INFORMATION PURSUANT TO ART. 13 OF (EU) REGULATION 2016/679
Hereby, UNISTUDIO LEGAL & TAX (hereafter “Unistudio”) with headquarters in Milan (MI), Via Durini 26, Tax code 02901730230 with the following contact details:
Tel. +39 02 83418800 | Mail: email@example.com
and Data Protection Officer (DPO) as follows:
Avv. Cristiano Bertazzoni
informs you pursuant to art. 13 of EU Regulation 2016/679 (hereafter for the sake of brevity the “Regulation” or “Applicable Regulations” or “the GDPR”) that it is the Data Controller for the personal data you provide and will process the data for the reasons set out below.
The information provided here refers solely to the website www.unistudio.it (“website”), and not to any other website you may visit via external links and is information pursuant to art. 13 of the Regulation to all those who interact with the website.
Pursuant to, and with the effects of, art. 12 of the Applicable Regulations, you are informed that the personal data you provide will be recorded, processed and stored in our files, whether hard copy or electronic, in compliance with the technical and organizational measures specified in art. 32 of the GDPR. Personal data will be processed using suitable instruments and procedures able to guarantee security and confidentiality.
Type of data
UNISTUDIO may gather the following information, including partially:
- Company name, First and Family name, Address, Tel. no., Fax, email;
- Navigation data.
If you provide Unistudio with third-party data (in addition to your own) you automatically become the Data Controller with all the obligations and responsibilities specified in the law. Hence, you hold Unistudio harmless from any dispute, claim or request for damages etc. from third parties that may arise in relation to the personal data processed as a result of you providing data in violation of the regulations safeguarding personal data. In all cases, where you provide or process third-personal party data, you guarantee that -and accept liability concerning – such processing has a proper legal basis pursuant to art. 6 of the Regulation justifying the processing of the information in question.
Aims and legal basis of processing. Processing that does NOT require your CONSENT
Your data will be processed for the following reasons:
- a) to contact you as requested and to arrange an interview using your contact information.
- b) to reply to your questions.
Processing for the above reasons, a) and b), is necessary in order to respond to your requests and hence Unistudio is not obliged to obtain your consent to process the data, the legal basis for processing your personal data consisting in art. 6(1)(b) of the (“[…] processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;”) and art. 6(1)(c) of the Regulation (“[…] processing is necessary for compliance with a legal obligation to which the controller is subject;”).
Recipients of personal data
Personal data may be communicated, insofar as necessary, to personnel authorized and properly trained by the Data Controller who undertake to keep the data confidential or are legally obliged to do so.
Unistudio will not indiscriminately disseminate your data; in other words, it will not allow unrelated parties to consult your data.
Transfer to Third Countries
The personal data provided on the website will not be transferred to third countries outside the EU and Unistudio will not profile the data gathered.
Period of data storage
Personal data will be stored only for the time strictly necessary to carry out the aims for which they were gathered and processed and, in all cases, for no more than 6 months. Subsequently, they will be deleted or destroyed.
Obligation to provide/voluntary provision of personal data
Unistudio informs you that communication of your data for the reasons set out in subsection 2 a) and b) is necessary in order to respond to your requests. If you do not provide your data Unistudio will not be able to respond to your request.
The processing of your personal data may comprise any operation or series of operations specified in art. 4, paragraph 1, subsection 2 of the GDPR.
Your personal data will be processed using suitable instruments and procedures able to guarantee security and confidentiality and may be carried out, directly and/or via delegated third parties, both manually using hard copies and with the use of IT or electronic instruments. For the proper management of relations and to meet statutory obligations, your data may be included in the internal documentation of the Data Controller and, if necessary, in its records and registers, as required by law.
Pursuant to art. 15 and subsequent articles of the Regulation, at any moment, you may ask Unistudio for access to your personal data, and to rectify or delete them of refuse to allow them to be processed pursuant to art. 21 of the Regulation. You may require the processing of data to be limited pursuant to art. 18 of the Regulation and have the right to obtain your data in a structured and commonly used format legible using an automatic device in the cases specified in art. 20 of the Regulation.
You may exercise your rights by sending a request to the Data Controller using the contact data set out above.
Requests to exercise your rights will be handled without unjustified delay, in all cases, within a month of receipt; only in particularly complex cases and a high number of requests may the response take a further 2 (two) months.
In any case, you have the right to report any matter to the Data Protection Authority (Garante per la Protezione dei Dati Personali) pursuant to art. 77 of the Regulation where you believe your data have been processed unlawfully.