Benvenuto nel sito web dello Studio RTZ/Welcome in the Studio RTZ Website

Bologna - Modena

Reggio Emilia - Casalgrande

9:00 AM - 7:00 PM

dal Lunedì al Venerdì

PERSONAL DATA PROCESSING NOTICE

INFORMATION ONTHE PROCESSING OFPERSONAL DATA(ART. 13 EU REGULATION 679/2016)

Definitions

Pursuant to Regulation (EU) 679/2016 (hereinafter also Regulation) and Legislative Decree No. 196/2003 (Personal Data Protection Code) as amended by Legislative Decree No. 101/2018, the following shall mean:“personal data” means any information relating to an identified or identifiable natural person (data subject ); an identifiable person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or to one or more features of his or her physical, physiological, genetic, mental, economic, cultural or social identity. Translated with www.DeepL.com/Translator (free version)

“data of use”The information collected automatically by this website (or by the third party applications that this website uses), including: IP addresses or domain names of the computers used by the user who connects with this website, URI (Uniform Resource Identifier) notation addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various time connotations of the visit (e.g. the time spent on each page) and details of the itinerary followed by the visitor. ) the country of origin, the characteristics of the browser and the operating system used by the visitor, the various temporal connotations of the visit (e.g. the length of time spent on each page) and the details of the itinerary followed within the application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User’s IT environment. Translated with www.DeepL.com/Translator (free version)

“processing”: any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction

“profiling”“User”: any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to that natural person’s professional performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements “User”: the individual browsing this website, who must be the same as the Data Subject or be authorised by him/her and whose personal data are the subject of any processing. Translated with www.DeepL.com/Translator (free version)

“Data controller”‘Controller’: the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria applicable to its designation may be established by Union or Member State law. “Data controller”: the natural or legal person, public authority, service or other body that processes personal data on behalf of the controller; “Data protection officer (also Data Protection Officer – DPO)”: a mandatory figure in certain cases provided for in Article 37 of the Regulation. He/she carries out consultancy, monitoring, coordination and management of relations with the Supervisory Authority with regard to the processing of personal data.

communication”“dissemination’: the disclosure of personal data to one or more specified parties other than the data subject, the data controller’s representative in the territory of the European Union, the data controller’s representative in the territory of the European Union, the persons authorised to process personal data under the direct authority of the data controller or the data processor, in any form, including by making them available or consulting them or by means of an interconnection; ‘dissemination’: the disclosure of personal data to unspecified parties, in any form, including by making them available or consulting them.

“Data controller”

Personal data provided by users through the www.studiortz.euwebsite (hereinafter referred to as the Site) will be processed independently or jointly by:

  • RTZ Professional Association, with registered office in 41126 Modena, Strada Gherbella, 294/A, tax code and VAT no. 03237440361;
  • Emilia Elaborazioni r.l., with registered office in 41126 Modena, Strada Gherbella, n. 294/A, tax code and VAT no. 03242840365;
  • RTZ Legal Professional association between Massimiliano Ferrari and others, with registered office in Reggio Emilia, Via Montefiorino, no. 10/1, tax code and VAT no. 02484660358.

The aforementioned companies may independently play the role of Data Controller according to the relevant definition contained in Article 4 under 7) of the Regulation, ” the natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data” or, in some specific cases, play the role of co-processors having to be understood as such ” two or more companies that jointly determine the purposes and means of the processing” as provided in Article 26 of the Regulations. With this in mind, for the purposes of this Notice each of the above companies will be referred to individually as “Data Controller” and jointly as “JointDataControllers.” The Co-Processors have established through a co-processing agreement pursuant to Article 26 of the Regulations their respective responsibilities with respect to compliance with their obligations under applicable privacy laws; the essential contents of such agreement are available to you at the offices of the Co-Processors.

Type and source of data

In the context of the use of the Site and/or communications sent to each of the Joint Owners, they will process the data listed below:

Personal data provided voluntarily by the data subject

The optional sending of e-mails to the addresses indicated on the Site entails the subsequent acquisition of the sender’s address, which is necessary in order to reply to the communications/requests sent, as well as any other personal data included in the e-mail message.

Browsing data

The computer systems and procedures used to operate the Site acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the Site, addresses in URI notation ( Uniform Resource Identifier) of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. This data is processed for the sole purpose of obtaining statistical information on the use of the Site and to check its correct functioning. However, such data could be used to ascertain liability in the event of any offence committed against the Site.

Cookie

Per assicurare il funzionamento del Sito e migliorare il servizio offerto vengono utilizzati cookies. I cookies sono piccoli file di testo che i siti visitati dall’utente inviano al suo terminale (solitamente al browser), dove vengono memorizzati per essere poi ritrasmessi agli stessi siti alla successiva visita del medesimo utente. Per maggiori informazioni, conoscere i cookies utilizzati sul Sito ed eventualmente disabilitarli e/o negare il consenso si rinvia alla cookies policy.

Purpose legal basis for processing

Users’ data will be used to respond to communications and/or requests made by the users themselves by sending e-mail messages. The legal basis for the processing is, therefore, that provided by Art. 6(1)(b) of Regulation (EU) 679/2016. The provision of your personal data for these purposes is optional but failure to provide it would make it impossible for the Data Controller to respond to the requests received.

Communication and recipients of personal data

The personal data provided by you will be processed by employees and direct collaborators of the Data Controllers for the sole purpose of performing the service/responding to your requests, unless disclosure is required by law. Such data may also be processed on behalf of the Joint Data Controllers by external subjects who will act as Data Processors, such as companies, consultants and professional firms that provide assistance and/or consultancy services, or that carry out, on behalf of the Joint Data Controllers, services connected and instrumental to the purposes of data processing. The personal data provided will not be communicated or disclosed to third parties.

Methods and means of treatment

Personal data are processed by automated means for the time necessary to achieve the purposes for which they were collected. Specifiche misure di sicurezza sono osservate per prevenire la perdita dei dati, usi illeciti o non corretti ed accessi non autorizzati in ottemperanza agli obblighi di adeguamento a misure adeguate di sicurezza. Tutti i dati infatti verranno acquisiti e conservati in conformità agli artt. 32, 33 e seguenti del Regolamento.

Transfer of data to a third Country

No transfer of data to a third Country is envisaged.

Automated decision-making

There is no automated decision-making process.

Duration of treatment

Personal data acquired as a result of sending e-mail messages to the addresses indicated on the Site will be stored for the time necessary to carry out the activities requested by the User/respond to the information requested, and in any case for no longer than 24 months from the time the data is sent. The storage time may be extended and involve the subsequent acquisition of additional data in the event that the User requests services or purchases goods; in this case the duration of the processing, for administrative, accounting, tax and contractual purposes, may extend up to 10 years from the termination of the relationship, as provided for by the regulations in force (art. 2220 of the Civil Code, art. 22 of Presidential Decree no. 600 of 29/09/1973 and art. 2200 of the Civil Code). The technical navigation cookies (described in the cookies policy), will be stored for the sole purpose of allowing the correct technical functioning of the site itself and will automatically expire when the browser is closed.

Rights of data subjects

The persons to whom the personal data refer have the right at any time to obtain confirmation of the existence or non-existence of such data and to be informed of their content and origin, to verify their accuracy or to request that they be supplemented, updated or corrected. Data subjects also have the right to request the deletion, transmission of the data to other data controllers, the transformation into anonymous form or the blocking of data processed in breach of the law, as well as to oppose their processing for legitimate reasons. Data subjects also have the right to appeal to the supervisory authority (Privacy Guarantor). Below is Article 13 of European Regulation 679/2016 listing these rights. Art. 13 “Information to be provided if personal data are collected from the data subject”.

  1. Where data relating to the data subject are collected from him or her, the controller shall provide the data subject with the following information at the time the personal data are obtained:
    1. The identity and contact details of the data controller and, where applicable, its representative;
    2. the contact details of the data protection officer, where applicable;
    3. the purposes of the processing for which the personal data are intended and the legal basis of the processing;
    4. where the processing is based on Article 6(1)(f), the legitimate interests pursued by the controller or by third parties;
    5. the possible recipients or categories of recipients of the personal data;
    6. where applicable, the intention of the data controller to transfer personal data to a third country or an international organisation and the existence or absence of an adequacy decision by the Commission or, in case of transfers pursuant to Article 46 or 47 or to the second paragraph of Article 49, the reference to appropriate or adequate safeguards and the means for obtaining a copy of those data or the place where they have been made available.
  2. In addition to the information referred to in paragraph 1, at the time personal data are obtained, the controller shall provide the data subject with the following further information necessary to ensure fair and transparent processing:
    1. the period of retention of personal data or, if this is not possible, the criteria used to determine this period;
    2. the existence of the data subject’s right to request from the data controller access to and rectification or erasure of personal data or restriction of processing concerning him or her or to object to the processing of personal data, as well as the right to data portability;
    3. where the processing is based on Article 6(1)(a) or Article 9(2)(a), the existence of the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on consent given before the withdrawal;
    4. the right to lodge a complaint with a supervisory authority;
    5. whether the provision of personal data is a legal or contractual obligation or a necessary requirement for the conclusion of a contract, and whether the data subject is under an obligation to provide the personal data, as well as the possible consequences of failure to provide such data;
    6. the existence of an automated decision-making process, including profiling as referred to in Article 22(1) and (4), and, at least in such cases, meaningful information on the logic used, as well as the importance of such processing for the data subject and the envisaged consequences thereof.
  3. Where the controller intends to further process personal data for a purpose other than that for which they were collected, it shall provide the data subject with information on that other purpose and any further relevant information referred to in paragraph 2 prior to such further processing.
  4. Paragraphs 1, 2 and 3 do not apply if and to the extent that the person concerned already has the

Contact information

For any information regarding data processing or to exercise your rights, you may contact info@studiortz.eu .

This site is registered on wpml.org as a development site. Switch to a production site key to remove this banner.