that, following the exercise of the right to object to the receiving of promotional communications and e-mail newsletters, it is possible that, for technical and operational reasons (formation of contact lists already completed shortly before receipt from the Owner of the opposition request) the User continues to receive some additional promotional and newsletter messages. If the User continues to receive the promotional messages after 24 hours from exercising the objecting right, please report the problem to the Owner using the contacts indicated in paragraph 5 below.

3. Processing methods and data storage time

The Data Controller will process the User’s personal data using manual and IT tools, with logics strictly related to the purposes described and, in any case, in order to guarantee the security and confidentiality of the data.
The personal data of the Users inserted on the website will be stored for the strict period of time to carry out the primary purposes illustrated in paragraph 1 above, or in any case as necessary for the civil law protection of the interests of both Users and the Owner.

In the case referred to in paragraph 2 above, the Users’ personal data will be storaged for the strict period of time necessary to carry out the purposes described therein and, in any case, for no more than twenty-four (24) months.

4. Communication and data storage

Employees and / or collaborators of the Data Controller responsible for managing the website and Users requests may become aware of Users personal data. These subjects, who are formally nominated by the Data Controller as “data processors”, will process User data exclusively for the purposes indicated in this information document and in compliance with the provisions of the applicable law.

Furthermore, third parties who can process personal data on behalf of the Data Controller as “External Data Processors”, such as, suppliers of IT and logistic services functional to the operation of the website, outsourcing or cloud computing service providers, professionals and consultants, may become aware of User’s personal data.

Users have the right to obtain a list of any data processors nominated by the Data Controller. They can do so by making a request to the Data Controller in the way indicated in paragraph 5 below.

5. Rights of the interested parties

Users may exercise the rights guaranteed by the applicable regulation by contacting the Owner in the following ways:

• by registered mail Galleria Ugo Bassi n. 1, 40121 Bologna,
• by email pierpaolo.vinci@pvlegal.it,
• by fax +39 051/22.95.31.

Pursuant to the applicable regulation, the Owner informs that Users their right to obtain the information (i) of the origin of personal data; (ii) of the purposes and methods of processing; (iii) of the logic applied in the case of processing carried out with the support of electronic instruments; (iv) the identification details of the data controller and data processors; (v) of the subjects or categories of subjects to whom the personal data may be communicated to or who can become aware of them as managers or agents.

Furthermore, Users have the right to obtain:
a. the access, the updating, the rectification or, when interested, the integration of data;
b. the deletion, the transformation into anonymous form or blocking of data processed in breach of the law, including those data that does not need to be stored for the purposes for which the data was collected or subsequently processed;
c. the certificate that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or spread, except in the case that such fulfillment provesto be impossible or involves a manifestly disproportionate use of resources with respect to the protected right.

Furthermore, the Users have:
a) the right to withdraw the agreement at any time if the processing is based on their agreement;
b) the right to data portability (the right to receive all personal data concerning the Users in a structured format, commonly used and readable by an automatic device), the right to limit the processing of personal data and the right to cancellation (“right to oblivion”);
c) the right to object:

I. in whole or in part, for legitimate reasons, to the processing of Users personal data, even if pertinent to the purpose of their collection;
II. in whole or in part, to the processing of Users personal data for the purpose of sending advertising materials or direct sales or for carrying out market research or commercial communication;
III. if personal data are processed for direct marketing purposes, at any time, to the processing of their data for this purpose, including profiling to the extent connected to such direct marketing.

d) if the Users are convinced that the treatment breach the Regulation, they have the right to lodge a complaint to a Supervisory Authority (in the Member State in which they habitually reside, in the one in which they work or in the one where the alleged violation occurred). The Italian Control Authority is the Guarantor for the protection of personal data, with headquarters in Piazza di Monte Citorio n. 121, 00186 – Rome (http://www.garanteprivacy.it/).

The Data Controller is not responsible for the updating of all the links displayed in this Privacy Information document, therefore whenever a link is not functioning and / or is not updated, the Users acknowledge and agree that they have to refer to the document and / or section of websites referenced by the link.