Privacy Policy

Pursuant to Art. of EU Regulation No. 2016/679 (hereinafter “GDPR 2016/679”), containing provisions on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, the personal data provided to the Firm (through its Partners, associates and employees) will be processed in compliance with the aforementioned regulation and with the confidentiality obligations binding on the professionals, associates and administrative staff working within the Firm.

Sending emails, faxes or correspondence to the addresses listed on this website results in the acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.

Data Controller

The Data Controller is Caprarulo Law Firm, Associated Attorneys, with registered office at Piazza Sant’Ambrogio no. 16, 20123 Milan. The Firm’s contact details are as follows: Tel: 02.5510194 – Fax 02.5466216 – Email: info@slcavvocatiassociati.it.

Requests for access to data may be addressed to the above contacts.

Caprarulo Law Firm has not appointed a Data Protection Officer.

Purposes of Processing

The processing of personal data provided by users or collected by the Firm’s professionals and associates, or submitted by users with queries and requests, will be carried out solely for the purpose of correctly and fully executing the professional mandate received, both in judicial and extrajudicial proceedings, or to respond to incoming requests.

Data may also be processed for the purpose of:

• fulfilling obligations under tax, accounting and anti-money laundering regulations;
• complying with obligations incumbent on professionals as required by applicable law.

Methods of Processing and Storage

The data provided are processed at the Firm’s registered office and are managed and handled exclusively by the individual Partners (Attorney Massimo Rossi, Attorney Giancarlo Lombardi, Attorney Pamela Picasso) or by associates and employees of the Firm appointed by the Partners in relation to the individual processing activities carried out.

Processing may be carried out with or without the aid of electronic or automated tools, in compliance with the provisions of Art. 32 of GDPR 2016/679 regarding security measures, by duly appointed persons and in accordance with Art. 29 of GDPR 2016/679.

In compliance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Art. 5 of GDPR 2016/679, and subject to the free and explicit consent of the user, personal data will be retained for the period necessary to achieve the purposes for which they were collected and processed.

Specific security measures are observed to prevent data loss, unlawful or improper use, and unauthorised access.

Disclosure and Dissemination

The data collected will not be disseminated and will not be communicated to third parties outside the Firm without the prior explicit consent of the user, except for communications that may involve the transfer of data to public authorities, consultants or other parties necessary to fulfil legal obligations. Occasional maintenance of the website or software used by the Firm may require temporary access to data by authorised technical personnel.

Special Categories of Personal Data

Pursuant to Articles 9 and 10 of EU Regulation No. 2016/679, any data qualifying as “special categories of personal data” (i.e. data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data processed for the purpose of uniquely identifying a natural person, data concerning health, sex life or sexual orientation) that may be provided will be processed only upon the free and explicit written consent of the data subject.

Data Retention

Personal data processed for the purposes indicated above will be retained for the period necessary to fulfil the mandate for which they were provided or for the duration of the contract, and thereafter for the period during which the professional is subject to retention obligations for tax or other purposes, as required by law or regulation.

Rights of the Data Subject

At any time, the data subject may exercise, pursuant to Articles 15 to 22 of EU Regulation No. 2016/679, the right to:

a) request confirmation as to whether or not personal data concerning them exist; b) obtain information on the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom personal data have been or will be communicated, and, where possible, the retention period; c) obtain rectification and erasure of data; d) obtain restriction of processing; e) obtain data portability, i.e. to receive data from a controller in a structured, commonly used and machine-readable format, and to transmit them to another controller without hindrance; f) object to processing at any time, including in the case of processing for direct marketing purposes; g) object to automated decision-making relating to natural persons, including profiling; h) request from the controller access to personal data and rectification or erasure thereof, or restriction of processing concerning them, or to object to their processing, as well as the right to data portability; i) withdraw consent at any time without affecting the lawfulness of processing based on consent given prior to withdrawal; j) lodge a complaint with a supervisory authority pursuant to Art. 77 of the GDPR;

by contacting the Data Controller at the details provided above.