Privacy policy

INFORMATION MADE PURSUANT TO LAW NO. 171 OF DECEMBER 21, 2018 ON THE PROTECTION OF NATURAL PERSONS WITH REGARD TO THE PROCESSING OF PERSONAL DATA

Data collection

In order to carry out its activities, Nunzia Ponsillo born in Santa Maria Capua Vetere on 28/06/1990 and residing in Chiesanuova, via Corrado Forti 104, owner of the sole proprietorship based in Chiesanuova, via Corrado Forti 64, C.O.E. SM27345, is the Data Controller pursuant to and for the purposes of Law No. 171/2018. The Data Controller, must use certain data concerning the data subject and any other interested parties. This is personal and/or property information that will be processed both electronically and manually. The information is provided directly by the data subject. Such information, collected to the extent strictly necessary for the company's functions, will be kept at the company's headquarters for the stipulated period of the respective industry regulations. Specific tasks and functions related to the processing of personal data may be assigned to expressly designated individuals working within the company, or who are appointed by it. Processing is lawful if it is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not prevail. The data controller, at the time the personal data are obtained, shall specify to the data subject whether the disclosure of personal data is a legal or contractual obligation, or a necessary requirement for the conclusion of a contract, and whether the data subject has an obligation to provide the personal data, as well as the possible consequences of not providing such data. The data controller does not adopt any automated decision-making process, including profiling, and the data subject is not subject to any automated decision-making process, including profiling as referred to in Article 22 of Law No. 171 of December 21, 2018.

The communication of data

The data controller is in turn obliged to communicate certain data to public entities: this is done only in the cases provided for by the Law and strictly adhering to the modalities provided for by the Law. The data transmitted will mostly go to update those same Public Records from which most of the data concerning the data subject and any other parties to the act have been processed. The transmissions will be done mainly in telematic form through structured data, making use of the computer and telematic tools installed at the firm. The archives of the individual Public Offices are accessible in specific ways regulated directly by Law; predominantly these are Public Records that can be consulted by anyone. The data controller may, in the performance of its functions and exclusively for the purpose of carrying out its activities, transfer its personal data to a third country. The personal data of the clients of the notary's office will also be collected and processed in a structured form for the purposes of compliance with the anti-money laundering and anti-terrorism regulations, implementing rules, (with subsequent additions and amendments) and subsequent processing by the relevant public entities. The data subject has the right to revoke his or her consent at any time and the right to file a report or complaint with the Data Protection Authority person.

Consent of minors ex art. 7 L. 171/2018

Where processing is based on consent, with regard to the direct offering of information society services to minors, the processing of a minor's personal data is lawful where the minor is at least 16 years old. Where the minor is under the age of 16, such processing is lawful only to the extent that such consent is given or authorized by the holder of parental authority.

Right of access ex art. 15 L. 171/2018

The data subject has the right to obtain confirmation from the data controller as to whether or not personal data concerning him or her is being processed and, if so, to obtain access to the personal data and information referred to in paragraphs (a), (b), (c), (d), (e), (f), (g) and (h) of Article 15 of Law 171/2018. If personal data are transferred to a foreign country or international organization, the data subject has the right to be informed of the existence of adequate safeguards under Article 47 relating to the transfer.

Right of rectification ex art. 16 L. 171/2018

The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning him/her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration.

Right to cancellation ex art. 17 L. 171/2018

The data subject has the right to obtain from the data controller the erasure of personal data concerning him/her without undue delay.

Right to limitation of processing ex art. 18 L. 171/2018

The data subject has the right to obtain from the data controller the limitation of processing in the cases provided for in Article 18 L. 171/2018, paragraph 1, letters a), b), c) and d). The data subject who has obtained the limitation of processing under Article 18, paragraph 1, Law 171/2018 shall be informed by the data controller before said limitation is revoked.

Obligation to notify in case of rectification or erasure of personal data or limitation of processing pursuant to Article 19 L. 171/2018

The data controller shall notify each of the recipients to whom the personal data have been transmitted of any rectification or erasure or restriction of processing carried out pursuant to Art. 16, Art. Art. 17 c. 1 and Art. 18 of Law 171/2018, unless this proves impossible or involves a disproportionate effort.

Right to data portability ex art. 20 L. 171/2018

The data subject has the right to receive, in a structured, commonly used and machine-readable format, personal data concerning him or her provided to a data controller and has the right to transmit such data to another data controller without hindrance from the data controller to whom he or she has provided them if the processing is based on consent or a contract and the processing is carried out by automated means. When exercising his or her rights with regard to data portability under Article 20(1) of Law 171/2018, the data subject has the right to obtain direct transmission of personal data from one data controller to another, if technically feasible.

Right of opposition ex art. 21 L. 171/2018

The data subject has the right to object at any time, for reasons related to his or her particular situation, to the processing of personal data concerning him or her pursuant to Article 5, paragraph 1, letters e) or f) of Law 17172018, including profiling.

Related automated decision-making process ex art. 22 L. 171/2018

The data subject has the right not to be subjected to a decision based solely on automated processing, including profiling, that produces legal effects concerning him or her or that significantly affects him or her in a similar way. This right does not apply where the decision is necessary for the conclusion or performance of a contract between the data subject and a data controller or is based on the data subject's explicit consent.

Security of processing ex art. 33 L. 171/2018

The data controller shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk. The data controller shall ensure that anyone acting under its authority and having access to personal data shall not process such data unless instructed to do so by the data controller, unless special rules so require.