top of page

INFORMATIVA
PRIVACY 

Information pursuant to and for the purposes of articles. 13 and 14 of EU Regulation 2016/679, relating to the protection of the processing of personal data for the studiomassarotto.com website

In accordance with the provisions of the art. 13 of Regulation (EU) 2016/679, as well as by Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, we inform you that the processing of personal data, including the e-mail address, other addresses or personal identifiers provided by completing the forms on the website, will be carried out for the purposes and under the conditions set out below.

This information, drawn up on the basis of the principle of transparency and all the elements required by the GDPR, is divided into individual sections, each of which deals with a specific topic in order to make reading quicker, easier and easier to understand:

​

  1. DATA CONTROLLER

The data controller is the lawyer. Federico Massarotto, C.F. MSSFRC80D18C111I,
VAT number 04847950260, with studio in Treviso, Via Cornarotta n.14.

 

   2. LEGAL BASIS OF THE PROCESSING

The legal basis for the processing of your personal data is made up of:

to. the fulfillment of contractual obligations or execution of pre-contractual measures;

b. the fulfillment of regulatory obligations, including accounting, fiscal and administrative ones.

 

    3. OPURPOSE OF THE TREATMENT

The Data Controller processes personal, identifying and non-particular data (in particular, name, surname, tax code, VAT number, email, telephone number - hereinafter, "personal data" or also "data") communicated by the User in the compilation of the forms on the site to contact me or ask for a quote.

 

   4. NATURE OF AND PURPOSE OF TREATMENT

The Data Controller will acquire and process only personal and possibly fiscal data; in no case will it process definable data, pursuant to art. 9 of Regulation 679/20216, as "particulars".

Ipersonal data provided will be processed for the pursuit of the following purposes:

  • fulfill pre-contractual, contractual and fiscal obligations deriving from existing relationships with the User;

  • fulfill the obligations established by law, by a regulation, by community legislation or by an order from the Authority;

​

   5.NECESSITY FOR THE PROVISION OF DATA

The provision of data is mandatory for the purposes referred to in the art. 2 to be able to execute user requests. The relative failure, partial or incorrect provision could result in the impossibility of activating and providing the requested service.

 

    6. PROCESSING MODE

The data is organized in paper archives and electronic databases; the processing of the same takes place through the use of manual, IT, telematic tools and procedures suitable to guarantee their security and confidentiality, in compliance with the security measures deemed adequate pursuant to the principles of the GDPR (art. 32).

The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes.

In any case, the processing will not exceed 10 years from the termination of the relationship for the purposes of the service.

The data will be stored for a further period in relation to the purposes of disputes and any legal obligations.

 

   7. ACCESS TO DATA

The User's data may be made accessible for the purposes referred to in the art. 2:

  • to collaborators of the Data Controller, in their capacity as Data Processors;

  • to public bodies or judicial authorities, where required by law or to prevent or repress the commission of a crime.

 

  8. DATA COMMUNICATION

Without your express consent, the Data Controller may communicate your data for the purposes referred to in article 2 to supervisory bodies, judicial authorities, as well as to all other subjects to whom communication is mandatory by law for the completion of the said purposes.

Your information will not be disseminated.

 

  9. DATA TRANSFER

The management and storage of personal data will take place on the servers of the Data Controller and/or third-party companies appointed and duly appointed as Data Processors.

The data will not be transferred outside the European Union.

In any case, it is understood that the Data Controller, if necessary, will have the right to move the location of the servers to Italy and/or the European Union and/or non-EU countries.

If for technical and/or operational reasons it is necessary to make use of subjects located outside the European Union, we hereby inform you that such subjects will be appointed Data Controllers pursuant to and for the purposes of the article 28 of the GDPR and the transfer of personal data, limited to the performance of specific processing activities, will be regulated in accordance with the provisions of the GDPR.

 

 10. RIGHTS OF THE INTERESTED PARTY

As an interested party and in compliance with the GDPR, the User has the right to:

  • have access to your data

  • obtain confirmation of the existence or otherwise of your personal data and their making available in an intelligible form;

  • have knowledge of the origin of the data, the purpose and methods of the processing, the logic applied, even in the case of processing carried out with the aid of electronic instruments, the identification details of the Data Controller and of the subjects to whom the data may be communicated or who may become known, in particular if recipients are from third countries or international organisations;

  • have knowledge of the data retention period, or the criteria used to determine this period, as well as the existence of an automated decision-making process, including profiling and, in this case, the logic used, the importance and consequences envisaged for the 'interested;

  • be aware of the existence of adequate guarantees in the event of data transfers to a non-EU country or to an international organisation;

  • have knowledge of all available information on the origin of the data, if it is not collected from the interested party;

  • obtain the updating, rectification and integration of data, cancellation, limitation, portability, with possible direct transmission to another data controller and the transformation into anonymous form or blocking of data processed in violation of the law, where the conditions provided for by Regulation 2016/679 are met;

  • oppose, in whole or in part, for legitimate reasons, the processing of data;

  • receive, if the processing is carried out by automatic means, without impediments and in a structured, commonly used and readable format, the personal data concerning you to transmit them to another owner or - if technically feasible - to obtain direct transmission by the owner to another owner;

  • revoke consent to processing, without prejudice to the lawfulness of the processing based on the consent acquired before the revocation;

  • lodge a complaint with the Guarantor Authority for the Protection of Personal Data pursuant to art. 77 of EU Regulation no. 2016/679.

The exercise of the aforementioned rights can be exercised by means of written communication to be sent to the Data Controller by certified email to the address federicomassarotto@pec.ordineavvocatitreviso.it.

 

  11. MINORS

The Site and the Owner's Services are not intended for children under 14 years of age and the Owner does not intentionally collect personal information relating to minors. The personal data of minors under the age of 14 may therefore be processed subject to authorization from the holder of parental responsibility. In the event that information on minors is involuntarily recorded, the Owner will delete it promptly, upon request of the users.

bottom of page