Contact Information

pursuant to Article 13 of Regulation (EU) 2016/679 (‘GDPR’)

Dear Madam, Dear Sir,

Alessandra Bonacci, Lawyer – Law Firm (hereinafter ‘Alessandra Bonacci’ or the ‘Firm’), in accordance with the provisions of the General Data Protection Regulation (Regulation (EU) 2016/679 – hereinafter “GDPR”) and Legislative Decree No. 196/2003 as amended by Legislative Decree No. 101/2018 (“Privacy Code”), informs you that your personal data will be processed in compliance with the aforementioned legislation and the confidentiality obligations that guide the Firm’s activities.

1. Source of personal data
   

   The personal data held by the Firm are those provided by you when filling in our contact form or during your call to our telephone numbers.

   
   
   
2. Purposes and methods of processing (Art. 13, paragraph 1, letter c) GDPR)
   

   Your personal data will be used exclusively to take charge of and respond to your requests. The processing of your personal data will be based on principles of correctness, lawfulness and transparency, limitation to specific purposes, relevance, adequacy, non-excessiveness in relation to those purposes, and accuracy. the processing will also be carried out in such a way as to protect your privacy and your rights, and using appropriate tools to ensure security and confidentiality. The methods of processing your personal data will involve the use of manual, computerised and telematic tools, with logic strictly related to the purposes indicated above.

   
   
   
3. Categories of personal data
   

   Within the limits strictly relevant to the purposes indicated above, the Firm will process your identification data (name and surname, telephone number, e-mail address, and any other data you provide through the contact form or during the call). We invite you not to send sensitive data through the contact form (e.g. information relating to your state of health, illnesses, etc.). Should this occur, Alessandra Bonacci will immediately delete such data.

   
   
   
4. Legal basis for processing (Article 13, paragraph 1, letter c) of the GDPR)
   

   In accordance with Article 6 of the GDPR, the legal basis for processing is the consent you give by submitting your contact request.

   
   
   
5. Mandatory or optional nature of the provision of personal data and consequences of failure to provide such data (Art. 13, paragraph 2, letter e) GDPR)
   

   The provision of your personal data, in relation to the purposes indicated, is necessary to take charge of and respond to your requests. Therefore, failure to provide your personal data will make it impossible to send you the requested information.

   
   
   
6. Recipients or categories of recipients of personal data (Article 13, paragraph 1, letter e) of the GDPR)
   Within the limits strictly relevant to the purposes indicated above, your personal data may be disclosed to employees and/or collaborators of the Firm in any capacity. The aforementioned subjects will process your personal data, as appropriate, in their capacity as Data Processors or Data Controllers or System Administrators appointed in accordance with the provisions of the law, including with regard to security measures for the protection and safeguarding of your data. The data you provide will not be accessible to other users in any way, nor will it be indexable or retrievable by search engines, nor will it be disclosed in any way.
   
   
7. Transfer of Personal Data abroad (Art. 13, paragraph 1, letter F) GDPR)
   

   Your personal data will be stored in electronic format: (i) (Aruba webmail) on the servers of Aruba S.p.A. located in Italy or in any case within the European Union and (ii) (OneDrive cloud storage and cloud backup) at Microsoft, which also has servers outside the EU. With regard to the latter transfer, the contractual guarantees provided by the company itself apply, and in particular the use of standard contractual clauses adopted or approved by the European Commission (Art. 46, paragraph 2, letters c) and d) of the GDPR).

   
   
   
8. Period of retention of personal data (Art. 13, paragraph 2, letter a) GDPR)
   

   Your personal data will be retained for the time strictly necessary to achieve the purposes indicated above, as well as for the fulfilment of the retention obligations provided for by law, and in any case for the period of limitation provided for by law.

   
   
   
9. Rights of the data subject (Art. 13, paragraph 2, letters b), c), d) GDPR)
   We remind you that you may at any time request the Firm to access and rectify your data (Articles 15 and 16 GDPR). Furthermore, where applicable, you may request the erasure of data concerning you (Article 17 of the GDPR), restriction of their processing (Art. 18 GDPR), their portability (i.e. to receive them from the Firm in a structured, commonly used and machine-readable format and to transmit them to another Data Controller without hindrance, Art. 20 GDPR) and you may object to their processing (Art. 21 GDPR). You also have the right to withdraw your consent at any time (where given), without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal, and the right to lodge a complaint with the supervisory authority (Art. 13, paragraph 2, letters c) and d) of the GDPR).
   
   
10. Data Controller and contact details of the Data Protection Officer (Art. 13, paragraph 1, letters a) and b) of the GDPR)
    The Data Controller is Alessandra Bonacci, lawyer, with office in Milan, via Bernardino Telesio n. 2 (phone: +39 02 40700733 e-mail: info@studiobonacci.com). You may contact this person if you require any further information. The full text of the legislation referred to is available on the website www.garanteprivacy.it