Informative note under art. 13 European regulation 679/2016
Pursuant to the art. 13 of the European Regulation (EU) 2016/679 (hereinafter “GDPR”), and in relation to the personal data that Studio Legale Associato Metta will acquire as a consequence of the activities that you request, we inform you as follows:
Personal Data Protection:
Owner and Responsible Subject
Studio Legale Associato Metta (VAT 00838600724) is the owner for data processing in the person of Aurelio Augusto Metta (hereinafter “lawyer”) domiciled at Studio Legale Associato Metta, Corso Vittorio Emanuele II no. 57, Bari, 70122, Italy. The Owner can be contacted through the certified mail (in Italian “PEC”) listed on the directory of the Bari Bar Association website : https://www.ordineavvocati.bari.it/. Studio Legale Associato Metta is not required to appoint and has not appointed a subject qualifying as “Data Protection Responsible Subject” (or “RPD” or “Data Protection Officer”, or “DPO”).
Data Processing Purpose
The personal data processing activity has the goal to allow the correct and complete fulfillment of the requested activities and professional engagements, both in court and out of court. Your data will also be processed in order to:
- fulfill the obligations in compliance with tax and accounting rules;
- fulfill the obligations upon the lawyer and required by the current legislation.
The processing of personal data is carried out through manual and technological means (including handheld device) and processed with methods strictly necessary to meet the aforementioned purposes.
Legal basis for the processing
The law firm manages/treats your personal data lawfully, where the processing:
- it is necessary for the execution of the assignment or for a contract of which you are part or for the execution of pre-contractual measures adopted upon your request;
- it is necessary to fulfill a legal obligation on the lawyer;
- it is based on the express approval such as, for example, to send a newsletter by Studio Legale Associato Metta.
Implications from not providing personal data
With respect to personal data concerning the fulfilment of a contract you are a part of or concerning the fulfillment of a regulatory requirement (for example the obligations related to book keeping, accounting and tax records), the failure to provide personal data represents an obstacle to successfully create a contract.
Data keeping
Your personal data, subject to processing activities for the purposes indicated above, will be kept for the duration of the contract and, afterwards, for the period of time the lawyer is subject to obligations for tax or other purposes required by laws or regulations.
Data communication
Your personal data may be communicated to third parties such as the following ones:
- consultants and accountants or other lawyers who provide activities instrumental to the purposes indicated above;
- banking and insurance institutions that provide activities instrumental to the purposes indicated above;
- persons that process the data in compliance with specific obligations as per the law;
- Judicial or administrative authorities, for the fulfillment of obligations as per the law;
- Service providers who provide IT and/or administrative services such as Melu who provide assistance by way of a managed live chat service for enquiries on our website . A copy of Melu’s own privacy policy can be accessed here.
Data profiling and distribution
Your personal data are not subject to distribution, disclosure, nor to any fully automated processing, including profiling.
Rights of the concerned
Among the rights that you are entitled to as per the GDPR there is also the right to:
- ask the lawyer for access to your personal data and information relating to it; the amendment of inaccurate data or the integration of incomplete data; the cancellation of personal data concerning you (upon the occurrence of one of the conditions indicated in the GDPR, art. 17, paragraph 1, and in compliance with the exceptions provided in paragraph 3 of the same article); the restrictions of the processing of your personal data (in the event of one of the cases indicated in the GDPR, article 18, paragraph 1);
- request and obtain from the lawyer – in the events where the legal basis for the processing is the contract or the approval, and the same is carried out by automated means – your personal data in a structured and automated device-readable format, also for the purpose to communicate such data to another data owner (so called personal data portability right);
- oppose the processing of your personal data at any time in the event of particular situations that concern you;
- withdraw the approval at any time, limited to cases where the processing is based on your approval for one or more specific purposes and concerns ordinary personal data (for example, date and place of birth or place of residence), or particular categories of data (for example data revealing your racial origin, your political opinions, your religious beliefs, your health or sexual orientation). The processing activities based on the approval and carried out prior to the withdraw preserves, however, remain lawful;
- file a complaint with a supervisory authority (Data Protection Authority – garanteprivacy.it).