Information pursuant to art. 13 and 14 of the European Regulation 679/2016 (GDPR). The following information is provided pursuant to Article 13 of the European Regulation (EU) 2016/679 (hereinafter the “GDPR”) and refers to the processing of personal data carried out by Yuta Kurimoto (hereinafter the “Firm”), for the performance of the activities necessary for the execution of the mandates conferred.
Data controller and personal data protection officer
The Data Controller may be contacted by email at firstname.lastname@example.org domiciled in Milan, Via Carlo Farini 6.
The Firm has not appointed a personal data protection officer (DPO).
Data processed and processing methods
For the purposes described below, the Firm processes the common personal data, belonging to special categories (pursuant to art. 9 GDPR) and judicial data – provided directly or indirectly, including through collaborators or employees, by clients (and their referents) – of the following categories of subjects (hereinafter the “Personal Data“):
(i) customers who are natural persons;
(ii) limited to personal and contact data, natural persons acting as contact persons for customers;
(iii) other persons in contact with the Firm in connection with the performance of the mandate.
(all collectively referred to as the “Data Subjects“).
Personal Data shall be temporarily stored in the Data Controller’s databases and shall be processed by means of both manual and computerized tools exclusively by persons authorized and specifically instructed to do so and shall in any case be processed in the manner strictly necessary to fulfil the purposes indicated below.
Purposes of the processing and legal bases
PURPOSE OF PROCESSING
1) To carry out the professional assignment received as well as service communications
2) To fulfil obligations under applicable legislation, including tax, accounting and ethical obligations
3) To assert and defend the Firm’s rights, including through out-of-court initiatives and third parties
4) To keep the Firm’s historical archive
LEGAL BASES OF PROCESSING
1) Performance of a contract to which the data subject is party, or of pre-contractual measures taken at the request of the data subject or the pursuit of the customer’s legitimate interest in defending his rights*
2) Fulfilment of a legal obligation to which the Firm is bound
3) Pursuit of the Firm’s legitimate interest in defending its rights*
4) Pursuit of the Firm’s legitimate interest in the preservation and development of its know-how*
*Data processing activities will be limited to what is strictly necessary for the pursuit of the stated purpose
Consequences of non-disclosure of personal data
All the Personal Data requested by the Firm are necessary for the pursuit of purposes 1 and 2. Consequently, failure to provide such data prevents the regular execution of the mandate received or the completion of the contractual relationship itself.
The Personal Data strictly necessary for the establishment and management of the professional mandate will be retained for its entire duration and for a period of 10 years and six months after its termination, in order to comply with the retention obligations to which professionals are subject and to ensure the Firm’s right of defence with reference to possible future disputes in judicial or administrative proceedings.
All data whose processing is necessary in connection with legal or tax obligations shall be retained for the duration of the law and, in order to ensure the Law Firm’s right of defence in respect of possible future litigation in judicial or administrative proceedings, for a period equal to the limitation period for the relevant actions, increased by a prudential period of six months.
These periods may be extended in cases where retention for a later period is required in connection with litigation, requests by competent authorities or under applicable law.
At the end of the indicated retention periods, relating to purposes 1), 2) and 3), the documents necessary to maintain the Firm’s historical archive will be filed in electronic format, including only the Personal Data inseparable from the aforementioned documents. This archive is kept separate from the archive in use and is accessible only to the Data Controller.
For the purpose 4), Personal Data shall be kept until the data subject exercises his/her right to object.
Communication of Personal Data
For the purposes described above, Personal Data may be communicated to
1) the Data Controller’s authorised processors (employees and collaborators);
2) consultants, accountants or other lawyers who provide functional services for the purposes indicated above;
3) banks and insurance companies that provide functional services for the purposes indicated above;
4) subjects who process the data in execution of specific legal obligations;
5) judicial or administrative authorities, for the fulfilment of legal obligations;
6) suppliers of IT services, who act as data processors for the Firm.
Only the category of recipients is indicated, as the relevant list is subject to updates and revisions. In any case, Data Subjects may obtain an updated list of recipients by contacting the Firm directly at the above-mentioned e-mail address.
Personal Data shall be temporarily stored in the Data Controller’s databases and shall be processed by means of both manual and computerised tools exclusively by authorised and specifically trained persons.
Rights of Interested Parties
Each Data Subject has the right:
- – To lodge a complaint, pursuant to Article 77 of the GDPR, with the national supervisory authority of the European Union member state in which he or she has his or her habitual residence or place of work or where the alleged violation of his or her right has occurred; in the event that such state is Italy, the person to whom he or she may turn is the Italian Data Protection Authority;
- – To object at any time, for reasons related to his/her particular situation, to the processing of his/her data for the purpose indicated in paragraph 3, nos. 3 and 4, as well as no. 1 if applicable.
In addition, each of the Data Subjects may at any time and free of charge exercise the following rights vis-à-vis the Data Controller, if the circumstances apply:
- – Right of access: allows to obtain from the Data Controller confirmation as to whether or not personal data concerning the User are being processed and, if so, to obtain access to the Personal Data;
- – Right of rectification: allows the User to obtain the rectification/integration of inaccurate/incomplete Personal Data;
- – Right to cancellation: allows the User to obtain, in the cases provided for by the legislation, the cancellation of the processed Personal Data;
- – Right to restriction of processing: allows the user to obtain, in the cases provided for by the legislation, the restriction (i.e. the marking of personal data stored with the aim of limiting their processing in the future) of the processing of personal data processed;
- – Right to data portability: allows to receive in a structured, commonly used and machine-readable format, in the cases provided for by the legislation and limited to the data provided by the Customer to the Controller, the personal data processed and similarly the right to transmit such data to another data controller.
Our website uses plug-ins of the social network Facebook to integrate and display content. The provider of the social network portal is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland. You recognise these plug-ins by the Facebook-logo on our site. For an overview of Facebook plug-ins, please see here: http://developers.facebook.com/docs/plugins/.
If you visit our websites, a direct connection between your browser and the Facebook server is established by this plug-in. By that Facebook receives information that you have visited our websites with your IP-address. If you click the Facebook-Like-button while you are logged in to your Facebook account, you may link the contents of our websites to your Facebook account. Thereby Facebook can associate your visit of our websites to your Facebook account.
Our website uses Google Analytics, a website analysis service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Google Analytics uses so-called “cookies”, text files that are stored on your computer to analyze your use of the website. The information generated by the cookie about your use of this website (including your IP address) is sent to and stored at a Google server in the U.S.A.
Google will use this information to evaluate your use of the website, to compile reports on website activities for website operators and to provide other website and internet activity related services.
Google may also transfer this information to third parties if required by law or if third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.
You may prevent the installation of cookies by adjusting the settings of your browser; however, if you do so, you may be unable to use all features of this website. Further, you may prevent the collection of data generated by cookies and related to the use of this websites by downloading and installing the the plug-in under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
Prohibition To Unsolicited Advertisement
Providers are obliged to publish contact information in the Legal Notice. The use of such contact information by third parties for the purpose of distributing unsolicited advertisements or other commercial information is prohibited.
The operators of this web page reserve the right to take legal measures in case of being sent unsolicited commercial information, e.g. spam mails etc.
We reserve the right to adapt the above mentioned legal notice incl. the legal information given in the Legal Notice section of this website according to the technical development of the internet and changes of legal regulations. With the publication on this website legal notices come into effect.