pursuant to the General Data Protection Regulation
(EU Regulation n. 679/2016)

Pursuant to Art. 13 of the General Data Protection Regulation (GDPR), you are hereby informed about the processing of your personal data by the law firm LBFP Avvocati Rechtsanwälte and your rights.
We guarantee that in processing your data your rights and fundamental freedoms, in particular your right to personal data safety, will be protected, not dependent on your nationality and your place of residence.

Data controller
The data controller responsible for the processing is

Law firm LBFP Avvocati Rechtsanwälte
Avv. Carlo Bertacchi
Avv. Valentina Loner
Avv. Fabrizio Francia
Avv. Esther Pomella

Via della Mostra 3
I-39100 Bolzano
Tel. +39 0471/319800
Fax +39 0471/319899
info@lbfpavvocati.it

Categories of processed data
As part of the assignment given to our firm, the following categories of personal data may be processed:

• personal data, such as address, email address, phone number, date and place of birth, tax code, VAT number, gender;
• payment-related data (e.g., bank account number, IBAN, tax domicile);
• data related to passports and identity cards, chamber of commerce registration;
• health data;
• data related to criminal convictions, including ancillary penalties and security measures;
• other personal data and special categories of personal data.

If personal data of other individuals are transmitted, you must ensure that you have authorization from the data subjects to transmit such data. The data subjects must be informed that our law firm may use their personal data.

The way we process your data
Your data is processed with or without the help of automatic processes and includes all the necessary ways which are required for the adequate processing, such as the collection, the registration, the organization, the structuration, the storage, the adaptation or the modification, the extraction, the consultation, the use, the communication by transmission, disclosure or any other form of making available, the comparison or interconnection, the restriction, the deletion or the destruction.

The purpose and the legal basis of the data processing
The processing is aimed at the correct and complete execution of the professional assignment received, both in the judicial and extrajudicial fields. The data will also be processed in order to:

• fulfill the obligations provided for in the fiscal and accounting fields;
• comply with the obligations incumbent upon professionals under the applicable legislation.

The legal basis for the processing of your data is constituted by:

• your consent to the processing of data for a specific purpose;
• the performance of the mandate/assignment you have entrusted to the professionals, or the execution of pre-contractual measures taken at your request;
• the fulfillment of legal obligations incumbent upon the professionals.

The disclosure of personal data
For the abovementioned purposes, the personal data may be disclosed to the following parties:

• to the public administration and public authorities, if required to do so by law;
• to service providers, professionals, advisors and other organizations that support us in carrying out our activities.

In the event that the abovementioned parties are tasked with the processing of your data by the Law firm, the data processors will be obliged to adopt all adequate guarantees for the protection of your personal data.

The storage of data
Your personal data, processed for the above-mentioned purposes, will be stored for the duration of the contract and, subsequently, for the period during which the professionals are subject to retention obligations for fiscal purposes or other purposes as required by law or regulation, and in any case not longer than 10 years. After this period, your data will be securely deleted. If it is necessary to retain data beyond these periods for analytical, statistical, historical, or other lawful purposes, all necessary measures will be taken to ensure anonymity.

Rights of the data subject
You enjoy the following rights:

• pursuant to Art. 15 GDPR, the right to access your personal data and the respective information. In particular, you enjoy the right to obtain information on the purposes of the processing, on the categories of the processed data, on the categories of parties to which your personal data has been or will be disclosed, on the storage period, on the existence of the right to rectification, erasure, restriction or objection to processing, on the existence of the right to lodge a complaint, on the origins of your data in case your data is not being collected by us, as well as on the existence of automated decision making, comprising profiling, and on the right to obtain significant information on the used algorithm;
• pursuant to Art. 16 GDPR, the right to have your personal data rectified or, when incomplete, integrated without undue or excessive delay;
• pursuant to Art. 17 GDPR, the right to erase your personal data that is being stored by us, safe for the case in which the processing is necessary for exercising the right to freedom of expression or information, for the compliance with legal obligations, for purposes of public interest or for the ascertainment, the exercise or the defense of a right in court;
• pursuant to Art. 18 GDPR, the right to have the processing restricted if you contest the accuracy of your data, if the processing of the data is illegal and you object to its erasure, if we do not need the data anymore for the purposes of processing and you need the data for the ascertainment, the exercise or the defense of a right in court, or if you object to the processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR, the right to obtain your personal data in a format that is structured, of common use and machine-readable, and to request the transmission of that data to another data controller;
• pursuant to Art. 7, Par. 3 GDPR, to withdraw your consent at any moment; as a consequence, we can no longer process your data;
• pursuant to Art. 77 GDPR, to lodge a complaint to a supervising authority, in specific the authority of the place of residence or work, or of the data controller’s place or residence.

In order to exercise said rights, please refer in writing to our offices or by sending an e-mail to info@lbfpavvocati.it