PRIVACY POLICY

This privacy policy is drafted pursuant to article 13 of the EU Regulation no. 2016/679 (the “GDPR”) and describes purposes and modalities whereby the law firm Laward - Avvocati Associati (hereinafter referred to as “Laward” or also as the “Firm”) carries out the processing (collection, recording and utilization) of personal data of the users who visit the website www.laward.legal (hereinafter “Website”). This privacy policy is not applied to other websites, owned by third parties, although accessible through links on the Website pages.

Data controller

The controller of the personal data pertaining to the Website is the law firm Laward - Avvocati Associati, with registered office at 32100 Belluno, piazza Santo Stefano 7, tax code 01190850253.

The subject matter of the processing

Laward shall process selected personal data of users who interact with the Website’s services. The data controller processes personal, identification and non-sensitive data (such as, by way of example, the name, surname, address, phone number, e-mail – hereinafter “personal data” or “data”) which are communicated by the user through the contacts on the Website.

The type of data subject to the processing

Navigation data

These are navigation data that the computer systems, due to their operation, acquire automatically during the use of the Website, such as the IP address, domain names through which the users connect to the Website, URI (Uniform Resource Identifier) addresses, as well as the details (time, procedures used to submit requests to the server, file size, numeric codes) of the requests sent to the Website’s server, which make navigation possible.
These are information that are not collected to be associated with identified subjects or persons but, due to their intrinsic nature, through processing and in conjunction with data held by third parties, may allow the identification of users.
Navigation data are used for the sole purpose of obtaining anonymous statistics on the use of the Website, to check its functioning and to improve its structure and are deleted immediately after processing.
Navigation data may also be used in order to detect and check for any illegal activities that make prejudice to the Website and/or Laward.

Data provided by the users on a voluntary basis

The optional and voluntary sending by the users of communication to the contacts indicated on the Website implies the acquisition of the e-mail address and the other personal data contained in the communication. The GDPR and the Italian Legislative Decree no. 196 of June 30, 2003, as modified by the Legislative Decree no. 101 of August 10, 2018 (hereinafter the “Privacy Code”) provide that sensitive data (i.e. those revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or data concerning the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or a natural person's sex life or sexual orientation) can be legitimately processed only with the explicit consent of the data subject. Since the consent of each individual user is difficult to obtain by the Firm, the Firm invites all those who intend (i) to transmit their curriculum vitae and/or (ii) to submit requests for assistance and/or legal advice to the Firm, not to report any sensitive data in such communication and/or documents, which, if not, shall be immediately and definitively deleted and/or destroyed.

Purpose of the processing

Users’ personal data can be processed:
A. without users’ explicit consent (according to article 6, letters b) and c) of the GDPR), for the following purposes:
i. to manage and maintain the Website;
ii. to allow the user to use any service requested by the same;
iii. to participate through the Website in initiatives organized by the data controller (for example, events);
iv. to process a request of contact and/or a job application;
v. to fulfil the obligations established by the European Union law, Italian law and regulations, or by an order of a public authority;
vi. to prevent or discover fraudulent activities or malicious activities harmful to the Website;
vii. to exercise the rights of the data controller, for example the exercise of a right in court;
B. only with the specific and explicit consent of the user (pursuant to article 130 of the Privacy Code and article 7 of the GDPR), to send surveys, newsletters and/or invitations to events via e-mail or to register the user for events which are organized by the data controller or to which the data controller participates.
It should be noted that the legal basis for the collection and processing referred to in points A.ii, A.iii, A.iv and B is to be identified in the need of implementing the service expressly requested by users. The legal basis for the processing under points A.i, A.v, A.vi, A.vii has to be found in the need of protecting legitimate interests of the Firm or third parties.
The processing operations connected to the web services of this Website are handled by the personnel of Laward who, for this purpose, has been appointed as “Data Processor”, as well as by any third parties who act as "Processors" or “Data Controllers” in relation to the specific activities performed by the same.

Cookie

The Website may utilize some types of cookies. A cookie is a small piece of data sent from a website and stored in the user's web browser while the user is browsing. There are different types of cookies, some of them are designed in order to be a reliable mechanism for websites to remember stateful information (user’s data, preferences, interests), whilst others (so-called “session cookies”) are only used for the transmission of the session identifying data required to guarantee efficient searching on the Website or to perform services required by users.
In particular, the Website uses session cookies, which are not stored permanently on the user's computer and are deleted when the browser is closed. Their use is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow the safe and efficient exploration of the website. Their use is aimed at avoiding the use of other technologies that could compromise the privacy of users' browsing.
Other types of cookies, or similar technologies, may be used from time to time in order to permit the use of the Website or certain functions. Specific persistent cookies, which can be deleted at any time, may be used to track the language of the user’s computer system.
In case of session data and those data strictly necessary in order for the Website to perform, they must be necessarily supplied and the users’ consent is not required. Failure to supply such data may imply the impossibility of connecting to the Website and to browse it.
It should be noted that the majority of internet browsers are initially set to accept cookies automatically. The user can change these settings to block cookies or to alert that cookies are sent to the user's device. In case of different devices (for example computers, smartphones, tablets, etc.), the user must ensure that each browser on each device is adjusted to reflect their preferences regarding cookies. Please note that disabling cookies does not guarantee all the functionalities of the websites.

Voluntary provision of data

Notwithstanding the previous provisions regarding navigation data and cookies, users are free to supply their personal non-sensitive data in contacts and/or in communications with/to Laward. Failure to supply such data implies the impossibility to receive a reply.

Processing methods – Criteria and period of data conservation

Personal data shall be processed using automated tools, on the basis of logics strictly related to the purposes of processing, and for the time strictly necessary to achieve the purposes for which such data have been collected or, in any case, for the longer period of time envisaged or required by specific provisions of law and/or for the protection of the rights of the Firm.
Notwithstanding the foregoing, the period of retention of personal data for the analysis of any spontaneous application and to respond to users’ requests will be 12 (twelve) months, starting respectively from the receipt of the application and from the last contact with the user. It is understood that any subsequent professional relationships between the user and the Firm will be regulated, also in terms of protection of personal data, by specific and subsequent agreements between the parties.
Laward adopts specific security measures in order to prevent data losses, unlawful or incorrect uses of data and unauthorized accesses.

Rights of the data subject

Laward informs users that, at any time, if the legal requirements are met and within the limits thereof, the data subject can ask and obtain:

  • access to personal data;
  • the confirmation of the existence or not of personal data concerning the same (even if not registered yet), and their communication in an intelligible form, that is to say on a structured format, commonly used and readable by automatic devices;
  • data portability;
  • indication of the content and the origin of personal data, of the categories of data, of purposes and methods of processing, and of the logic applied to the processing;
  • the identification details of data controllers and data processors, and of those persons or categories of persons to whom the personal data may be disclosed, or who may become aware of such personal data;
  • information on the period of conservation of personal data;
  • the revocation of consent to the use and disclosure of personal data limited to cases in which the processing is based on the consent of the data subject for one or more specific purposes and concerns common personal data (for example date and place of birth or place of residence), or particular categories of data (for example data revealing the racial origin, political opinions, religious beliefs, health status or sexual life of the data subject). The treatment based on consent and carried out prior to the revocation of the same preserves, however, its lawfulness;
  • the updating, rectification and supplementing of data, as well as the deletion, transformation into anonymous form or blocking of any data processed in breach of the law, including those data which do not have to be stored in relation to the purposes for which they were collected or subsequently processed.
The user may also oppose, for legitimate reasons, the processing of such data, and may request the limitation on the processing of their personal data.
Furthermore, the user has the right to be informed if there is a violation of their personal data. Requests can be sent to the following e-mail address: privacy@laward.legal or by mail to Laward - Avvocati Associati, Piazza Santo Stefano 7, 32100 Belluno.
Users may also, in relation to the processing of personal data described in this Privacy Policy, send complaints to the Italian Data Protection Authority (www.garanteprivacy.it).
The Website’s Privacy Policy may be subject to periodic updates.