PRIVACY POLICY

This document describes (i) the methods used to manage the website https://www.mdtstudiolegale.it (the “Site”) in relation to the processing of personal data of users who consult the Site, as well as (ii) the processing of personal data of those who, as clients or for any other reason, have relationships or contacts with MDT Studio Legale or otherwise provide MDT Studio Legale with their personal data, for the purposes and on the further terms and conditions of this information notice, or whose personal data are processed by MDT Studio Legale (“Data Subjects”).

This information is provided pursuant to Section 13 of (EU) Regulation no. 2016/679 (“GDPR”).

1. Data Controller

The Data Controller is MDT Studio Legale (the “Data Controller”), with office in piazza Camillo Benso di Cavour, 3 Torino, tel. +39 011 814 1448, e-mail: segreteria@mdtstudiolegale.it The updated list of any data processors is available at the offices of the Data Controller.

2. Where and how data are processed

Data relating to the web services of this Site, as well as data collected by MDT Studio Legale for any other reason pursuant to this information notice, are processed at the offices of the Data Controller and are handled by internal technical personnel, specifically appointed in writing as Person in charge of the processing, pursuant to the GDPR and/or by personnel outside the Data Controller’s organisation, duly appointed, in writing, as Processor, pursuant to Section 28 of the GDPR.

All personal data are processed both in paper format and, mainly, in electronic format. Data will be stored in a form that allows the identification of the user only for the time strictly necessary to achieve the purposes for which they were originally collected and, in a any case, within the limits provided by law. Specific security measures are observed to prevent the loss of data, their unlawful or improper use and unauthorised accesses to the data, in compliance with the provisions of the GDPR.

In order to assure that personal data are always accurate, updated, complete and pertinent, Data Subjects are kindly requested to report any changes therein to the following e-mail address DPOmdtstudiolegale.it

3. Purposes of the processing

Personal data are processed by the Data Controller for the following purposes:

a) within the limits and only for the purposes to provide services accessible via the Site as well as to allow users to be acquainted with and examine in depth the activities, events and other, institutional and training, initiatives organised and carried out by the Data Controller;

b) even without the Data Subject’s consent within the limits permitted by the GDPR, to send communications containing information on the Data Controller and the activity organised by the Data Controller (such as invitations to conventions and events in general, including activities to manage the participation therein), as well as updates and/or legal/professional information material, such as, by way of example, in-depth analyses and updates on subjects concerning the activities carried out by the Data Controller.

The carrying out of the activities under letter a) above does not require the Data Subject’s consent, being the services or performances, in most cases, carried out at the direct request of the parties concerned pursuant to Section 6, paragraph 1.

The processing of Data for the purposes under letter b) above does not require the consent of the client, as Data Subject, being it necessary for the legitimate interest pursued by the Data Controller, pursuant to Section 6, paragraph 1, letter f) of the GDPR.

4. Provision of data and consequences in case of failure to provide data

The provision of personal data for the above purposes is optional and the failure to provide said data will have the only consequence to prevent the Data Controller from managing and processing the Data Subject’s requests or from sending the communications mentioned above.

5. Types of data processed

5.1. Navigation data

IT systems and software procedures set up for the correct functioning of this Site collect, during their normal operation, certain personal data, which are transmitted in the context of the use of Internet communication protocols.

Said data are not collected in order to be associated with identified persons, but may, on account of their nature, allow users to be identified through processing and associations with other data held by third parties.

This category of data includes IP addresses or the domain names of computers used by persons accessing the Site, URL (Uniform Resource Identifiers), the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the digital code indicating the state of the server’s response (successful, error, etc.) and other parameters relating to the operating system and to the user’s IT environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to verify its correct operation and are deleted immediately after processing. The data may be used to ascertain responsibility in the event of any IT crimes against the Site.

This category includes also data processed by using cookies. For such purpose, please see the provisions of the Cookie Policy drawn up by MDT Studio Legale

5.2.Data provided voluntarily by users or collected from third parties

The optional, explicit and voluntary submission of an email address as well as of the relevant message to the addresses indicated on this Site, as well as the transmission of messages through the published collection forms, results in the collection of the sender’s address and of other personal data that may be included in the request, which are necessary for responding to requests.

In addition to the foregoing, further personal data (such as personal details, data concerning professional activity, position and/or role within the company, contact details such as business and/or private telephone number, e-mail address) provided to the Data Controller or anyway collected by the Data Controller from third parties, will be processed by the Data Controller in compliance with this information notice and within the limits imposed by the GDPR.

6. Recipients and Categories of Recipients

Data will not be circulated or assigned to third parties unless with the consent of the Data Subject. Should disclosure to third party suppliers or partners of MDT Studio Legale be necessary for organisational or administrative requirements or to support the services provided, the Data Controller shall appoint said entities as processors pursuant to the GDPR.

It is understood that the personal data of Data Subjects may be freely disclosed to third parties, such as the police, whenever this is permitted by the law or required by an order or decision of a competent authority.

7. Transfer of Data to third countries

The data will not be transferred to third countries

8. Retention period

Personal data will be retained only as long as strictly necessary to achieve the purposes for which they had been collected and processed. Upon completion of the processing purpose, or in case of exercise of the right to object to the processing or withdrawal of the consent given, the Data Controller will be anyway entitled to further retain, in whole or in part, personal data for the purposes permitted by the GDPR (such as the need to enforce a right in court proceedings). 

9.1 Data Subjects have the rights provided for in Sections from 15 to 20 of the GDPR. By way of example, each Data Subject may:

a) obtain confirmation of the processing or non-processing of personal data concerning him or her;
b) if his or her data are being processed, obtain access to personal data and information relating to the processing as well as request a copy of the personal data;

c) obtain the rectification of inaccurate personal data and have incomplete personal data completed;

d) obtain the erasure of personal data concerning him or her where one of the grounds provided for by Section 17 of the GDPR applies;

e) obtain restriction of processing where one of the cases provided for by Section 18 of the GDPR applies;

f) receive personal data concerning him or her which he or she has provided to a controller in a structured, commonly used, machine-readable and interoperable format, and request their transmission to another controller, if technically feasible.

10.2. Each Data Subject shall have the right to object at any time to processing of his or her personal data carried out to pursue a legitimate interest of Data Controllers. In case of objection, his or her personal data will no longer be processed, unless legitimate reasons exist for the processing, which override the interests, rights and freedoms of the Data Subject or for the establishment, exercise or defence of legal claims.

10.3. Where personal data are processed based on consent, each Data Subject has a right to withdraw at any time the consent given, without affecting the lawfulness of any processing based on said consent and carried out before the withdrawal. Consent may be withdrawn by writing an email to the address info@MDT.it.

10.4. With reference to the processing of personal data for the purposes under Section 3, letter e) the Data Controller may not ask for the Data Subject’s consent, provided that the latter has been duly informed and has not refused to allow such use, initially or during subsequent communications. Upon collection and in any communication sent for the purposes under this paragraph, the Data Subject will be informed of the possibility to object to the processing at any time, smoothly and free of charge.

10.5. Every Data Subject has the right to lodge a complaint with a Supervisory Authority if he or she considers that the processing of personal data relating to him or her infringes his or her rights under the GDPR, according to the methods set out on the website of the Supervisory Authority