Privacy Policy · Studio Legale Zambelli Tassetto

PRIVACY POLICY

In this privacy policy of the law firm of Zambelli Tassetto, a partnership established in Mestre (Venice, Italy) on 22 December 1978 (hereinafter the “Firm”) intends to describe the working of this website, with specific regard to the modalities whereby personal data pertaining to the users who visit it are gathered, registered and used, as well as the purposes of such processing: this notice has been issued for the websitewww.ztlex.comand www.zambellitassetto.it(hereinafter, collectively, the “Website”) only and is not meant to be applied to the other websites possibly visited by the user through the links on the pages of the aforementioned websites. The Website is run and controlled by the Firm, the “Data Controller”, whose seat is in via Cavallotti 22, Venice, Italy. This privacy policy, addressed to anyone who uses the Firm’s web services, intends to satisfy the requirements set out in art. 13 of the Legislative Decree no. 196/2003 (hereinafter the “Privacy Code”) and in accordance with art. 13 of the European Union Regulation no. 679/2016 (hereinafter the “GDPR”).

PLACE OF DATA PROCESSING

The website is hosted on machines managed by an external company and located in 2 Rue Kellermann Roubaix, France. However, communications are transferred to the Firm’ servers in order to reply to the users’ requests.

TYPE OF DATA PROCESSED

Navigation data. The IT systems and the software procedures for the operation of this website, while being normally used, collect some personal data whose transmission is implicit while using the Internet communication protocols. The above information is not collected to be associated to any identified persons; yet, its same nature could make it possible to identify users, by means of special processing and associations with other data. The IP addresses or the domain names through which the users connect to the website, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of request, the procedures used to submit the request to server, the file size of the reply, the numeric code indicating the status of the server’s reply (successfully delivered, error and so on) and other parameters relating to the user’s operating system or IT environment, fall within this category of data.

Data voluntarily provided by the user. The optional, explicit and voluntary sending of electronic mail messages to the addresses indicated on this website for the sending of the CVs implies the following collection of the sender’s address, necessary to reply to possible requests, as well as of the other personal data, if any, included in the message. Specifically, the users that wish to send their CVs through the Website are invited to pay the due attention to this notice with regard to the processing of data related to them and inserted in the CVs sent. In this way only the processing can be carried out consciously and deliberately. In particular, the Firm points out that the GDPR and the Privacy Code prescribes that data described in article 9 of the GDPR (i.e. personal data allowing the disclosure of racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical, political or trade unionist nature, as well as personal data disclosing health and sex life) can be lawfully processed only by previous consent in writing; it is currently difficult, thought, to obtain such a consent from each user, except by specific modalities (e.g. digital signature). Thus, the Firm’s intention being a legitimate and transparent processing, the same invites those being interested in the on-line sending of the CVs to consent to the processing of their data.

PURPOSES OF DATA PROCESSING AND COMMUNICATION

Navigation data are merely used to obtain anonymous statistical information on the use of website and to verify its proper operation, thus, it will be deleted immediately after processing. The data may be used to ascertain any liability in case of possible IT-related offences to the prejudice of the website: except this circumstance, the data about web contacts will not be currently held for more than seven days.

Personal data provided by users sending their CVs, requesting to be sent information on the Firm’ events and initiatives or deciding to use the Firm’s services will be only used to reply to and satisfy the request and will be communicated to any third parties only in the event that it is required for that purpose.

Processing connected to web services provided by this website are run by the Firm’s operators, who were appointed as “People in charge of processing” as well as by external subjects in their quality as “Data Processors” or as “Data Controllers” with regard to the specific activities carried out by them.

The distinct role the Firm’s partners take in relation to the data processing given to them is strictly connected to the specific activity performed. Personal data can be transferred abroad, as far as the above mentioned purposes are concerned, to professional partners. In that case, the user will have the opportunity to express his/her preference in relation to such transfer of his/her data.

COOKIES

No personal data of users is intentionally acquired by the website. Neither cookies nor the so-called persistent cookies of any kind or any users’ tracking systems will be used for the transmission of personal information. The use of the so-called session cookies (that are only temporarily recorded on the user’s computer and that are deleted as soon as the browser is closed) is strictly limited to the transmission of session IDs (made up of random numbers generated by the server) necessary to perform a safe and efficient exploration of the site. The so-called session cookies used in this site avoid any recourse to other IT techniques that are potentially prejudicial to the privacy of the users’ navigation and do not allow the collection of personal data which may identify users.

VOLUNTARY PROVISION OF DATA

Except as specified for navigation data, the user is free to provide his/her personal data by email to urge information, to submit an application to the Firm by sending his/her CV or to take part in the Firm’s initiatives. However, any refusal by the user to provide the above data may impair, in such situations, the obtainment, by the user themselves, of the information requested.

PROCESSING METHODS

Personal data is processed with IT tools exclusively for as long as is necessary for the purposes for which it has been collected. Specific security measures have been adopted to prevent any loss of data, any unlawful or non correct use of the same and unauthorised access. No data deriving from the web service shall be disseminated.

OTHER USES OF DATA BY THE FIRM

The firm may also collect, process and disclose personal data relating to clients or counterparties and their personnel in the following circumstances:

For the legitimate interest of the provision of legal services (even through the legal consultants and/or employees working for or with our firm) including instructing and liaising with other lawyers and other professional services providers in relation to matters that we are handling, or because we need to liaise with a counterparty on a matter in which we are instructed.
To collect our fees or costs;
In providing information on our services and legal updates that we consider may be relevant to clients;
Inviting clients to events;
Identifying where we may make improvements in services delivery;
In order to comply with our obligations to check the identity of clients in compliance with anti-money laundering obligations;
To defend a claim against us or connected to our services;
Where required by our insurers and / or by public or other authorities including the tax agency and the lawyers’ regulatory authority.

Please note that in fulfilling its professional appointment Zambelli Tassetto will have to comply with the provisions of law n. 197 of 5 July 1991, Legislative Decree n. 56 of 20 February 2004 and Ministerial Decree n. 141 of 3 February 2006.

Personal data will be retained only for the timeframes necessary to achieve the purposes for which they had been collected and processed.

RIGHTS OF THE DATA SUBJECTS

Under certain circumstances a data subject may: (a) request access to copies of the personal data held by us and further information in relation to its processing, or else request that such information be supplemented, updated or rectified; (b) request erasure, anonymisation or blocking of his/her personal data that is processed in breach of the law; (c) object on legitimate grounds to the processing of his/her personal data. In certain circumstances the Firm may not be able to stop using his/her personal data; if that is the case, the firm will let the data subject know why this is the case; and (d) withdraw his/her consent – when personal data is processed on the basis of consent you may withdraw consent at any time. To exercise such rights or to request information on this privacy policy please contact us on info@ztlex.com.