pursuant to Regulation (EU) 2016/679
The law firm of Atrigna & Partners, Foro Buonaparte 12, 20121 Milan (the “Firm”), as the data controller (hereinafter the “Controller”), collects and processes its clients’ personal data for such purposes as stated in § 1 below, pursuant to and for the purposes of Article 24 of Regulation (EU) 2016/679 (hereinafter the “Regulation”); therefore, the Controller hereby intends to provide data subjects with information about the processing of their personal data, as defined by the Regulation, and about the rights which may be exercised by data subjects.
1.Purposes of processing, legal basis, provision of data and modalities of processing.
Personal data are and will be acquired by the Controller, whether or not by electronic tools, in the course of the professional assignment as per the foregoing proposal (hereinafter the “Assignment”), and will be processed to pursue the following purposes:
- proper and complete performance of the Assignment, whether in court or out of court;
- fulfilment of specific obligations provided for by law, by a regulation or by Community legislation (e.g. anti-money laundering (AML) obligations);
- compliance with accounting, administrative or any other requirements anyway connected with, and pertaining to, the performance of the Assignment;
- sending of informative newsletters on the main legislative innovations.
Data processing will be carried out by the Controller and by entities specifically mandated and instructed by the Controller to this end through manual, computer or electronic systems, with logics closely related, and pertaining, to the purposes of the Assignment, and in any case with such modalities as to ensure their confidentiality and security.
2.Provision of data and consequences of refusal to provide them, if any
The provision of personal data is optional: however, failure to provide them may result in the impossibility for the Firm to perform the Assignment.
3.Recipients of personal data
In connection with the above-mentioned purposes of processing, and within such limits as closely related thereto, personal data may be disclosed to the following categories of entities:
- counterparties and their defence counsels and experts, for the performance of the Assignment;
- the Firm’s employees and staff members, as well as outside experts or entities which the Firm may rely on in the performance of the Assignment;
- Public Authorities, in order to fulfil legal obligations (e.g. reporting obligations to the FIU as provided for by “AML” regulations); as well as
- major national and international entities and bodies, for the compilation of rankings and economic statistics (e.g.: AIFI, Mergermarket, Chambers and Partners, etc.), or prospective clients, in order to show – in accordance with established international practice – the Firm’s track record for certain types of transactions.
If necessary for the performance of the Assignment, personal data may also be transferred to EU and non-EU countries, for which latter there is an adequacy decision by the EU Commission.
4.Duration of the processing
The data will be processed for the entire duration of the Assignment; after completion of the Assignment, the data will be kept for no longer than required to fulfil legal obligations.
5.Controller and Data Protection Officer
The Controller is the law firm of Atrigna & Partners, Foro Buonaparte 12, 20121 Milan; for any queries/requests you can contact the Data Protection Officer mandated by the Firm by sending an email to the following email address: firstname.lastname@example.org.
6.Rights of data subjects.
Under the Regulation, if the relevant conditions are met, data subjects may exercise the following rights:
- access their personal data;
- request a copy of the personal data they provided (so-called portability);
- request rectification of the data held by the Firm;
- obtain restriction of the modalities of processing of their data, or object to processing;
- request erasure of any data for which there is no longer any legal basis for them to be processed by the Firm;
- withdraw consent, if data processing is based on consent, on the understanding that withdrawal thereof may result in the impossibility for the Firm to continue to perform the Assignment;
- lodge a complaint with the Data Protection Authority