Privacy

INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA

This notice describes the processing of personal data of guests and users of LCA Studio Legale’s internet website (www.lcalex.it: the “Website”), as well as of those who decide to attend events, activities and initiatives promoted through the Website (together, the “Users”).

LCA may modify this privacy policy to adapt it to future extensions or future changes of the Website or services offered. In the case of significant changes, LCA will publish a communication on the Website and/or send an email notification to report the changes and collect a possible request to exercise the rights recognised by the legislation on personal data protection.

   1. DATA CONTROLLER

The data controller is LCA Studio Legale, with legal office in 20121 – Milano (MI), Via Della Moscova 18, Italy, VAT N. 04385250966 (“LCA”).

   2. PERSONAL DATA CATEGORIES

   2.1 Personal data provided by the Users

The personal data gathered through the Website are the data communicated by the Users through the filling of the forms on the Website or by sending a request to LCA at the addresses indicated on the Website.

The data collected include identification and contact data of the Users (name and surname, email address, telephone number), personal data inserted in the communications and requests sent to LCA, as well as other data necessary to answer and to carry out specific Users’ requests.

We recommend Users to communicate only data that are updated, pertinent and not exceeding the specific purposes of the processing. If Users find themselves in the necessity to communicate data of third parties, we remind Users to fulfill legal requirements relating to personal data protection and, particularly, to promptly inform third parties of the communication of their data to LCA, and of the characteristics of the processing by LCA.

Any unnecessary data will be immediately deleted or anonymised.

   2.2 Navigation data

For every access to the Website, the systems automatically record and analyze the access data (IP address of the provider, information on the used browser, visited pages, date, time and duration of each visit). Data are automatically collected through the Website and do not require any action by the User.

The data collected are exclusively anonymous and aggregated and they do not allow any possible identification of the Users: they allow only to detect and resolve possible technical problems.

   3. PURPOSES OF THE PROCESSING

Personal data of the Users (“Data”) might be processed for the following purposes.

   3.1. Newsletter or sectorial mailing list registration

The Data collected through the filling of the registration form to the newsletter service – or in order to receive any possible specific sectorial communication relating to sectorial mailing list services, which you have been invited or have required to be registered to (such as Art mailing list) – (name, surname, company, e-mail address) will be processed to send communications for information and academic purposes on the activity of LCA, including possible invitations to events and/or conferences organized and/or sponsored by LCA also in collaboration with third parties, or in which the lawyers of LCA are involved as speakers.

The provision of Data is necessary to register to and benefit from the newsletter or sectorial mailing list services: therefore, in case of refusal or if the User does not communicate the requested data, the receiving of LCA’s newsletter or sectorial communication will not be possible.

The User may revoke his/her registration to the newsletter or sectorial mailing list at any moment, following the procedure specified in the endnotes of each newsletter/sectorial communication or by sending a specific communication to LCA at the addresses indicated in paragraph 7.

The processing is necessary for the performance of a contract to which the User is party and/or in order to take steps at the request of the User prior to entering into a contract, as well as LCA’s legitimate interest in providing constant updates on relevant news in the area of interest of its clients or potential clients. Such legitimate interest does not prejudice the rights and freedoms of the data subjects, since the processing concerns data not belonging to special categories of personal data and is limited to sending communications and updates relating to the sector in which the data subject carries out its professional activity, or of its interest.

   3.2. Event registration, follow-up and simultaneous newsletter registration

The Data collected (name, surname, company, e-mail address) through the filling of the registration form to the events promoted on the Website or on online platforms of the data controller (i.e. LinkedIn) will be processed for: (i) the participation of the User to the requested event and the receiving of follow-up information related to them; and (ii) with the Users consent provided through the box at the bottom of the registration form on the different communication channels or online platforms, for sending LCA’s newsletter.

   3.2.1 Participation to the events and follow-up

The events can be organised and/or sponsored by LCA, also in partnership with third parties, or will involve LCA’s professionals as speakers.

In this context, the Data can be communicated to other public and private parties, involved in management and organizational activities, and/or to suppliers of necessary and accessory services (i.e. speakers, hostesses, communication companies in charge of sending service communications on the events). These parties will process the data, as appropriate, as independent data controllers or as data processors in virtue of a specific assignment conferred by LCA. The provision of Data is necessary to complete the registration to the event: therefore, in case of refusal or if the User does not communicate the requested data, the attendance to the event will not be possible.

The processing is necessary for the performance of a contract to which the User is party and/or in order to take steps at the request of the User prior to entering into a contract, for compliance with relating legal obligations to which LCA is subject, and, with respect to the sending of follow-up relating to the subjects covered during the event, the processing of the User’s Data finds its legal ground on the legitimate interest of LCA in promoting its expertise and activities in those subjects. This legitimate interest of LCA is deemed to be reasonable and in accordance with the User’s interest of being informed and up to date on the news and LCA activities in the field of the subjects covered during the event.

In case of registration of the User to events and/or activities organised and/or sponsored (also) by third parties other than LCA and upon the User’s consent (that can be expressed when sending the registration request to each event), the Data could be communicated also to such third parties, who will act as independent data controllers, according to their personal data protection policies that such third parties will send to Users in the respect of the deadlines set by the law. Such consent is merely discretional, and any refusal will not affect the registration of the User to the event. Such consent can be revoked at any time, by sending a specific communication to LCA at the addresses indicated in paragraph 7, without prejudice to the lawfulness of the processing based on the consent given before the revocation.

   3.2.2 Sending of LCA’s newsletter

If the User gives its consent through the box at the bottom of the registration form, present on the Website or in the different online platforms (such as, for example, LinkedIn),  the Data collected on the occasion of the participation to the events promoted through the Website or the platforms will also be processed for sending LCA’s newsletters via email.

Such consent is merely discretional, and any refusal will not affect the registration of the User to the event. Such consent can be revoked at any time, by sending a specific communication to LCA at the addresses indicated in paragraph 7, without prejudice to the lawfulness of the processing based on the consent given before the revocation.

The above-described data processing is not necessary to participate to events promoted on the Website, and any opposition and/or revoke of the consent to the reception of such communications will not have any consequence for the User.

   3.3. Management of unsolicited job applications

The Data collected through the filling of the recruiting form (name, surname, telephone number, email address, curriculum vitae and possible cover letter) on the Website at https://www.lcalex.it/en/contacts/recruiting/, will be processed only for evaluating candidates’ profiles and for scheduling an interview (if needed).

The communication of Data marked with an asterisk (*) is necessary in order to reply to candidates’ applications: consequently, in case of failure in providing such Data, LCA will not be able to evaluate the professional profile and the establishment of any possible collaboration.

The provision of Data included in the cover letter is merely discretional and any failure in their communication will not affect the candidate’s application.

The processing is necessary for the performance of a contract to which the User is party and/or in order to take steps at the request of the User prior to entering into a contract, and for compliance with relating legal obligations to which LCA is subject.

   3.4. Reply to Users’ requests

The Data will also be processed to reply to requests that Users may send to addresses available on the Website. For this purpose, Users need to communicate their contact details as, in their absence, it will not be possible for LCA to reply.

The processing is necessary for the performance of a contract to which the User is party and/or in order to take steps at the request of the User prior to entering into a contract, and for compliance with relating legal obligations to which LCA is subject.

LCA has signed a partnership agreement with IAA Law Firm, with registered office in 136 Allenby Street, Down Town Beirut, Lebanon (IAA). IAA is also active in Dubai and DIFC as “IAA Middle East Legal Consultants LLP” (IAA Middle East). LCA does not process Data included in direct communications to and/or related to the fields of competence of IAA and IAA Middle East, who will act as independent data controllers. For others information about the partnership between LCA, IAA and IAA Middle East visit the page https://www.lcalex.it/legal-notice/.

Any request concerning IAA and IAA Middle East should be received by LCA will be forwarded to IAA and IAA Middle East and, therefore, any included Data will be transferred towards Countries that do not benefit from an adequacy decision by the European Commission and do not provide an appropriate level of personal data protection: the data transfer shall take place, in this case, in order to take steps at the request of the User prior to entering into a contract.

   4. MODALITIES OF THE PROCESSING

The Data will be processed through electronic and manual means by LCA’s staff and associates, and/or by companies duly appointed as data processors and provided by LCA with detailed operative instructions, especially concerning the adoption of minimum safety technical and organizational measures.

The whole list of data processors is stored at the Data Controller’s premises and shall be consulted upon request, to be forwarded to the addresses indicated in paragraph 7.

   5. DATA RECIPIENTS

The Data shall be communicated and transferred to the categories of entities as described in the purposes and in the modalities of the processing.

If necessary to achieve the purposes of the processing (and in virtue of the same legal basis), the Data can be transferred abroad also:

  • in case of events that take place outside Italy;
  • in case of a request regarding foreign jurisdictions.

The transfer of Data outside of European Union will take place – if towards countries that do not benefit from an adequacy decision by the European Commission and, therefore, do not provide an appropriate level of personal data protection – only (I) upon the adoption of appropriate guarantees such as, for instance, the subscription of clauses approved by the European Commission, or (II) under a derogation from the ban of transfer outside the European Union, such as, for example, upon the collection of informed and explicit consents of Users, or to the extent that is necessary to execute a contract between the User and LCA, or between LCA and a third party for the benefit of the User, or for the execution of pre-contractual measures adopted upon request of the User.

   6. RETENTION PERIOD

The Data collected and processed by LCA, for the purposes described in paragraph 3, may be retained in such a way that allows the identification of the Users for a period of time necessary to achieve the purposes of the processing and, in particular:

  • for the processing described in paragraphs 3.1. and2.2., i.e. to receive LCA’s newsletter, for a period of 36 (thirty-six) months from registration, extendable for further 36 months where the Users does not revoke its consent, through the link at the bottom of: (i) each e-mail sent; (ii) the e-mail that reminds the possibility to revoke the consent – sent one month before the deadline –, and (iii) the e-mail sent in case of a modification of this privacy policy;
  • for the processing described in paragraph 3.2.1., i.e. for the participation to the events promoted on the Website, for the entire duration of the event and for the following 6 months;
  • for the processing described in paragraph 3.3., i.e. for the evaluation of unsolicited job applications, for a period of 12 (twelve) months from the receipt of the application;
  • for the processing described in paragraph 3.4, i.e. to answer to any Users’ request, for a period of 12 (twelve) months from the last contact.

The Data will be stored for a longer period if necessary to fulfill legal obligations, or for the protection of LCA’s rights, until the expiry of the related prescription period.

   7. RIGHTS OF THE USERS AND CONTACT DETAILS

The Users may, at any time and within the limits in which the rights are applicable,: (I) obtain confirmation of the existence or non-existence of his/her personal data; (II) request the access to his/her personal data; (III) request the correction or cancellation of such data, or the limitation on their processing; (IV) oppose the processing, or revoke his/her consent to the processing, without prejudice to the lawfulness of the processing based on the consent given before the revocation; (V) receive in a structured, customary and machine-readable format his/her personal data provided to LCA, as well as request that such data are transferred to another data controller (right of personal data portability); (VI) lodge a complaint to the personal data protection authority or to the competent judicial authority.

The request to exercise such rights shall be sent to one of the following addresses:

  • Via email, to the address newsletter@lcalex.it;
  • Via fax, to the number +39 0276018478; or
  • Via registered mail to LCA Studio Legale, 20121, Milano (MI), Via Della Moscova 18.

Any request relating to data recipients or any clarification request regarding this information shall also be addressed to the same contact details.

   8. LINKS TO OTHER WEBSITES

This privacy information regarding the processing of personal data concerns only Data collected through the Website and with reference to purposes identified in paragraph 3., and it is not and shall not be deemed applicable to other websites consulted and/or that can be consulted through links and/or widgets (e.g. social networks): these further websites will process the Data as independent data controllers and according to their respective privacy information, whose consultation by the users is expressly recommended.