Date last updated: 22 February 2022
With the present document, the GTA Law Firm, owner of the website www.gtastudio.eu, (hereinafter the “Website”) intends to inform users on the methods of management of the website itself in relation to the processing and protection of personal data (the “Data”) of the subjects who navigate it (hereinafter also “users” or ” data subjects”).
This document constitutes information pursuant to the provisions of art. 13 GDPR 2016/679 (European Regulation of April 27, 2016 n. 679).
This document is valid only and exclusively for the site of which the Law Firm is the owner and not for other sites that can be consulted by the user through links that may be activated through the site.
Users are therefore invited to read the information on data processing provided by the owners of each site to which they may be redirected during navigation.
This document may be subject to change following the introduction of new regulations or changes and/or updates to the Site, so we invite users to periodically visit this section.
This document does not exclude the possibility that further information on the processing of personal data may be given to the interested parties, even in different ways: by way of example, the data processed in the context of the use of the “GTA E-learning” service are processed in the ways indicated in the Information Notice offered to the user when access to the platform is requested.
The data controller is Studio Legale GTA STA S.r.l. (hereinafter referred to as “Studio Legale GTA”, or the “Firm”), with head office in VIALE XI FEBBRAIO, 1 36061 – BASSANO DEL GRAPPA (VI)
E-mail: email@example.com VAT number: 04168170241
In order to exercise the rights provided for by the Regulations and for any request relating to personal data, the User may contact the Data Controller by sending a communication to the e-mail address firstname.lastname@example.org.
PURPOSE OF PROCESSING
Personal data collected through the Site are processed for the following purposes:
(a) To ensure the proper functioning of the web pages and their contents and to obtain statistical information on the use of services;
b) To meet any requests made by the User and sent by email to individual professionals, to the email address email@example.com or by fax;
c) Evaluate the spontaneous applications sent by the data subject. By submitting a Curriculum Vitae by Website, the data subject acknowledges and accepts that he/she may be contacted by the Data Controller and/or the Law Firm’s authorized collaborators. Considering the purpose of the processing (research and selection of personnel), we invite the interested parties to indicate in their Curriculum Vitae only the data necessary to evaluate their candidacy and to schedule an interview, refraining from inserting information that is not strictly pertinent to this purpose. Please note that further or specific information on the processing of personal data may be submitted to interested parties during the selection process.
LEGAL BASIS OF PROCESSING
In relation to the purposes referred to in paragraph a) above, the legal basis lies in the legitimate interest of the Data Controller (art 6.1 lett f) GDPR) to ensure the proper functioning of the Site and its improvement.
In relation to the purposes referred to in paragraph b) above, the legal basis lies, depending on the case: in the need to implement pre-contractual measures taken at the request of the person concerned (art 6.1 lett b) GDPR); in the legitimate interest of the Data Controller (art 6.1 lett f) GDPR). We invite the user not to communicate data belonging to special categories as defined in art. 9 par. 1 of the GDPR (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, etc.) by sending email or fax communication. If the interested party, despite the invitation not to provide them, communicates further special categories of data, the processing of such data will be subject to the prior consent of the interested party pursuant to art. 6, letter. a) of the GDPR, it being understood that if such data is not relevant to the purpose of recruitment and selection of personnel, such information will not be used for the purpose of evaluating the application, in accordance with current legislation.
In relation to the purposes referred to in letter c) above, the legal basis of the processing is mainly that provided for in Article 6, letter b) of the GDPR: “the processing is necessary for the performance of pre-contractual measures taken at the request of the data subject”. If the processing should relate to data disclosing the health status of the person concerned, in order to hire workers belonging to protected categories, the processing will be based on art. 9 paragraph 2 lett. (b) GDPR. If the data subject, despite the invitation not to provide them, communicates additional special categories of data as defined in art. 9 par. 1 of the GDPR (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, etc.. ), the processing of such data will be subject to the prior consent of the data subject pursuant to art. 6, letter a) of the GDPR, it being understood that if such data is not relevant to the purpose of recruitment and selection of personnel, such information will not be used for the purpose of evaluating the application, in accordance with current legislation.
OBLIGATORY OR OPTIONAL NATURE OF PROVIDING DATA
The provision of data for the purposes referred to in letter a) above is optional but necessary for the proper functioning and use of the Site. Any refusal to provide data in relation to the aforementioned purposes could therefore make it impossible to navigate on the Site, to view all of its contents and to access its services.
The provision of data for the purposes referred to in letters b) and c) is optional; however, any refusal to provide data for these purposes will make it impossible for us to process your requests (for example, to obtain information about our services or to respond to your request) or to evaluate your application.
TYPE OF DATA PROCESSED
In pursuit of the purposes indicated above, the following categories of data will be processed:
Data provided by the user: identification data (name, surname); contact data (telephone number, e-mail address, etc.). Any additional personal data voluntarily provided in the compilation of data collection forms and / or through the voluntary sending of e-mail will be treated according to the principles of fairness, lawfulness and transparency, and in accordance with the principle of “minimization”, or acquiring and processing data only as necessary in relation to the purposes pursued. With reference to any curriculum received, it should be noted that the data collected are identification data (name, surname, place and date of birth, any photograph), contact data (address, telephone number, e-mail) and data relating to training, education, professional experience, technical knowledge of the person concerned. Applicants are requested not to communicate data concerning health, or data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning sexual life or sexual orientation, and any information in any case related to the particular categories referred to in art. 9, paragraph 1, of the GDPR. In the event that the Curriculum Vitae transmitted also contains data falling into these categories, or if such data are provided during any subsequent assessment interviews aimed at verifying the skills and conditions necessary for a possible recruitment, we will proceed to their treatment only if the candidate has given his consent to the processing of these types of data, provided that we will refrain from using data not strictly relevant to the purpose pursued.
METHODS OF PROCESSING
The processing of personal data provided by you will be carried out using paper and computer tools, in accordance with the provisions on the protection of personal data and, in particular, the appropriate technical and organizational measures referred to in art. 32.1 GDPR, as well as with the observance of all precautionary measures to ensure its integrity, confidentiality and availability.
The personal data voluntarily submitted by you, either by sending an email or by spontaneously sending a curriculum vitae to the GTA Law Firm’s website on the occasion of your application, will be stored in the GTA Law Firm’s database exclusively for the purposes indicated above and for the time period foreseen by the reference legislation. Only the data controller and GTA’s designated authorized data processors shall have access to the data.
For the purposes of this paragraph, GTA Law Firm commits to observe specific security measures to prevent data loss, illicit or incorrect use and unauthorized access, in full compliance with the law and regulations.
RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The personal data that the Law Firm comes into possession of are not subject to disclosure. They may be communicated within our organization and come to the attention of the authorized persons and data processors appointed by GTA Law Firm. Your personal data will not be communicated to third parties and/or disseminated.
Personal data processed for the purposes of letter a) of art 2 may be disclosed to third parties for the sole purpose of maintaining this website. Studio GTA will appoint such third parties as data processors pursuant to art 28 GDPR.
TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
Personal data communicated through the Website will not be transferred to countries outside the European Union.
PERSONAL DATA STORAGE PERIOD
The data collected will be kept for a period of use dependent on the specific purpose.
Personal data relating to requests for information through e-mail will be kept for the time necessary to achieve the purpose for which they were provided and in any case no longer than 24 months after the request was processed. In the event that a professional assignment is given to the GTA Law Firm following contact through the Site, the data subject will be provided with appropriate and specific information.
Personal data provided for research and selection purposes will be kept for a maximum period of 24 months from the date of communication. In the event that the candidate is contacted again and has a selection interview, the data will also be used to maintain possible contact with the person concerned and will be kept for a maximum period of 10 years.
A longer period of data retention may be determined by requests made by the Public Administration or other judicial, governmental or regulatory body or by the Company’s participation in legal proceedings involving the processing of personal data.
RIGHTS RECOGNIZED TO THE DATA SUBJECT
The interested party has the right to obtain access to personal data from the data controller. In particular,
the interested party has the right to obtain the indication of
(a) the origin of the personal data;
b) the purposes and methods of processing
c) the logic applied in case of treatment with the aid of electronic instruments;
d) the updating or rectification;
e) the cancellation or limitation of the processing of data concerning him (transformation into anonymous form, blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed).
The interested party has the right to revoke consent to the processing of personal data. In any case, revocation of consent to processing does not affect the lawfulness of processing based on the consent given before revocation.
The data subject also has the right to data portability.
You may exercise your rights at any time by sending:
a registered letter with return receipt to Studio Legale GTA STA S.r.l., VIALE XI FEBBRAIO, 1 36061 – BASSANO DEL GRAPPA (VI) to the attention of the Data Controller
an e-mail to firstname.lastname@example.org
RIGHT TO COMPLAIN
The interested party has the right to lodge a complaint with the Control Authority, represented in Italy by the Guarantor for the Protection of Personal Data, with headquarters in Rome, Piazza Monte Citorio, 121.
NON-EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS
Studio Legale GTA, with reference to the data processing object of this informative report, does not use automated decision-making processes which produce relevant legal effects for the interested party.
The Data Controller
GTA Law Firm