PRIVACY POLICY

Professional advice

Information pursuant to Article 13 of European Regulation 679/2016 and consent

Pursuant to Article 13 of European Regulation (EU) 2016/679 (hereinafter GDPR), and in relation to the personal data that the firm will have access to when entrusted with your case, we hereby inform you of the following:

Data controller and data protection officer

The data controller is Dr. Roberto Viva (hereinafter also referred to as the “professional”) with registered office in Milan, Corso Garibaldi 2. The Data Controller can be contacted by email at roberto.viva@vivalex.it. The Data Controller has not appointed a data protection officer.

Purpose of data processing

The processing is aimed at the correct and complete execution of the professional assignment in the extrajudicial sphere. Your data will also be processed for the following purposes:

• to fulfill tax and accounting obligations;

• to comply with the obligations incumbent on the professional and provided for by current legislation;

• for the owner to send newsletters, mailing lists, and other electronic communications;

• relating to the professional assignment conferred or to seminars and/or specialist events also related to professional activity (if the data subject has given their express consent to this effect).

Personal data may be processed using both paper and electronic archives (including portable devices) and processed in ways strictly necessary to meet the purposes indicated above.

Legal basis for processing

The professional's office processes your personal data lawfully, where the processing:

• is necessary for the execution of the mandate, of a contract to which you are a party or for the execution of pre-contractual measures adopted upon request;

• is necessary to fulfill a legal obligation incumbent on the professional;

• is based on the express consent of the data subject, which is considered to have been given by

  signing this privacy policy, in relation to the sending by the Data Controller of newsletters, mailing lists, and other electronic communications relating to the professional assignment conferred or to seminars and/or specialist events also related to professional activity.

Consequences of failure to provide personal data

With regard to personal data relating to the performance of the contract to which you are party or relating to the fulfillment of a regulatory obligation (e.g., obligations relating to the keeping of accounting and tax records), failure to provide personal data will prevent the contractual relationship from being established.

Data retention

Your personal data, processed for the purposes indicated above, will be retained for the duration of the contract and, subsequently, for the time during which the professional is subject to retention obligations for tax or other purposes, as provided for by law or regulation.

Communication of data

Your personal data may be communicated to:

1. consultants and accountants or other lawyers who provide services for the purposes indicated above;

2. banks and insurance companies that provide services for the purposes indicated above;

3. entities that process data in compliance with specific legal obligations;

4. judicial or administrative authorities, for the fulfillment of legal obligations.

Profiling and dissemination of data

Your personal data will not be disseminated or subject to any fully automated decision-making process, including profiling.

Rights of the data subject

The rights granted to you by the GDPR include:

• ask the professional for access to your personal data and information relating to it; the correction of inaccurate data or the integration of incomplete data; the deletion of personal data concerning you (upon the occurrence of one of the conditions indicated in Article 17, paragraph 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article); restriction of the processing of your personal data (upon occurrence of one of the cases indicated in Article 18, paragraph 1 of the GDPR);

• request and obtain from the professional - in cases where the legal basis for the processing is the contract or consent, and the processing is carried out by automated means - your personal data in a structured and machine-readable format, also for the purpose of communicating such data to another data controller (so-called right to personal data portability);

• object at any time to the processing of your personal data in the event of particular situations affecting you;

• withdraw your consent at any time, limited to cases where the processing is based on your consent for one or more specific purposes and concerns common personal data (e.g., date and place of birth or place of residence), or special categories of data (e.g., data revealing your racial origin, political opinions, religious beliefs, health status, or sex life). Processing based on consent and carried out prior to the withdrawal of consent remains lawful;

• lodge a complaint with a supervisory authority (www.garanteprivacy.it).