PRIVACY POLICY

PRIVACY POLICY

In the following section, Ristuccia Tufarelli & Partners (hereinafter “Firm”) will inform you about the processing of your personal data collected through the  www.ristucciatufarelli.it website (hereinafter, the “Site”), in compliance with the applicable provisions on data protection. All processing operations are carried out by the Firm in compliance with applicable legislation on the protection of personal data and, in particular, with Regulation (EU) 2016/679 (hereafter “GDPR“), as well as the obligations of confidentiality that inspire our activity.

This information allows you to understand the nature of your personal data in our possession, the purposes and methods of processing, the retention period, any recipients, as well as the rights that are recognized to the data subjects.

Before browsing or providing us with your personal data, we invite you to read this Privacy Policy, as well as any additional specific information that may be provided with regard to particular services offered through the Site.

1.     Data controller

The Data Controller is the Ristuccia Tufarelli & Partners Law Firm with its registered office in Piazza Cavour, n. 17 – 00193, Rome. You can contact the Data Controller by email at ristuf@ristuf.it.

2.     Purpose and legal basis of the process

The Firm informs you that the Site performs a mainly informative function in relation to the operations through which it performs its activities. The Firm also states that the personal data you provide will be processed for the following purposes:

  • management of any requests for articles, newsletters, invitations to events, seminars or registration in distribution lists relating to the same;
  • management of requests for information or contact requests received;
  • sending of personal data recruitment activities with the Firm.
  • fulfillment of specific legal, fiscal, accounting and regulatory obligations, according to the provisions of the European Union legislation, by applicable laws or regulations, connected or instrumental to the performance of the browsing activity conducted by the user on the Site.

The processing of personal data communicated by you for the aforementioned purposes will be conducted upon release of your explicit, free and informed consent (Article 6, paragraph 1, letter a), GDPR). The processing will also be performed to fulfill an obligation under the law (Article 6, paragraph 1, letter c), GDPR).

Except as specified below for browsing data, users have the right to provide (or not), their personal data in the registration forms  on the Site or by email. Failure to provide data implies the impossibility for the Firm to send the user articles, newsletters and the requested information, as well as to examine the applications sent to the Firm and to register the user.

The processing of data for the sending of the Newsletter will be carried out exclusively upon your specific request, as better described below.

3.     Types of data processed

During your browsing and / or use of the Site the following types of data may be obtained.

Browsing data

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data the transmission of which is implicit in the use of internet communication protocols. The information is not collected to be associated with identified subjects, but by its very nature could, through processing and association with data held by third parties, allow to identify it. This category of data includes:

  • the IP addresses of the computers or devices you may use to connect to the Site;
  • addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources;
  • the time of the request, the method used to submit the request to the server;
  • the size of the file obtained in response;
  • the http response code of the server;
  • other parameters relating to your browser and / or operating system.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site, as well as to check its correct functioning. This data is deleted after processing.

The data could however be used to ascertain responsibility in case of any computer crimes against the Site or other users of the Web and / or for the prevention of crimes. Save this eventuality, at present, data on web contacts will not persist for more than 7 days.

Data provided voluntarily by the user

The Firm collects some personal data (name, surname, email address, telephone number, postal address, etc.) provided voluntarily by users of the Site through appropriate registration forms or forwarded to the Firm by e-mail.

Furthermore, the Firm, subject to your express consent, may process the personal data provided by you by sending your application through the “Careers” section of the Site

Cookies

Information on the use of cookies and related technologies used by the Firm can be found in the “Cookie policy

Newsletter

You can periodically receive the Firm’s Newsletter containing informative material in the subjects in which the Firm lends its activity.

The Firm’s Newsletter is sent free of charge and by e-mail if explicitly requested, by filling in the appropriate form on the Site and authorizing the Firm to process your personal data (such as name, surname, e-mail address).

We inform you that you can unsubscribe from the Firm Newsletter at any time by simply clicking on the appropriate link in each newsletter. Further information on the processing of personal data carried out by the Firm to perform the Newsletter service can be found in the “Newsletter Privacy policy”.

4.     Methods of processing personal data

The processing of your personal data, in accordance with the provisions of art. 5 of the GDPR, is carried out for the purposes referred to in paragraph 2 above and mainly by means of electronic or automated means, as well as in compliance with the current legislation on the confidentiality and protection of personal data.

The processing connected to the use of the Site is only handled by personnel authorized by the Firm, or by persons in charge of occasional maintenance operations. The aforementioned processing operations are also performed by parties who provide services for the management of the Site and the information system of the Firm and who act as Data Processor or as independent Data Controllers. The updated list of data processors may be requested by writing to the Data Controller at ristuf@ristuf.it. The data collected through the Site are stored on the servers of the hosting service provider (Aruba) of the Firm, whose servers are located in Italy.

We inform you that, in consideration of the processing performed and the systems used by the Firm, the latter has adopted appropriate security measures aimed at regularly monitoring said systems in order to verify the correctness and regularity of the processing operations carried out through the same.

Your personal data will not be disclosed to third parties or disseminated.

5.     Transfer of data

The personal data you provide may be transferred abroad, for the fulfillment of obligations imposed by laws, regulations or European legislation, limited within the European Union or the European Economic Area.

The Firm undertakes to constantly monitor the correctness of the data transferred, in order to guarantee the legality and regularity of the processing operations carried out on your personal data.

Your personal data will not be transferred to third countries in any way.

6.     Data retention period

Your personal data will be stored for a period of time not exceeding that necessary for the purposes for which they were collected, or subsequently processed, in accordance with the provisions of the legal obligations.

Should you cancel your account, your data will be deleted, without prejudice to the need for contractual, administrative, fiscal, accounting or legal obligations subsequent to cancellation. As soon as the aforementioned obligations are fulfilled, your data will in any case be deleted.

7.     Exercise of rights and request for information

You have the right to exercise at any time the rights referred to in Articles 15 and ss. of the GDPR within the limits and according to the provisions of current legislation. In particular, at any time you are entitled to request the Firm, in the manner and within the limits governed by the aforementioned legislation:

  • the confirmation that it is or is not in progress a treatment concerning your personal data and, in this case, to obtain access to the same (so-called “right to access”).
  • the correction of inaccurate and / or incomplete data retained by the Firm (so-called “right to rectification”).
  • the deletion of data that you have provided to the Firm (c.d. “right to be forgotten”)
  • the limitation of data processing (so-called “right of restriction of processing”)
  • the receipt in structured format, in common and readable, from automatic device, personal data concerning you and also to transmit such data to another Data Controller (so-called “right to data portability”)

Finally, we inform you that you also have the right to lodge a complaint to the Italian Authority for the protection of personal data ( “Garante per la protezione dei dati personali”).

To exercise the aforementioned rights, make a report or receive information on the processing of personal data, you can send your requests by writing to the data controller at ristuf@ristuf.it

8.     Links to other Websites

The Site may contain links to other websites, which can be consulted by the user by selecting appropriate links made accessible during browsing. Access to and consultation of such sites, however, remains unrelated to the activity, controls and / or security measures adopted by the Firm.

We wish to inform you that the Firm does not assume any responsibility in relation to the processing of personal data carried out by third party sites accessible through the Site.

9.     Change to the Privacy policy

The Firm, at any time and without notice, may modify this Privacy policy in order to comply with national and European legislation regarding the processing of personal data and / or adapt to the adoption of new internal systems or procedures, or in any case for any other reason that made it appropriate and / or necessary.

Therefore, please read this Privacy policy and check it periodically, in order to check for updates or revisions.

PRIVACY POLICY – RECRUITMENT

Privacy policy according to art. 13 of Regulation (EU) 2016/679.

We inform you that the data you are providing to us by completing this online form, as well the data contained in any attached curriculum vitae (such as, for example, name, surname, address, telephone number, educational qualification, marital status), will be used for the sole purpose of carrying out the recruitment activities requested by you.

These data will be treated with the utmost confidentiality and in compliance with the provisions of Regulation (EU) 2016/679 (hereinafter, “GDPR”) and of the additional provisions issued regarding the protection of personal data

1. Contact details of the Data controller

The Data controller is the “Ristuccia Tufarelli & Partners Law Firm” (hereinafter, the “Firm“), located in Piazza Cavour, n. 17 – 00193, Rome, Italy. You may contact the Data Controller by email at ristuf@ristuf.it.

2. Purpose and legal basis of the processing

The personal data provided spontaneously by you will be processed, directly and / or through third parties, in order to manage recruitment activities.

The processing of your personal data will be carried out in full compliance with the provisions regarding the protection of personal data, with your express consent and for the implementation of pre-contractual measures taken on your request (art. 6.1, let. a. and c., GDPR).

3. Categories of personal data

The personal data you provide refer to, by way of example and without limitation, name, address or other elements of personal identification, and data relating to your studies and your work experience.

We remind you that, within your curriculum vitae, may also be present data of a particular nature as identified in art. 9 of GDPR (i.e., data that could reveal racial and ethnic origin, political opinions, religious or philosophical convictions, as well as union membership, personal data that could reveal your state of health, sexual life or sexual orientation), provided by you for a better classification of your position (e.g. data relating to your belonging to protected categories), in this case, it is necessary to obtain your consent for processing.

We remind you that such consent may be revoked at any time, without prejudice to the lawfulness of the processing based on consent prior to the mentioned revocation.

4. Processing Method

The processing is carried out for the aforementioned purposes, according to art. 5 of GDPR, both on paper, as well as by electronic or automated means. In particular, these data will be recorded in a database located in Italy and containing the details of the application.

Processing is carried out directly by the Firm, as Data Controller, by its employees and collaborators who have been authorized to perform the processing related to recruitment activities, specially trained in this regard, as well as by external subjects that, on behalf of the Firm, will perform various services as better specified in the following par. 7.

5. Nature of the provision of data and consequence of a possible refusal to processing

The provision of personal data referred in par. 2 is not mandatory, but the refusal to provide them will make it impossible for the Firm to evaluate your application.

6. Period of retention of personal data

The data will be stored for a maximum period of twelve months starting from the submittal of your curriculum vitae, or from the last update of the same communicated to us by you.

7. Recipients of personal data

Personal data may be communicated, within the limits strictly relevant to the obligations, for tasks and purposes referred to in par. 2 and in compliance with current legislation, to third-party that will provide, on behalf of the Firm, evaluation and recruitment services.

Personal data communicated by us to the subjects listed above will exclusively concern the data required to achieve the specific purposes for which the same, or whose communication, are intended. The updated list of these subjects can be requested from the Data Controller at ristuf@ristuf.it.

We also inform you that your data will be processed in Italy and may only be transferred within the European Union countries or the European Economic Area and, therefore, will not be transferred to third countries.

Your personal data will not be disseminated.

8. Rights of the interested party

At any time, you can contact the Firm to request full clarity about the processing reported to you and to exercise the rights that are recognized under Articles. 15 and following of the GDPR, with the methods and within the limits indicated in the same legislation. In particular, by way of example, you may request the Firm, at any time and within the limits governed by the aforementioned legislation, to provide:

  • confirmation that any personal data processing is in progress and, in such case, obtain access to the same data;(so-called “right to access”)
  • the correction of inaccurate and / or incomplete data stored by the Firm and provided, for example, when sending your data via the online form or the data contained in your curriculum vitae (so-called “right to rectification”) );
  • deletion of data provided to the Firm (so-called “right to be forgotten”);
  • limitation of data processing (so-called “right of restriction of processing)”);
  • personal data, in a structured format, common and legible use, concerning you, and also to transmit such data to another Data Controller (so-called “right to data portability”).

Finally, we inform you that you also have the right to lodge a complaint to the Italian Authority for the protection of personal data (“Garante per la protezione dei dati personali”).

Any requests concerning your rights will have to be sent to the Data Controller by writing to ristuf@ristuf.it.

********

By sending us your curriculum vitae, you automatically consent to the processing of your personal data, including the sensitive data described above, for the specific purposes of this service requested. We remind you that this consent may be revoked at any time by submitting your request to the Data controller  at the address ristuf@ristuf.it, without prejudice to the lawfulness of the processing based on consent prior to said revocation.

PRIVACY POLICY – NEWSLETTER

Newsletter’s Privacy Policy

“Ristuccia Tufarelli & Partners” (hereinafter, the “Firm“), with registered office in Piazza Cavour, n. 17 -00193, Rome, in accordance with Regulation (EU) 2016/679 (hereinafter, “GDPR”), as Data Controller, informs you that it intends to acquire your personal data (name, surname and email address), in order to forward to you periodically, through e-mail, automatically and free of charge, the Firm’s Newsletter, which contains informative material dealing with the Firm’s activity.

The provision of data is optional, but the partial, incorrect or lacking communication of the same, will result in the inability to use your data for the purposes indicated above.

The processing of your personal data is carried out directly by the Data controller, in a lawful and correct way, and will be carried out only by means of automated tools. Your data will also be processed by parties who provide services referring to the maintenance of the technological part of the Firm’s web site and who act as Data Processor or as autonomous Data Controller. You can request an updated list of such subjects to the Firm at ristuf@ristuf.it.

The data will be used for specific, explicit and legitimate purposes, not exceeding the aforementioned purposes and for a period of time no longer than necessary for the purposes for which they were collected, or subsequently processed, in accordance with the provisions of the law. In particular, the Firm may retain your data for a period of 12 months, after which the data will be erased or anonymized permanently and irreversibly.

The data will not be transferred abroad or disseminated.

You can exercise at any time the rights referred to in Articles 15 and ss. of GDPR, including the right to obtain an indication of the origin of the data, the purposes, the methods and the logic of the processing, the blocking of data processed in violation of the law, the right to be forgotten, right of restriction of processing, the right to data portability, or the right to consult, modify and delete your data or object to their processing. For this purposes, you have to follow the instructions indicated in each email or forwarding requests to the Firm at ristuf@ristuf.it.

By clicking on “Sign up”, you automatically give your consent to the processing and to receiving the Firm’s Newsletter, in accordance with the aforementioned purposes.

In compliance with the Authority provisions for the Corona Virus containment, Ristuccia Tufarelli & Partners is active in smart working mode. The emails of the individual professionals are published on the site.
+