Data protection officer
Francesca Sani, Esq., Francesca Baroncelli Poggi, Esq., Camilla Amunni, Esq., located in Florence, Piazza Nannotti 11, 50136 – Phone: +39-055-046-9320 – email: info@milanolegale.com.
Data processing method and purpose/legal basis:
Personal data, willfully provided by the concerned party, is processed both manually and through the use of electronic devices and software applications for the purpose of:
1) Fulfilling legal and contractual obligations (i.e., tax and accounting obligations, payments and delivery of pre-contractual proposals)
2) The automated analysis of the concerned party’s purchase preferences in the services offered by us and selected on our website, even if they are not purchased. Said scope constitutes the Data Protection Officer’s legitimate interest which does not prevail on the concerned party’s interests, rights and fundamental freedoms.
Data provision is discretionary, however it is necessary for the fulfillment of contractual and regulatory obligations towards the concerned party (as per point 1 above) and for said scope the consent is not necessary.Erroneous communication of the requested data for the aforementioned purposes, besides preventing contractual obligations from being fulfilled, may also result, as a consequence, in the Data Protection Officer’s inability to guarantee processing accuracy and the possible non conformity of the processing outcome with the requirements imposed by the relevant regulation. The scope provided in point 2) is attainable only through the explicit and specific consent from the concerned party, who is free to provide or deny it without any consequence in case of refusal (except for the forfeited opportunity to receive offers and communication in line with the preferences of the concerned party him/herself). This is without prejudice to the possibility to oppose and revoke the consent, also at a date following the possible issuance of the specific consent for the automated analysis of preferences, by contacting Firenze Legale at the aforementioned number and/or email address (where data the Data Protection Officer’s information is available).
Duration
The data shall be processed for as long as the relationship between the attorney and the concerned party is active and for a period of two years following the termination of said relationship, without prejudice to other legal obligations and the rights of the concerned party as specified hereunder, among which the right to oppose customer profiling.
Communication scope
Personal data may also be communicated to companies in charge of fulfilling contractual or regulatory obligations or handling services related to the aforementioned purposes. Said companies’ details shall be made available to the concerned party upon request. Personal data shall neither be divulged nor transferred outside the European Union.
Concerned party’s rights
The concerned party has the right to access, at any time, any data pertaining him/her (art. 15 GDPR) that is also in possession of the attorneys, by writing to the aforementioned address, as well as the right, if provided by law, to request the rectification of inexact data (art. 16 GDPR) or the cancellation of the data itself (art. 17 GDPR) or the limitation of its processing (art. 18 GDPR) or to oppose its processing (art. 20 GDPR), as well as the right to data portability (art. 19 GDPR). Without prejudice, nevertheless, to legal and contractual obligations, you have the right to lodge a complaint with the Data Protection Authority.