Art. 13 Reg. (EU) 2016/679
Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter the “GDPR”), all members are hereby informed, with regard to the personal data provided by them, as follows:
Data Controller and contact details. The Data Controller is the Camera degli Avvocati Internazionalisti, with registered office at Studio Legale Cocuzza & Associati, Via San Giovanni sul Muro 18, Milan, email: info@camerainternazionale.org.
Definition and methods of data processing. “Processing of personal data” means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (Art. 4(2) GDPR). The processing of personal data shall be carried out in accordance with the principles of lawfulness, fairness, transparency and confidentiality, and in general in compliance with the GDPR. Processing is carried out by the legal representative of the Camera degli Avvocati Internazionalisti and/or by authorised persons within the scope of their respective duties, where appointed. Personal data shall be processed by the Controller in paper and electronic form.
Purpose of processing and legal basis. The personal data provided by members shall be processed by the legal representative of the Camera degli Avvocati Internazionalisti and its authorised persons solely for purposes relating to the activities of the Camera and the related tax and/or administrative obligations. In particular, identification data and tax code are used for maintaining the Register of Members, while telephone numbers and email or certified email (PEC) addresses are used for communications with members. The legal basis for processing is the data subject’s adherence to the membership agreement. With regard to the possibility for the Data Controller to publish the personal data provided within a restricted area of the association’s website and to send promotional communications, the legal basis for processing is the data subject’s consent.
Communication of data. Personal data may be disclosed to authorised persons responsible for processing and may be communicated, for the purposes referred to in point 3), to public and private entities where such communication is necessary for the proper fulfilment of those purposes.
Data transfer. The Data Controller does not intend to transfer personal data to a third country or to an international organisation.
Data retention period. Each member’s personal data shall in any case be retained for the entire duration of membership and for the following 10 years, as required by applicable accounting and tax regulations. Personal data relating to publication on the association’s website and for promotional purposes shall be processed for the entire duration of membership or until consent is withdrawn. Data entered in the Register of Members shall remain therein for the entire period during which the Register must be retained, but shall be accessible to members only with regard to the register relating to the current year.
Provision of data. The provision of data is necessary for the organisation and performance of the activities of the Camera degli Avvocati Internazionalisti and for the fulfilment of the obligations indicated in points 3 and 4. Therefore, failure to consent to the processing of data within the above limits, or subsequent withdrawal of consent, or a request for erasure or restriction of processing, shall necessarily result in the rejection of the application for membership for applicants or the termination of membership for existing members. Consent to the publication of personal data on the association’s website or for promotional purposes is optional and may be withdrawn at any time by the data subject.
Rights of the data subject. The GDPR grants the data subject specific rights, including the right to obtain from the Data Controller confirmation as to whether personal data concerning them exist and to have such data made available in an intelligible form; the data subject has the right to be informed of the origin of the data, the purposes and methods of processing, the logic applied to processing, the identification details of the Data Controller and of the entities to whom the data may be communicated; the data subject also has the right to obtain the updating, rectification or completion of data, the erasure, anonymisation or blocking of data processed unlawfully; the data subject has the right to object, for legitimate reasons, to the processing of data. In any case, the provisions set out in point 7, second paragraph, remain unaffected.
Right to lodge a complaint. The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
Dissemination of data and profiling. Personal data are not subject to automated decision-making processes, nor to profiling, nor to dissemination.
