Privacy Notice pursuant to Article 13, Regulation (EU) 2016/679 – Contact Us Section
At Giommoni Li Vigni Pagliari Locurzio, your privacy is very important to us. For this reason, personal data is collected and processed primarily by electronic means, with specific measures in place to keep it secure.
Below you will find the methods and information regarding the processing of your personal data related to:
This notice is provided pursuant to the EU Regulation 2016/679 on the protection of personal data and the subsequent national implementing legislation (hereinafter “GDPR”).
Who is the Data Controller?
The Data Controller is: Giommoni Li Vigni Pagliari Lo Curzio, located at Viale Regina Margherita, 41, 20122 Milan, Italy, contactable via email at: ilaria.livigni@glv-law.eu
Which personal data do we collect and why?
The personal data processed by EDI are those provided, in this case, when filling out the “Contact Us” form. We collect identifying data (name, email, and phone number).
Your information may be processed for the following purposes:
- To respond to a contact request and provide information about the services offered by the Data Controller.
- To send invitations, including via email, to participate in training courses, conferences, events, and other activities (also via teleconferencing or online platforms) concerning business innovation and digitalization, as well as to send related informational and promotional material about EDI’s services, general informational materials, newsletters, and promotional content of interest to the Data Controller.
What is the legal basis?
For purpose 1, the legal basis is the execution of pre-contractual measures, for which consent is not required.
For purpose 2, since it concerns promotional activities, the user’s consent is required where applicable.
Who will process your personal data?
Your personal data will be processed by properly trained personnel of the Data Controller. For organizational and functional needs related to the provision of services, your data may also be processed by third parties, including our suppliers and partners.
These third parties have been carefully selected by our company for their proven reliability and security, among the best available on the market. Some of these parties may be located outside the EU, and in such cases, the transfer of your personal data to those countries is carried out in compliance with legal guarantees.
How long is the data retained?
Your personal data will be retained for a limited period of time, according to the purposes for which it was collected, after which it will be deleted or irreversibly anonymized.
Data collected via the “Contact Us” form (purpose 1) will be retained for the time necessary to process your request.
Data collected based on your consent for marketing purposes will be retained for 24 months from the date of consent.
Communication and disclosure of data to third parties
Your personal data will be processed by our internal personnel duly trained and authorized.
Your personal data may also be transmitted to third parties used to provide our services; these parties have been carefully selected and provide appropriate guarantees of compliance with data protection regulations.
These parties are designated as data processors and operate according to the instructions given.
The third parties belong to the following categories: website operators, banking institutions, internet providers, companies specialized in IT and telecommunication services, couriers, marketing agencies, companies specialized in market research and data processing.
Your data may also be disclosed to law enforcement authorities and judicial or administrative authorities, in accordance with the law, for the investigation and prosecution of crimes, prevention and protection against public security threats, to allow us to exercise or defend a right in court, and for other reasons related to the protection of the rights and freedoms of others.
Transfer of data outside the EU
Where personal data is transferred to countries outside the European Union, transfers will be carried out in compliance with GDPR provisions to ensure an adequate level of protection. In particular, transfers will be made through the conclusion of Standard Contractual Clauses approved by the European Commission, a copy of which can be obtained upon request using the contact details provided in this notice.
Your rights
Under the GDPR, you may at any time obtain confirmation of whether or not your personal data is held by us, even if not yet recorded, and receive such data in an intelligible format.
Additionally, you may: withdraw consent to processing, know the origin of your personal data and how it is used, request its update, correction, or completion, and, where applicable, request its deletion, restriction of processing, or object to its processing. You may also request to receive your personal data in a structured, commonly used, and machine-readable format, and, where technically feasible, we may directly transfer your data to a third party designated by you.
If you believe that your personal data has been processed unlawfully, you may file a complaint with one of the supervisory authorities responsible for data protection. In Italy, a complaint may be submitted to the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
This privacy notice may be updated or supplemented over time. We encourage you to review its contents periodically. Where possible, we will inform you of any changes in a timely manner.
To exercise your rights, you may send a communication to the Data Controller’s address or email: ilaria.livigni@glv-law.eu
Complaints
You may submit a complaint if you are dissatisfied with the response provided by the Data Controller or if no response has been received.
In Italy, complaints may be submitted to the Italian Data Protection Authority.
More information on how to submit a complaint is available on the Authority’s website at http://www.garanteprivacy.it/.