EU Regulation n. 679/2016
Italian Legislative Decree no. 196/2003
1. Data controller
STSMI, in the person of the legal representative, domiciled at the registered office of Via Matteo Bandello n. 5, Milan is the Data Controller.
2. Type of data processed
The Website and its related services can be used by all End-Users, to issue requests and queries or to receive digital documents by STSMI about the activities of STSMI and planned events, as well as for End-Users to send to STSMI their curriculum vitae. The Data Controller may process the personal data which is received by STSMI for the latter to:
a. To answer to specific queries;
b. To accomplish legal or regulatory formalities or obligations for legal, tax, administrative or accounting purposes;
c. To accomplish pre-contractual, contractual and tax obligations related to the conclusion and/or execution of contracts of which the End-User is part of and to the obligations deriving from the mandate granted by the End-User to STSMI for the activity of assistance or advisory in legal, tax, accounting, tax litigation, and all other activities that STSMI is appointed for.
Provided End-Users give their explicit and unconditioned consent for:
d. Supplying and sending any information memorandum, updates, newsletters, documents pertaining to End-Users directly via STSMI’s website download or via email. The IT system implemented on STSMI’s Website acquires, during normal operations, some and certain personal data whose transmission is implicit in the use of communication protocols of the Internet.
The category of data received and processed includes IP addresses or domain names of the computers used by users connecting to the website, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the date and time of the request, the method used to submit the request to the server, the size of the file obtained, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters currently available and that will be introduced in the future relating to the operating system and the user’s computer environment.
All these data inserted or managed for the normal and current use of STSMI’s Website, are processed with the only purpose of obtaining statistical information on the use of STSMI’s website and to verify its proper operation or management, thus, it will be deleted immediately after processing. The data may be used to ascertain any liability in case of possible IT-related offences to the prejudice of the website: except this circumstance, the data about web contacts will not be currently held for more than the ordinary period stated by law.
The possible submission of e-mail messages, as well as the filling-in and submission of Website forms and/or curriculum vitae entail the acquisition of the sender’s email address, which is required to respond to requests, as well as any other personal data included in the email, in the forms or in the curriculum vitae, whenever attached.
In particular, all End-Users wishing to submit their CV via the Website are invited to read its content, not including for any reason any kind of personal data belonging to particular categories, which include data suitable to indicate racial or ethnic origin, political opinions, religious or philosophical convictions, or union membership, as well as data related to health or sexual life or sexual orientation.
3. The rights of End-Users
End Users have the right to do the following actions:
Withdraw their consent at any time: Users have the right to withdraw their given consent to the processing of their Personal Data.
Modify or restrict processing of their Data. End-Users have the right, to modify or restrict the processing of their Data. In this case, the data Controller will not process their Data for any purpose other than storing it.
Access their Data: End-Users have the right to learn if their Data is being processed by the data Controller, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
Have their Personal Data deleted or otherwise removed. End-Users have the right, under certain circumstances, to obtain the cancellation of their Data from the Data Controller.
Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, if technically feasible, to have it transmitted to another controller without any issue. This provision is applicable provided that the Data is processed by automated means and that the processing is based on the User's consent, on a contract which the User is part of or on pre-contractual obligations thereof.
Issue a complaint. Users have the right to claim before their competent data protection authority.
How to exercise these rights:
Any requests to exercise End-User rights can be directed to the Data controller through the contact details provided in the present document. These requests can be exercised free of charge and will be answered by the Data controller at its earliest convenience and in any case not later than one month.