PURSUANT TO ART. 13 AND 14 OF THE GENERAL REGULATION ON DATA PROTECTION EU 2016/679
The Data Controller
The Data Controller is the Council of the Milan Bar Association , consisting of the President and legal representative pro tempore, Lawyer Vinicio Nardo registered at this office in Milan at the Palazzo di Giustizia, Via Freguglia n. 1, Tel. +39 0254929232, Fax +39 0254101447, email email@example.com, PEC firstname.lastname@example.org.
This notice is included on the Bar's website to provide information to interested parties about their use of personal data .
Purpose of processing
The personal data held by the Bar is collected directly from members, or in other forms provided for by law. The data is processed in compliance with the obligations of correctness, lawfulness and transparency imposed by the legislation as mentioned above, protecting the confidentiality and rights of the persons concerned. The provision of the data requested in the various forms prepared by the Bar is compulsory, following the applicable laws and regulations in force. Failure to provide such data may jeopardise access to the service requested.
Purposes of processing
The personal data you provide is required for the fulfilment of legal obligations, for the internal accounting of the Bar, including the relevant communications to the National Bar Council, for the maintenance of the electronic register and for the performance of the institutional projects for which the Bar is responsible. In particular: management of the register of members, including any changes, cancellations made with or without the aid of computerised tools; keeping of files relating to disciplinary proceedings; professional fee settlements; issuing of opinions on professional fees; keeping of lists of public defenders; keeping of lists of defenders qualified for legal aid. In addition, data may be processed for activities aimed at assisting members in the performance of their profession. Finally, personal data may be processed regarding training and/or professional updating, cultural and/or recreational initiatives (aimed at members and non-members) whose organisation is entrusted to the Milan Bar Association, even only in part, for the purposes strictly necessary for organising the initiative, managing enrolments, collecting participation fees and in any case for all those purposes that are necessary for providing the requested service.
The legal basis for processing is the fulfilment of legal obligations as well as the performance of public interest tasks vested in the Bar. Where data is processed outside of this legal basis, the relevant parties will be notified, and consent to the processing will be required.
Processing and storage methods
Processing will be carried out in automated and/or manual form, in compliance with the provisions of Article 32 of GDPR 2016/679 on security measures, by specially appointed persons and in compliance with the provisions of Article 29 GDPR 2016/ 679. We would like to inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimisation, under Article 5 GDPR 2016/679, subject to your free and explicit consent, your personal data will be kept for the period necessary to achieve the purposes for which they are collected and processed. Any refusal to provide consent for processing may imply that it will not be possible to carry out the requested activities.
Scope of communication and dissemination
We would also like to inform you that the data collected will never be disseminated and will not be communicated without your express consent, except for necessary communications that may involve the transfer of data to public bodies, consultants or other entities, including in their capacity as external data processors, for the fulfilment of legal obligations.
Personal data is subject to dissemination through the institutional website and through the periodic printed publications of the Register and by any means necessary following the public nature of the same.
For the purposes indicated above and the achievement of the Bar's institutional aims, personal data may be communicated to third parties appropriately designated as "Data Processors", such as companies providing data digitisation, archiving, collection, printing and dispatch services, and email management, as well as to financial institutions, social security institutions, insurance companies, publishing companies, doctors and lawyers for the following activities the Bar's debt recovery; operations connected with the collection, processing and storage of data relating to incapacity and invalidity pensions; operations connected with the collection, processing and storage of data relating to maternity and sickness benefits; training events and database and legal information service; printing and personalisation of communications relating to the application of sanctions.
Video surveillance devices are installed in the premises of the Bar Association Secretariat and Library for security reasons.
Rights of the data subject
Pursuant to Articles 15 to 22 of EU Regulation no. 2016/679, at any time you may exercise the right to:
a) request confirmation of the existence or otherwise of your personal data;
b) obtain information about the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, where possible, the storage period;
c) request the rectification and erasure of the data;
d) request the restriction of the processing;
e) request the portability of the data, i.e. receive them from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance;
f) to object to the processing at any time;
g) to request from the controller access to and rectification or erasure of personal data or restriction of any processing that may concern you, in addition to the right to data portability;
h) to withdraw consent at any time without affecting the lawfulness of the processing based on consent given before the withdrawal;
i) to lodge a complaint with a supervisory authority. You may exercise your rights by sending a written request to the Milan Bar Association, either by post to the registered office address or via email to email@example.com
Data Protection Officer (DPO)
The Data Protection Officer (DPO) is Alice Pisapia, lawyer, of the Milan Bar, Via Domenichino 16, 20149 Milan.
The data subject has the right to lodge a complaint with the Garante per la Protezione dei Dati Personali (Data Protection Authority), whose registered office is located om Rome PIAZZA VENEZIA 11 (tel. +39 06696771), in accordance the procedures and instructions published on the Authority's website www.garanteprivacy.it