1.1. Browsing Data
Computer systems and software procedures used for the Site’s operation acquire, during their normal operation, some Personal Data (so-called log files), the transmission of which is implicit in the use of internet communication protocols.
This information is not collected in order to be associated to identified persons, but due to its nature can, by means of processing and integration with data held by third parties, allow users to be identified. Such information includes the IP addresses or domain names of the computers used by the users to connect to the Site, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply given by the server (done, error, etc.) and other parameters concerning the user’s operating system and computer environment.
We use this data for the sole purpose of obtaining anonymous statistical information concerning the use of the Site and to check its correct operation.
The legal grounds for processing the browsing data consist of our rightful interest in the improvement of our Site and in managing the server capacities, and in the bug-free preservation of our Site as well as in allowing us to comply with our legal duties related to safeguarding IT security.
1.2. Data processing in order to provide the Site
On our Site it is possible for you to contact us via e-mail or directly on the Site. When you do so, we will use the Personal Data you voluntarily provide to us in that situation only to contact you in the administration of your enquiry.
The legal ground for this processing consists of the administration of or the realization of precontractual or contractual measures at the request of the person contacting us. In the absence of your Personal Data, we cannot contact you in the administration of your enquiry.
When you subscribe to our newsletter, we will use your e-mail address to send newsletter e-mails. You can revoke your prior consent at all times and without any costs, with altering consequences for the future.
The legal basis for processing your e-mail address for the purpose of sending the newsletter requested by you is your consent.
1.3. Online payment processing
When contracting the legal services we provide, you have the option to pay the invoice by using your card. For clarity, this section applies only in relation to the legal services we provide outside the Site.
To offer you the option of online payment, we use the NETOPIA PAYMENTS payment processing platform.
When you opt for online payment, you will be redirected to the NETOPIA PAYMENTS platform where will be asked for certain personal data depending on the payment method you choose - for example, card details (card number, cardholder name & surname, expiry date and security code on the back of the card). This data is used strictly for payment processing through the NETOPIA PAYMENTS platform and is not communicated to us.
In certain situations, we may transmit directly to the NETOPIA PAYMENTS platform a series of information concerning the transaction, namely: the value of the transaction, telephone number and e-mail address (if any have been completed in the customer’s account).
To ensure the tracking of transactions and the settlement of payments, NETOPIA PAYMENTS provides us reports on the payments we receive. These reports may include personal data of payers (name, surname, e-mail, telephone number, billing address). NETOPIA PAYMENTS send us this data as part of payment processing services.
If there are any issues with your payment processing, you may be contacted directly by NETOPIA PAYMENTS representatives for solving the issue.
The NETOPIA PAYMENTS platform processes your personal data as an independent controller for online payment processing. See more details about their policy for the processing of your personal data collected for payment processing here: https://netopia-payments.com/nota-de-informare-gdpr-platitori/
1.4. Other purposes
We also process your Personal Data in order to validate, to enforce and to protect our rights. The legal basis for such processing is our rightful interest towards the enforcement of our rights.
In specific circumstances we may also retain your Personal Data for longer periods of time so that we have an accurate record of your dealings with us in the event of any complaints or challenges, or if we reasonably believe there is a prospect of litigation relating to your Personal Data or dealings.
Your Personal Data is filed and stored on the servers of our contractual partners that are helping us to provide our services to you. While as a rule we shall not disclose your Personal Data to any third parties, we may transfer the information we collect with third parties, such as, authorities, business partners, contractors, or other parties working on our behalf. Such third parties may be located within the EU and outside the EU, including to countries which are not recognized as ensuring an adequate level of protection. We will only transfer your Personal Data provided adequate safeguards are in place, according to the applicable law, and we will take steps to ensure that your Personal Data is adequately protected. In this sense, we rely on several legal guarantees, such as the EU Model Standard Contractual Clauses. You can receive from us a list of third country recipients as well as a copy of the agreed provisions assuring an adequate level of data protection. Please refer to the contact details below.
Additionally, it is possible, though unlikely, that we might be forced to disclose certain Personal Data in response to legal process or when we believe in good faith that the law requires it, for example, in response to a court order, subpoena or a law enforcement agency’s request.
You have the following rights in connection with the processing of your Personal Data:
Access right: You have the right to access your Personal Data processed by us.
Right of rectification and the right to erasure: At all times, you have the possibility to rectify or erase your Personal Data, provided that the applicable legal requirements are met. In the event of errors, we will, upon notification, immediately correct our information about you. Personal Data will be erased when the legal requirements are met.
Restriction of the processing: If the applicable legal provisions are met, you can require us to restrict the processing of your Personal Data.
Right to data portability: Insofar the Personal Data is processed based on your consent or on the execution of the agreement and the processing is carried out by automated means, you have the right to have the Personal Data transmitted directly to another controller, where technically feasible. This right shall not adversely affect the rights and freedoms of others.
Right to object to the processing of your Personal Data: You have the right to object to the processing of your Personal Data by us. We will cease to process your Personal Data, unless we can demonstrate imperative rightful grounds for further processing (according to the applicable legal provisions) that outweigh your objection rights.
Objection to direct marketing: You can also object to the processing of your Personal Data for the purpose of marketing.
Right to object: You are entitled at all times to object to the processing of Personal Data, based on your rightful interest. We will then cease to process your Personal Data, unless we can demonstrate imperative rightful grounds for further processing (according to the applicable legal provisions) that outweigh your objection rights.
Revocation of consent: Insofar you consented to the processing of your Personal Data, you can at all times revoke your consent, without affecting the lawfulness of processing based on consent before its withdrawal.
Right not to be subject to any automatic individual decisions: If the applicable legal provisions are met, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Right to address the courts of law and the supervisory authority: You have the right to lodge a complaint in relation to any breach of your rights regarding the processing of your Personal Data.
To learn more about the manner in which you may exercise the aforementioned rights, please contact us using the contact form.