Privacy Policy
Information pursuant to art. 13 and 14 of the European Regulation 679/2016 (GDPR). The following information is provided pursuant to Article 13 of the European Regulation (EU) 2016/679 (hereinafter the “GDPR”) and refers to the processing of personal data carried out by Yuta Kurimoto (hereinafter the “Firm”), for the performance of the activities necessary for the execution of the mandates conferred.
Data controller and personal data protection officer
The Data Controller may be contacted by email at kurimotoyuta@gmail.com domiciled in Milan, Via Carlo Farini 6.
The Firm has not appointed a personal data protection officer (DPO).
Data processed and processing methods
For the purposes described below, the Firm processes the common personal data, belonging to special categories (pursuant to art. 9 GDPR) and judicial data – provided directly or indirectly, including through collaborators or employees, by clients (and their referents) – of the following categories of subjects (hereinafter the “Personal Data“):
(i) customers who are natural persons;
(ii) limited to personal and contact data, natural persons acting as contact persons for customers;
(iii) other persons in contact with the Firm in connection with the performance of the mandate.
(all collectively referred to as the “Data Subjects“).
Personal Data shall be temporarily stored in the Data Controller’s databases and shall be processed by means of both manual and computerized tools exclusively by persons authorized and specifically instructed to do so and shall in any case be processed in the manner strictly necessary to fulfil the purposes indicated below.
Purposes of the processing and legal bases
PURPOSE OF PROCESSING
1) To carry out the professional assignment received as well as service communications
2) To fulfil obligations under applicable legislation, including tax, accounting and ethical obligations
3) To assert and defend the Firm’s rights, including through out-of-court initiatives and third parties
4) To keep the Firm’s historical archive
LEGAL BASES OF PROCESSING
1) Performance of a contract to which the data subject is party, or of pre-contractual measures taken at the request of the data subject or the pursuit of the customer’s legitimate interest in defending his rights*
2) Fulfilment of a legal obligation to which the Firm is bound
3) Pursuit of the Firm’s legitimate interest in defending its rights*
4) Pursuit of the Firm’s legitimate interest in the preservation and development of its know-how*
*Data processing activities will be limited to what is strictly necessary for the pursuit of the stated purpose
Consequences of non-disclosure of personal data
All the Personal Data requested by the Firm are necessary for the pursuit of purposes 1 and 2. Consequently, failure to provide such data prevents the regular execution of the mandate received or the completion of the contractual relationship itself.
Data Retention
The Personal Data strictly necessary for the establishment and management of the professional mandate will be retained for its entire duration and for a period of 10 years and six months after its termination, in order to comply with the retention obligations to which professionals are subject and to ensure the Firm’s right of defence with reference to possible future disputes in judicial or administrative proceedings.
All data whose processing is necessary in connection with legal or tax obligations shall be retained for the duration of the law and, in order to ensure the Law Firm’s right of defence in respect of possible future litigation in judicial or administrative proceedings, for a period equal to the limitation period for the relevant actions, increased by a prudential period of six months.
These periods may be extended in cases where retention for a later period is required in connection with litigation, requests by competent authorities or under applicable law.
At the end of the indicated retention periods, relating to purposes 1), 2) and 3), the documents necessary to maintain the Firm’s historical archive will be filed in electronic format, including only the Personal Data inseparable from the aforementioned documents. This archive is kept separate from the archive in use and is accessible only to the Data Controller.
For the purpose 4), Personal Data shall be kept until the data subject exercises his/her right to object.
Communication of Personal Data
For the purposes described above, Personal Data may be communicated to
1) the Data Controller’s authorised processors (employees and collaborators);
2) consultants, accountants or other lawyers who provide functional services for the purposes indicated above;
3) banks and insurance companies that provide functional services for the purposes indicated above;
4) subjects who process the data in execution of specific legal obligations;
5) judicial or administrative authorities, for the fulfilment of legal obligations;
6) suppliers of IT services, who act as data processors for the Firm.
Only the category of recipients is indicated, as the relevant list is subject to updates and revisions. In any case, Data Subjects may obtain an updated list of recipients by contacting the Firm directly at the above-mentioned e-mail address.
Personal Data shall be temporarily stored in the Data Controller’s databases and shall be processed by means of both manual and computerised tools exclusively by authorised and specifically trained persons.
Rights of Interested Parties
Each Data Subject has the right:
- – To lodge a complaint, pursuant to Article 77 of the GDPR, with the national supervisory authority of the European Union member state in which he or she has his or her habitual residence or place of work or where the alleged violation of his or her right has occurred; in the event that such state is Italy, the person to whom he or she may turn is the Italian Data Protection Authority;
- – To object at any time, for reasons related to his/her particular situation, to the processing of his/her data for the purpose indicated in paragraph 3, nos. 3 and 4, as well as no. 1 if applicable.
In addition, each of the Data Subjects may at any time and free of charge exercise the following rights vis-à-vis the Data Controller, if the circumstances apply:
- – Right of access: allows to obtain from the Data Controller confirmation as to whether or not personal data concerning the User are being processed and, if so, to obtain access to the Personal Data;
- – Right of rectification: allows the User to obtain the rectification/integration of inaccurate/incomplete Personal Data;
- – Right to cancellation: allows the User to obtain, in the cases provided for by the legislation, the cancellation of the processed Personal Data;
- – Right to restriction of processing: allows the user to obtain, in the cases provided for by the legislation, the restriction (i.e. the marking of personal data stored with the aim of limiting their processing in the future) of the processing of personal data processed;
- – Right to data portability: allows to receive in a structured, commonly used and machine-readable format, in the cases provided for by the legislation and limited to the data provided by the Customer to the Controller, the personal data processed and similarly the right to transmit such data to another data controller.
Youtube
Our website uses plug-ins from YouTube to integrate and display video content. The provider of the video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you open a page with an integral YouTube plug-in, a connection will be established with YouTube servers. YouTube therefore finds out which pages you have opened. YouTube can assign your surfing habits directly to your personal profile if you have logged into your YouTube account. You can prevent this by logging out beforehand. YouTube is used to provide an attractive presentation of our online offerings. This constitutes a justified interest as described in Art. 6 para. 1 lit. f of the General Data Protection Regulation. Details of how your user data is used can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy.
Vimeo
Our website uses plug-ins from Vimeo to integrate and display video content. The provider of the video portal is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. If you open a page with an integral Vimeo plug-in, a connection will be established with Vimeo servers. Vimeo therefore discovers which pages you have opened. Vimeo discovers your IP address, even if you are not logged into the video portal or you do not have an account there. The information recorded by Vimeo will be transferred to the video portal’s servers in the USA. Vimeo can assign your surfing habits directly to your personal profile. You can prevent this by logging out beforehand. Details of how your user data is used can be found in Vimeo’s privacy policy at: https://vimeo.com/privacy.
Our website uses plug-ins from Instagram to integrate and display content. The provider of the video portal is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. If you open a page with an integral Instagram plug-in, a connection will be established with Instagram servers. Instagram therefore discovers which pages you have opened. In case you are logged into your Instagram account you can link content of our site with your Instagram profile. Instagram can assign your surfing habits directly to your personal profile. You can prevent this by logging out beforehand. Details of how your user data is used can be found in Instagram’s privacy policy at: http://instagram.com/about/legal/privacy/.
Our website uses plug-ins of the social network Facebook to integrate and display content. The provider of the social network portal is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland. You recognise these plug-ins by the Facebook-logo on our site. For an overview of Facebook plug-ins, please see here: http://developers.facebook.com/docs/plugins/.
If you visit our websites, a direct connection between your browser and the Facebook server is established by this plug-in. By that Facebook receives information that you have visited our websites with your IP-address. If you click the Facebook-Like-button while you are logged in to your Facebook account, you may link the contents of our websites to your Facebook account. Thereby Facebook can associate your visit of our websites to your Facebook account.
Facebook can assign your surfing habits directly to your personal profile. You can prevent this by logging out beforehand. Details of how your user data is used can be found in Facebook’s privacy policy at: http://de-de.facebook.com/policy.php
Google Analytics
Our website uses Google Analytics, a website analysis service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Google Analytics uses so-called “cookies”, text files that are stored on your computer to analyze your use of the website. The information generated by the cookie about your use of this website (including your IP address) is sent to and stored at a Google server in the U.S.A.
Google will use this information to evaluate your use of the website, to compile reports on website activities for website operators and to provide other website and internet activity related services.
Google may also transfer this information to third parties if required by law or if third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.
You may prevent the installation of cookies by adjusting the settings of your browser; however, if you do so, you may be unable to use all features of this website. Further, you may prevent the collection of data generated by cookies and related to the use of this websites by downloading and installing the the plug-in under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
Cookies
Our website uses cookies. These are small text files which your web browser saves on your device. Cookies help us to make our offering more user-friendly, effective and safe. Some cookies are “session cookies”. These cookies are deleted automatically at the end of your browser session. However, some cookies remain on your device until you delete them yourself. These cookies help us to recognise you when you return to our website. Using a modern web browser you can monitor, restrict or prevent cookies being set. Many web browsers can be configured so that the cookies are automatically deleted when the program is closed. Disabling cookies may result in our website having restricted functionality. Cookies, which are required to carry out electronic communication procedures or to provide certain functions required by you (for example a shopping cart), are set on the basis of Art. 6 para. 1 lit. f of the General Data Protection Regulation. As the operator of this website, we have a justified interest in saving cookies to ensure that our services can be provided smoothly and in technically perfect form. If other cookies are set (for example for analysis functions), these are dealt with separately in this privacy policy.
Prohibition To Unsolicited Advertisement
Providers are obliged to publish contact information in the Legal Notice. The use of such contact information by third parties for the purpose of distributing unsolicited advertisements or other commercial information is prohibited.
The operators of this web page reserve the right to take legal measures in case of being sent unsolicited commercial information, e.g. spam mails etc.
Final Notice
We reserve the right to adapt the above mentioned legal notice incl. the legal information given in the Legal Notice section of this website according to the technical development of the internet and changes of legal regulations. With the publication on this website legal notices come into effect.