PRIVACY POLICY (Art 13 et seq. of the EU Regulation 2016/679 (GDPR)

The General Data Protection Regulation (EU) 2016/679 (GDPR) regulates the protection of individuals with regard to the processing of personal data and the rules governing the free circulation of such data. The processing of personal data relating to a person (Data Subject) must be based on the principles of fairness, lawfulness and transparency, as well as the protection of their privacy and rights.

Our Company, as Data Controller, will process the personal data you provide in compliance with the law, with the utmost care, implementing effective management procedures and processes to ensure the protection of your personal data.

This document describes the policy required under Article 13 et seq. of the GDPR in relation to the services offered by Centro Studi Alma Iura on this website (‘Website’).

 

1. Data controller

The Data Controller is Centro Studi Alma Iura srl, SB– Matematica e Diritto per Banche e Istituti Finanziari, c.f. e p.iva 03487950234, numero REA VR-340179, based in 37122 – Verona (VR), Stradone Porta Palio n. 66 (“Centro Studi”), tel. 0458033707, PEC: almaiura@legalmail.it, email: amministrazione@almaiura.it.

 

2. Categories of personal data processed and of Data Subjects

Our Centro Studi processes the personal data of the website users, including the data of the legal representatives, corporate contacts or private parties that intend to use the services offered on the Website and of the subjects who are interested in the services offered by our Centro Studi.

Centro Studi collects personal data directly from the data subjects, from the relevant companies in cases of event registrations made on behalf of the company to which they belong, as well as from public sources containing personal data whose re-use is authorised by law.

Depending on the circumstances the following personal data may be processed:

• personal data, tax identification code, VAT number, unique ID/PEC, name/label/denomination, registered office, residence and domicile, role in the company, and contact data necessary for the registration in the events, and also necessary to process possible requests you may submit to us;

• Navigation data: the IT systems and the software procedures used to operate the websites acquire, during their normal work, some personal data whose transfer is necessarily inherent in the use of Internet communication protocols. This is a type of information, which is not collected to be associated with the identified subjects. However, by their very nature, and as they can be processed and combined with data controlled by third parties, these data could help identify the users. This data category includes IP addresses or the domain names of the computers used by people who visit the website, and then the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained as a response, the numerical code indicating the state of the answer given by the server (success, error, etc.), and other parameters related to the operational system and to the IT environment of the user. For further details, please refer to the Cookie policy.

 

3. Purposes and legal basis for data processing

The personal data of those who use the services of Centro Studi, including those who register for the various events, are processed for the following objectives:

• Pursuant to Article 6, paragraph 1, letter c) of the GDPR, to comply with legal obligations and current legislation, for example, where a fee is required for services and the related management of accounting and tax obligations, as well as the keeping of related contractual documentation. The provision of data for these purposes is mandatory and, if not provided, it will not be possible to perform the requested services;
• Pursuant to Article 6, paragraph 1, letter b) of the GDPR, in order to send contract proposals or to fulfil contract obligations undertaken in relation to data subjects, to enable registration for events and related obligations, and to respond to requests for information about our services. The provision of data for these purposes is necessary and, if not provided, it will not be possible to conclude or properly perform the contract;
• With your prior consent, pursuant to Article 6, paragraph 1, letter a) of the GDPR, in order to send newsletters, promotional, commercial and advertising material or material relating to events and initiatives of the Data Controller in the context of the activities referred to in the previous points by email. The provision of data for these purposes is fully optional and does not affect in any way the pursuit of the above-mentioned additional purposes. You may freely withdraw your consent at any time, as indicated at point 8 below, without prejudice to existing relationships;
• Pursuant to Article 6, paragraph 1, letter f) of the GDPR, for the protection of legitimate interests, such as the defence and protection of one’s rights, including in the event of complaints or disputes, as well as for any statistical purposes;

Furthermore, if you request to subscribe to our newsletter and to receive our promotional, commercial and advertising communications or communications relating to events and initiatives organised by the Data Controller by completing the appropriate form or section on the Website, we will process your email address and your name, if provided, for such communications in accordance with Article 6, paragraph 1, letter b) of the GDPR. The provision of your email address is essential in order to receive our communications. Any information useful to Centro Studi to understand where the contact originates from is purely optional. You may request cancellation at any time.

Finally, in relation to the personal data of one’s own suppliers (or related to corporate contacts, legal representatives, personnel, etc., that become known because of the implementation of the contract), Centro Studi will process such data with the following purposes:

• Pursuant to Article 6, paragraph 1, letter c) of the GDPR, in order to comply with legal obligations, such as tax obligations;
• Pursuant to Article 6, paragraph 1, letter b) of the GDPR, for the execution and management of the contract and related contract obligations (including payment of fees);
• Pursuant to Article 6, paragraph 1, letter f) of the GDPR, for the protection of its legitimate interest in protecting its rights.

 

4. Methods of data processing and data provision

Personal data will be processed using tools, including IT tools, and procedures that guarantee security and confidentiality. This may be done directly and/or through third parties, either manually using paper documents or using IT tools or electronic instruments, including automated procedures.

For the purposes of proper management of the relationship and compliance with legal obligations, the data may be included in the Data Controller’s internal records and, if necessary, in the documents and registers required by law. Specific security measures will be taken to prevent data loss, illegal or incorrect use, and unauthorised access.

Centro Studi has adopted all the minimal security measures, envisaged by law, and, taking inspiration from international standards, has adopted further security measures in order to minimize the risks related to privacy, availability and integrity of the collected and processed personal data.

 

5. Preservation of personal data

The personal data necessary for the provision of the requested services will be stored for the entire duration of the service and, subsequently, for the period during which the Centro Studi is subject to conservation obligations for tax purposes (maximum 6 years) or for other purposes, as envisaged by law or regulations (e.g. 10 years from the last recording of accounting documents) or for the protection of its rights (10 years from the termination of the contract).

In the case of data processing for marketing purposes, the data is kept until consent is withdrawn. If, during the course of a contractual relationship, data is processed that is not related to the administrative and accounting obligations attached to it, such data will be kept for the time necessary to achieve the purpose for which it was collected and then immediately deleted.

Personal data is stored on servers available to Centro Studi, located at hosting providers appointed as data processors and acting in accordance with the instructions given by Centro Studi.

 

6. Access, communication and disclosure of personal data

Personal data can be accessed both by the staff of Centro Studi, in charge of the technical management of the Website, of contacts and commercial and promotional activities, and also by the staff of the administrative office, in relation to the data used to have access to the services available on the Website. The staff has been properly trained and they have access to the site based on the principle of functional requirement, necessary to carry out their specific working activities (for example, digital function, administration).

Your personal data can be communicated to the following subjects, that act as independent data controllers:

• consultants, accountants, or lawyers who provide services that are functional to the above-mentioned purposes;
• banks and insurance companies that provide services that are functional to the above-mentioned purposes;
• entities that process data in compliance with specific legal obligations;
• judicial or administrative authorities, to comply with legal obligations;
• third parties in the event of any reorganisation, restructuring, merger or sale of the company.

Moreover, in some cases, we engage other entities to act on our behalf and based on specific instructions that we provide. These entities act as data processors, and include:

• Subsidiaries/associated companies of Centro Studi, when necessary for the processing and storing of data, the provision of access to our services, provision of assistance, improvement of services and/or development of the related contents;

• other companies, agents and firms that provide services and assistance to the Data Subjects;
• companies that provide hosting services and that manage the website in relation of technical access, maintenance and management of the web server;
• subjects that support Centro Studi in the organization and delivery of events;
• subjects that support Centro Studi in the delivery of promotional communication and newsletters.

Centro Studi will not make public any personal data of the Data Subjects. However, Centro Studi can publish on the Website or on other channels communicated to the Data Subject when defining the terms of cooperation related to the participation in the event as a speaker, the name, the position, and other information that the speaker has accepted to make public and share with Centro Studio. It is therefore excluded that Centro Studi may disclose such information to unspecified parties, also by making it available or accessible for consultation.

Moreover, Centro Studi does not sell, offer, or make available your personal data to third parties for economic reason.

The personal data of suppliers can be communicated to the relevant authorities or entities, when necessary to fulfil their legal obligations with credit institutions, legal and finance advisors for the management of the related cases or possible litigations.

 

7. Transfer of personal data

Personal data shall not be transferred to countries outside the European Union.

 

8. Data subject rights

Pursuant to Articles 15 et seq. of the GDPR, the Data Subject has the right to obtain confirmation of the existence or otherwise of personal data concerning himself/herself, even if not yet recorded, and to access the personal data and the following information:

1. The purposes of the processing;
2. The categories of personal data subject to processing;
3. The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are based in third countries or if they are international organisations;
4. Where possible, the period for which the personal data will be stored or, if that is not possible, the criteria used to establish that period;
5. Where the data are not collected from the data subject, any available information concerning their source;
6. The existence of an automated decision-making process, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, significant information about the logical process involved, as well as the importance and the likely consequences of such processing for the Data Subject. Please note that Centro Studi does not perform this type of processing activities.

If data are transferred to a third country or to an international organisation, the Data Subject has the right to be informed about the existence of appropriate guarantees under Art. 46 of GDPR.

The Data Subject has the right to ask Centro Studi to correct or delete, also partially, personal data or to limit the processing of personal data concerning himself or herself or to object, entirely or partially, to their processing.

The Data Subject has also the right to receive personal data concerning himself/herself in a structured, commonly used and electronic format and to transmit those data to another controller (right to data portability), in cases where data have been provided for contractual purposes or on the basis of consent.

The Data Subject has the right to withdraw his/her consent at any time. Consent withdrawal does not affect the lawfulness of data processing based on consent before its withdrawal.

To exercise these rights, please contact Centro Studi at the addresses provided at point 1.

In relation to the newsletter and advertising/informational/promotional communications service, you may also request the deletion of the data provided by clicking on the links at the bottom of each communication you receive.

Please note that if the Data Subject believes that their data are being processed in violation of the law, they may lodge a complaint with the competent supervisory authority (Italian Data Protection Authority – www.garanteprivacy.it).

 

9. Changes to the privacy policy

This privacy policy may be subject to changes over time – including changes related to the possible introduction of new regulations, the updating or delivery of new services, or technological innovations. Users/visitors are therefore invited to regularly check this page. Updates will be posted on this web page and made constantly available, so that data subjects can be fully informed about the use made of their personal data provided through the website or through other collection channels.

 

Latest update: 11/5/2022