In the following privacy policy are described the working of the website (hereinafter, the “Site”) and the modalities whereby personal data pertaining to the users who visit it are gathered, registered, and used, as well as of those who subscribe to the newsletter (hereinafter, the “Newsletter”) of Negri-Clementi Law Firm (hereinafter, “Negri-Clementi).

This privacy policy intends to satisfy the requirements provided for by art. 13 of the EU Regulation n. 2016/679 (hereinafter, the “GDPR”). The following Privacy Policy is to be intended and thus applicable exclusively to the Site and the services offered thanks to it by the Controller, without extension to pages or websites that can be reached through links and managed by third parties. Each user is encouraged to inspect all the involved privacy policies for a more detailed comprehension of the data processing modalities of those websites.

1. The data controller
While consulting the Site, data referred to identified or identifiable persons can be processed. The controller of the data processing is Negri-Clementi (hereinafter, also the “Controller”).

2. Place and modalities of data processing
The processing related to the web services of this Site take place in the Controller’s headquarter and will be performed with both hand-held, computer, and telematic instruments with logics strictly related to the purposes of the processing itself and in ways as such to ensure security, integrity, and confidentiality of data in the respect of organizational, physical and logical measures envisaged by the existing provisions.

All personal data are processed in paper and, mostly, in electronic format. Data are to be preserved in a manner that permits user identification only for the period necessary to pursue the aims for which data were originally collected and, in any case, within the regulatory limits foreseen by the laws in force. Specific security measures are to be observed to prevent the loss, illicit or uncorrected use, and unauthorized accesses, in accordance with GDPR provisions.

In order to ensure that personal data are always exact, updated, complete, and pertinent, we invite interested parties to signal any change to the following e-mail address:

3. Purposes of data processing
With respect to the Site, the aim of data processing is the provision of services accessible through the Site itself, and in particular to:

  • Have insights on the activities, the events, and the other initiatives – both institutional and educational – organized or performed by the Controller;
  • Manage and process, with respect to what is described in the previous point, of the demands and the requests of interaction with Negri-Clementi, its professionals and subjects related to the Controller’s management;
  • Offer a platform of scientific insights, thanks to the contents offered by the professionals of Negri-Clementi.

The performing of the activities listed above does not require the users’ consensus, as these are services implemented in the execution of demands directly made by the interested parties.

With respect to the Newsletter, the aim of data processing is the communication of the scientific journal of the Firm ART&LAW, of scientific insights, news in the fields of law and art, and the invitation to events.

Whenever the user should decide to subscribe to the Newsletter of Negri-Clementi, the success of the registration will be determined by the bestowal of specific personal data: name, surname, and e-mail address.

The subsequent unsubscribing or data updating will always be possible in every moment through the “unsubscribe from this email” and the “update your preferences” links that can be found at the bottom of every communication from the Firm to the users.

4. Typologies of processed data

4.1 Browsing data

Information systems and software procedures responsible for the functioning of this Site acquire, in the normal course of their operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

These pieces of information are not collected to be associated with identified interests, but by their nature could allow the user identification through elaborations and associations with data held by third parties.

In this class fall IP addresses or domain names of computers used by users during their connection to the Site, the addresses in URI (Uniform Resource Identifier) notation for resources requested, the time of the request, the method used in submitting the request to the server, the numerical code indicating the request status from the server (success, error, etc.) and other parameters related to the operating system and to the user’s system environment.

These data are to be used to the only purpose of deriving statistical information on the Site use and to control the correct functioning. Furthermore, these data are immediately deleted after processing. Data could be used to ascertain responsibility in the case of hypothetical computer crimes against the Site.

4.2 Data supplied voluntarily by the user

The optional, explicit, and voluntary submitting of an e-mail address to the Contact details specified in the Site, and the submitting of messages and/or resumes via data collection forms, entails the subsequent acquisition of the sender’s address and any other possible personal data indicated.

5. Scope of data traffic
Data are not to be spread or transferred to third parties.
Data are stored on servers located in Milano (MI), inside the European Union.

6. Link to other websites
The Controller does not monitor, nor has the means to supervise, the content and the policies for data processing of websites and third-parties services that are accessible through links included in the Site. Therefore, Negri-Clementi could not, in any case, be held accountable for the treatments performed through or in relation to those third-parties’ websites.

The users are encouraged to pay particular attention in this situation, reading the terms and conditions and the privacy policies published in such web portals.

7. Rights of data subjects

The subjects to which personal data are referred could, in any case, exercise the rights of:

  • Access to data;
  • – Obtain the adjustment or the removal, or the limitation in the processing, of those personal data;
  • Object to processing;
  • Data portability;
  • – Withdraw consent, as applicable: the withdrawal does not undermine the lawfulness of the processing based on the consent given prior to the withdrawal;
  • – Complain to the supervisory authority (Privacy Authority).

8. Methods to exercise the rights

To exercise the rights will suffice to send an e-mail to the address: