The hereby notification is provided pursuant to EU Regulation 2016/679 – “Data protection European Regulation” – and the Privacy Authority provision no. 229 of 8 May 2014 – Simplified Arrangements to Provide Information and Obtain Consent Regarding Cookies – to all those who interact with our web/digital services for the protection of personal data, accessible via internet through the following addresses www.studiomascetti.eu and www.studiomascetti.net, and provided via email through our newsletter. This notice is provided for these websites only, and not for other websites that may be consulted by the user through links on our website or in our newsletters.

The Owner, Mr. Andrea Mascetti, Attorney-at-law, respects users’ privacy and protects the personal data shared by the users themselves. In general, the user can browse the website without providing any additional information.

The collection and processing of personal data take place when necessary in relation to the execution of services requested by the user (for example, access to reserved area), or when the user himself decides to communicate his personal information to our Firm, through business card, email, etc.; in such circumstances, this privacy policy outlines the procedures for the collection and the processing of the user’s personal data.

Processing Owner

Following the consultation of this website, the data relating both to identifiable and unidentifiable users can be handled by the website Owner. The Processing Owner is: Mr. Andrea Mascetti, Attorney-at-law, Via Piave n. 2 – 21100 Varese (VA), tel. 0332.285993, email: studiomascetti@studiomascetti.eu.

Place of data processing

The processing related to the web/digital services of this site occurs at the above-mentioned premises and is taken care of only by technical personnel, or by persons in charge of occasional maintenance operations. The data related to the provision of the web service is provided on the web service provider’s web farm. No data collected via web shall be disseminated or notified to third parties. If necessary, the data related to the newsletter service may be processed by the personnel of the company responsible for the management and maintenance of the service, MailChimp (www.mailchimp.com), at the company’s registered office.

Types of processed data

1.1 Browsing data

During their normal exercise, the information systems and software procedures used for this website collect some personal data whose transmission is implied, in the Internet communication protocols. It concerns information that is not collected to be associated with specific individuals, but by their own very nature could, through the processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI addresses (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters related to the user’s operating system and IT environment. This data is used, for the time strictly needed, only to obtain anonymous statistical information on the website and to check its correct functioning. Such data could be used by competent authorities to ascertain responsibility in the hypothetical case of illegal practices conducted against the site.

1.2 Data provided voluntarily by the user

The optional, explicit and voluntary dispatching of email to the addresses indicated in this website or connected to the domain studiomascetti.eu or the filling and sending of forms/information requests entail the subsequent acquisition of the sender’s address, necessary in order to reply to the requests, as well as any other personal data included in the message or forwarded to Mascetti Law Firm. Specific summary information provided for particular services upon request will be progressively displayed on the website pages.

1.3 Specific data

The Owner does not require or collect, through this website, specific personal data (for example, information about racial or ethnic origin, political, religious or philosophical beliefs, sexual orientation or health data).

1.4 Cookies

A cookie is a small text file that some websites send to the user’s hard drive when the user visits the site. A cookie may contain information such as the user’s ID that the website uses to control the page views, but it may only contain the personal information provided by the user himself. A cookie cannot read data off the user’s hard disk or read cookie created by other sites. Some areas of the website use cookies to control how users browse the site and to offer services based on the users’ requests. If the user does not wish to receive cookies when browsing the site, he may set his browser to notify him when he receives a cookie, which gives him the option to decide whether or not to accept it. The user may also refuse all cookies and disable them on his browser, although some parts of the website will then no longer function correctly. In particular, if the user wants to access the reserved area of the site, which requires the registration data and a login password. However, the website does not intentionally collect any personal data about users and cookies are not used for the transmission of personal information, neither the use of the so-called persistent cookies of any type, or rather users’ tracing systems. The use of the so-called session cookies (which are not persistently stored on the user’s computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary for allowing a safe and efficient site exploration. The so-called session cookies used on this website avoid the use of other data processing techniques which could potentially reduce the confidentiality of the users’ navigation of the website and would not permit the acquisition of the user’s identifying personal information.

If the site and/or the newsletter contain sharing tools through social network sites, cookies can be installed by the relevant providers. These services are provided by third parties; the specific privacy policies are provided on the website of each interested party.

Optional nature of the disclosure of data

Apart from what has been specified with respect to navigation data, the user is free to provide the personal data indicated in the application forms or in any case indicated in contacts to request informative material or other communications. Failure to provide personal data may make it impossible to obtain the services requested. The collected data is used exclusively to send communications and informational materials related to the Firm.

Processing methods

Personal data is processed by automatic and manual tools, only for the time necessary to achieve the purposes for which it was collected. Specific safety measures are in place to prevent loss of data, illegal or improper use and unauthorized access.

Communication and/or disclosure of personal data

The personal data provided by users who request dispatch of informative material (mailing list, answers to questions, alerts, newsletter, information, etc.) is used only to perform the service or provision requested and is communicated to third parties only if:

It is necessary to fulfil the user’s request (for example, courier service for requested documentation and/or further information, etc.).
It is necessary for the purposes of the law.
There is an ongoing legal proceeding.
Any processing connected to this site web services is carried out by authorised Owner’s personnel only.

Rights of the interested parties

In accordance with the provisions of Chapter III, Section I, GDPR, the interested party may exercise the rights therein indicated. In particular:

Right of access – The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him is being processed, and, where that is the case, access to the personal data and the following information: purposes of the processing, categories of personal data concerned and period for which the personal data will be stored, recipients to whom the personal data may be disclosed (article 15, GDPR),
Right to rectification – The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him, and the right to have incomplete personal data completed (article 16, GDPR),
Right to erasure – The data subject shall have the right to obtain from the controller the erasure of personal data concerning him without undue delay, in the cases provided for by GDPR (article 17, GDPR),
Right to restriction – The data subject shall have the right to obtain from the controller restriction of processing, in the cases provided for by GDPR (article 18, GDPR),
Right to portability – The data subject shall have the right to receive the personal data concerning him, which he has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, in the cases provided for by GDPR (article 20, GDPR),
Right to object – The data subject shall have the right to object, on grounds relating to his particular situation, at any time to processing of personal data concerning him (article 21, GDPR),
Right to lodge a complaint with a supervisory authority – The data subject shall have the right to lodge a complaint with the Privacy Authority for the protection of personal data concerning him, Piazza di Montecitorio n. 121, 00186, Roma (RM).
The above-mentioned rights may be performed by sending written communication via email, fax or registered letter with acknowledgement of receipt to the contacts indicated in the section PROCESSING OWNER of the hereby notification.

Updating of the hereby notification

The Owner reserves the rights to change, in whole or in part, the hereby Privacy Policy at any time, in relation to the legal obligations. Please always refer to the latest version of the policy, to check for any possible changes.