Informativa per il trattamento dei dati personali per BE Legacy
IDENTITÀ E DATI DI CONTATTO DEL TITOLARE DEL TRATTAMENTO
Nel rispetto del decreto legislativo n. 196/2003, come modificato dal decreto legislativo n. 101/2018 (“Codice Privacy”) e del Regolamento (UE) 2016/679 (“GDPR”), Bonelli Erede Lombardi Pappalardo – Studio Legale, (“BonelliErede” o lo “Studio”), in qualità di titolare del trattamento, La informa che tratterà i dati da Lei liberamente forniti al termine del rapporto di lavoro con lo Studio , oppure acquisiti dallo Studio stesso, tramite alcuni Suoi profili social o all’atto della richiesta di adesione al Portale BE Legacy (il “Portale”), al fine di creare un network di ex dipendenti, collaboratori, clienti o clienti prospect.
CATEGORIE DI DATI TRATTATI
BonelliErede potrà trattare i seguenti dati (i “Dati”) riferiti a lei: dati anagrafici e dati di contatto (nome, cognome, indirizzo, numero di telefono)
FINALITÀ, BASE GIURIDICA DEL TRATTAMENTO E NATURA DEL CONFERIMENTO DEI DATI
BonelliErede tratterà i Dati per le seguenti finalità:
Tale trattamento è necessario per dare corso alla sua richiesta di iscrizione e non necessita pertanto la richiesta di un apposito consenso.
Il mancato conferimento dei suddetti dati comporta l’impossibilità di iscriversi al Portale.
In particolare, BE può monitorare le modalità di utilizzo del Portale da parte dell’utente, rilevando i contenuti e le iniziative di maggiore interesse, al fine di inviare comunicazioni personalizzate e pertinenti rispetto alle preferenze manifestate.
Il trattamento per le suddette finalità viene effettuato sulla base del suo consenso (art. 6, par. 1, lett. a) GDPR).
Il conferimento di tali è libero e l’eventuale diniego del consenso al trattamento dei dati per questa finalità non pregiudica l’iscrizione al Portale.
MODALITÀ DEL TRATTAMENTO
Il trattamento dei Dati verrà effettuato nel rispetto dei principi di correttezza, liceità e trasparenza, con strumenti manuali, cartacei, informatici, telematici, automatizzati, anche atti a memorizzare, gestire o trasmettere i dati stessi, comunque idonei a garantire la sicurezza e la riservatezza dei dati.
PERIODO DI CONSERVAZIONE DEI DATI PERSONALI
I Dati verranno conservati, presso la sede di BonelliErede, per il periodo di tempo in cui Lei è iscritto al Portale.
Al termine di tale periodo i Dati verranno eliminati o resi in forma anonima.
AMBITO DI COMUNICAZIONE E DIFFUSIONE DEI DATI PERSONALI E TRASFERIMENTO ALL’ESTERO
I Dati potranno essere conosciuti ed utilizzati all’interno di BonelliErede, in particolare, a seconda dei compiti loro spettanti, dagli addetti delle strutture operative (marketing, risorse umane, ICT).
BonelliErede si avvale inoltre di alcuni fornitori di servizi nominati Responsabili del trattamento, in particolare da Aluminati Network Group Limited, fornitore del Portale.
DIRITTI DELL’INTERESSATO
Lei ha il diritto di ottenere la conferma dell’esistenza o meno di dati personali che la riguardano, e ha diritto di ottenere l’indicazione:
- dell’origine dei dati personali;
- delle finalità e modalità del trattamento;
- della logica applicata in caso di trattamento effettuato con l’ausilio di strumenti elettronici;
- degli estremi identificativi del titolare, dei responsabili e del rappresentante designato;
- dei soggetti o delle categorie di soggetti ai quali i dati personali possono essere comunicati o che possono venirne a conoscenza in qualità di rappresentante designato nel territorio dello Stato, di responsabili o incaricati.
Lei ha inoltre diritto di ottenere:
- l’aggiornamento, la rettificazione ovvero, quando vi ha interesse, l’integrazione dei dati;
- la limitazione del trattamento nei casi di contestazione sull’esattezza dei dati, opposizione al trattamento o alla cancellazione dei dati personali nei confronti del titolare, nonché per l’accertamento, l’esercizio o la difesa di un diritto in sede giudiziaria;
- la cancellazione, la trasformazione in forma anonima o il blocco dei dati trattati in violazione di legge, compresi quelli di cui non è necessaria la conservazione in relazione agli scopi per i quali i dati sono stati raccolti o successivamente trattati;
- l’attestazione che le operazioni di cui alle lettere f) e h) sono state portate a conoscenza, anche per quanto riguarda il loro contenuto, di coloro ai quali i dati sono stati comunicati o diffusi, eccettuato il caso in cui tale adempimento si rivela impossibile o comporta un impiego di mezzi manifestamente sproporzionato rispetto al diritto tutelato;
- in un formato strutturato, di uso comune e leggibile da dispositivo automatico, i dati personali forniti e di trasmetterli, direttamente o per mezzo del titolare, ad un altro titolare del trattamento (c.d. diritto alla portabilità dei dati).
Lei ha inoltre diritto di opporsi, in tutto o in parte:
- per motivi legittimi al trattamento dei dati personali che la riguardano, ancorché pertinenti allo scopo della raccolta;
- al trattamento di dati personali che la riguardano a fini di invio di materiale pubblicitario o di vendita diretta o per il compimento di ricerche di mercato o di comunicazione commerciale.
Qualora ritenga che i suoi diritti siano stati violati dal titolare e/o da un terzo, Lei ha il diritto di proporre reclamo all’Autorità per la protezione dei dati personali e/o ad altra autorità di controllo competente in forza del GDPR.
Per l’esercizio dei diritti di cui sopra o per maggiori informazioni circa il trattamento dei suoi dati, si potrà rivolgere Data Protection Officer (“DPO”)[1] contattabile al seguente indirizzo e-mail: Dpo@belex.com.
[1] Di cui all’art. 37 e ss. GDPR.
Privacy notice for BE Legacy
IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER
In accordance with the Italian Privacy Code[1] and the GDPR,[2] this notice is to inform you that we, Bonelli Erede Lombardi Pappalardo Studio Legale (“BonelliErede”), process personal data and other data that you voluntarily provide at the end of your employment relationship with us, or that we otherwise acquire through your social network profiles or when you request to join the BE Legacy Portal (“Portal”), in order to create a network of former employees, professionals, clients and prospect.
Our head office is at Via Michele Barozzi 1, 20122 Milan, Italy.
DATA PROCESSED
We may process your personal details and contact data (e.g., name, surname, email address, and phone number.
PROCESSING PURPOSES AND LEGAL BASIS, AND NATURE OF PROVIDING DATA
We process the data you provide for the following purposes:
- the personal details and contact data referred to in section 1 are processed to enable you to register on the Portal.
This processing is necessary to fulfil your request to register and thus does not require us to ask for your specific consent.
If you do not provide the abovementioned data, you will be unable to register on the Portal.
- Your contact details and personal data may also be processed for the purpose of sending you personalized communications (e.g., event invitations, newsletters, etc.).
In particular, BE may monitor how you use the Portal, identifying the content and initiatives you find most interesting, in order to send you personalized and relevant communications based on the preferences you have expressed.
The processing for the above purposes is carried out on the basis of your consent (Art. 6, para. 1, lett. a) GDPR). Providing such data is voluntary, and any refusal to give consent for processing your data for this purpose does not affect your registration on the Portal.
METHODS OF PROCESSING
Data collected as part of your registration on the Portal are processed manually or electronically, including using automated tools (e.g., for data storage, management and transmission). Our methods ensure the security and confidentiality of data, in compliance with the principles of fairness, lawfulness and transparency.
DATA RETENTION PERIOD
The data are stored at BonelliErede’s premises for the time that you are registered on the Portal.
At the end of this period, the data will be deleted or anonymised.
DATA DISSEMINATION AND DISCLOSURE, AND DATA TRANSFER ABROAD
Data collected as part of your registration on the Portal may be known and used within BonelliErede, particularly by certain staff members depending on their tasks and the departments they work in (e.g., marketing, HR and ICT).
Furthermore, some of our service providers have been appointed as external data processors, including Aluminati Network Group Limited, which provides the Portal.
YOUR RIGHTS
You have the right to obtain confirmation as to whether personal data concerning you exists and, if existing, to be informed of:
- the origin of the personal data;
- the purposes and methods of the processing;
- the logic applied to the data processed electronically;
- the identity of the data controller and the data processors; and
- the identity of the individuals or categories of individuals to whom your personal data may be sent or who may acquire your data as appointed representatives of BonelliErede in Italy or as individuals authorised to process your data.
You also have the right to:
- have your data updated, rectified and/or supplemented;
- have processing restricted in the event you contest the accuracy of the personal data, object to the processing or erasure of the data, or require the data for the establishment, exercise or defence of legal claims;
- have any unlawfully processed data erased, anonymised or blocked, including data whose storage is not necessary for the purposes for which they were collected or subsequently processed;
- obtain a declaration attesting that the people/companies we communicate or disseminate your data to have been notified and given full details of any operations under points a) and c) carried out, unless this proves impossible or implies an effort that is clearly disproportionate to the right to be protected; and
- receive your data in a structured, commonly used and machinereadable format, and transmit the data to another controller yourself or have us (as data controller) transmit them to another controller (i.e., right to data portability).
You also have the right to object to the processing of your personal data in whole or in part:
- when you have legitimate grounds to do so, even if the data are relevant to the purposes for which the data were collected; and/or
- when your data are being processed for the purpose of sending advertising material, for direct sales purposes, or for the purpose of conducting market or commercial communication surveys.
If you believe that your rights have been violated, you may file a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati
Personali) and/or any other competent supervisory authorities under the GDPR.
To exercise your rights or seek clarification on the above, please email our data protection officer[3] at dpo@belex.com.
[1] Italian Legislative Decree 196/2003, as amended by Italian Legislative Decree 101/2018.
[2] Regulation (EU) 2016/679.
[3] See Art. 37 et seq. GDPR.
Service Provider
This service is operated under contract by Aluminati Network Group Ltd. (Aluminati) acting under instruction as our Data Processor under the Data Protection Acts 1998 and 2018. Aluminati will process personal data strictly for the purposes of operating this service.
Aluminati is registered with the Information Commissioner under membership number Z8393842.
be Legacy Social Sign In: Privacy Notice
This privacy notice provides you with details of how we (Aluminati Network Group Ltd) collect, process and store your personal data when you access the Aluminate service (the ‘Service’) via this third-party application (‘App’).
LAWFUL BASIS AND PURPOSE OF PROCESSING
Aluminati processes your data in order to perform its contract, with the institution or organisation, to provide you with the Service. We will process your information for the following purposes;
- To verify your details in order to provide you with access to the Service
- To improve your onboarding experience onto the Service
- To increase your accessibility to the Service
We will only use your personal data for the purposes listed above unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for a purpose unrelated to the purpose for which we collected the data, we will notify you and we will explain the legal ground of processing. We may process your personal data without your knowledge or consent where this is required or permitted by law.
By accessing the Service through this App, you agree to the collection and use of information in accordance with this privacy policy.
If you are unhappy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (www.ico.org.uk) however we would be grateful if you would contact us first if you do have a complaint so that we can try to resolve it for you.
Email: privacy@aluminati.net
Tel: 01638 676 232
WHAT PERSONAL DATA WE COLLECT
Personal data is any information capable of identifying an individual and does not include anonymised data. We may ask you to provide us with or automatically collect certain personally identifiable information that can be used to contact or identify you, including:
- Identity & Contact Data may include your first name and last name
- Contact Data may include your email address
- Technical Data may include your cookie data, information such as your device's internet protocol address (e.g., IP address), browser type, browser version, the time and date of your visit, unique device identifiers and other diagnostic data
We do not collect any sensitive data about you including details about your race or ethnicity, religious beliefs, sexual orientation, political opinions, trade union membership, health, criminal convictions and offences.
YOUR RIGHTS
For data processed under the lawful basis of ‘performance of a contract’, you;
- DO have the right to; be informed, request access, data portability, data rectification, restriction processing, erasure if there is no overriding ‘legitimate interest’ for continuing to process the data
- DO NOT have the right to object
To exercise these rights please email privacy@aluminati.net. We will likely have to request information from you to confirm your identity in order to ensure we are following instructions from the actual data subject concerned. No fee is payable for the exercise of these rights unless the request is clearly unfounded, repetitive or excessive in which case we may also legally refuse your request.
For more information on individual rights under the GDPR, go to the following site: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr
You have the right to lodge a complaint to the supervisory authority (the Information Commissioners Office); if you believe we are processing your data unfairly.
DISCLOSURES OF YOUR PERSONAL DATA
We may have to share your personal data with third parties including:
- Our service providers who provide IT, hosting and system administration services
- Professional advisers including lawyers, bankers, auditors, insurers, financial advisers and corporate finance advisers who provide consultancy, banking, legal, insurance, accounting and financial services
- HM Revenue & Customs, regulators and other authorities based in the United Kingdom and other relevant jurisdictions who require reporting of processing activities in certain circumstances
- Third parties to whom we sell, transfer, or merge parts of our business or our assets
- We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions.
INTERNATIONAL TRANSFERS
We make active efforts to engage in service providers who are based within the European Economic Area (EEA). Where this is not possible, we may need to engage service providers resulting in your personal data being transferred outside the EEA. Whenever we transfer your personal data out of the EEA, we do our best to ensure a similar degree of security of data by ensuring at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission; or
- Where we use certain service providers, we may use specific contracts or codes of conduct or certification mechanisms approved by the European Commission which give personal data the same protection it has in Europe.
If none of the above safeguards is available, we may request your explicit consent to the specific transfer. You will have the right to withdraw this consent at any time.
In addition to the above, your data may be temporarily transferred outside of the EEA during the course of our staff travelling abroad with personal data (for example meeting contact information and emails). There are appropriate safeguards in place to ensure the protection of your data - including encryption rendering the data unreadable in the case of loss or theft.
DATA SECURITY
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know such data. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
DATA RETENTION
We will only retain personal data for as long as we need to fulfil the specified purposes we have collected it for as well as for satisfying legal, accounting, audit, or reporting requirements.
By law, for tax purposes, we have to keep certain data about our customers for six years after they cease being customers.
COOKIES & THIRD PARTY LINKS
We use cookies as described in the section above on how we use your data. If you choose to disable cookies in your browser certain parts of our service will cease to function.
Links from our website or other communications may link to third-party destinations over whom we have no control and do not take responsibility for their privacy statements or behaviours. Please read the privacy notice of these sites to understand their data policies.
Name and contact details of the data controller and data protection officer
Data Controller: Aluminati Network Group Ltd.
Address: Hyperion House, The Oaks, Newmarket, Suffolk, CB8 7XN
Data Protection Officer: Daniel Watts
Contact Details: privacy@aluminati.net