Privacy notice

Courtesy translation: in case of discrepancy, the Italian version prevails.

(pursuant to arts. 13 and 14 of Regulation (EU) 2016/679 – GDPR)

1. Data controller

The data controller is Studio Ponchio S.T.P. – Società tra Professionisti Dottori Commercialisti CPA S.r.l.,
established in Italy.
Contact details are available in the Contact section of the site www.studioponchio.eu.

2. Categories of data processed

The site processes the following categories of personal data:

• identification and contact data (name, email, telephone) provided voluntarily by the user;

• data entered in the Elementor contact forms;

• browsing data (IP address, browser, operating system, time of access);

• technical data necessary for the site to function.

The site does not process special category data (art. 9 GDPR) or criminal offence data.

3. Purposes of the processing

Personal data are processed in order to:

• respond to enquiries sent through the contact forms;

• provide information and professional advice;

• comply with legal and tax obligations;

• ensure the technical security of the site;

• allow the features offered to work properly.

4. Legal basis for the processing

The processing is lawful because it is based on:

• the consent given by the user (art. 6(1)(a) GDPR);

• steps taken at the data subject’s request prior to entering into a contract (art. 6(1)(b));

• compliance with legal obligations (art. 6(1)(c));

• the controller’s legitimate interest in the security of the site (art. 6(1)(f)).

5. How the data are processed

Processing is carried out using IT and electronic tools, with security measures appropriate to prevent unauthorised access, loss, unlawful use or disclosure of the data.

6. Retention

Data are kept for as long as is necessary to deal with the user’s requests and in any event in accordance with the periods laid down by the legislation in force.

7. Disclosure of the data

The data are not disseminated.
They may be disclosed solely to:

• the site’s technical suppliers (hosting, maintenance);

• persons required by law to receive them.

Where required, those persons act as data processors.

8. Transfers outside the EU

The site does not systematically transfer data to countries outside the EU.
Any technical transfers take place subject to the safeguards required by the GDPR.

9. Rights of the data subject

Users may at any time exercise the rights conferred by arts. 15–22 GDPR, including:

• access to, rectification or erasure of the data;

• restriction of, or objection to, the processing;

• data portability;

• withdrawal of consent.

Requests may be sent using the contact details given on the site.

10. Complaint to the supervisory authority

Data subjects have the right to lodge a complaint with the Garante per la protezione dei dati personali, the Italian data protection authority, if they consider that the processing infringes the legislation in force.

11. Cookies

The site uses only technical cookies necessary for the pages built with Elementor to work.
No profiling cookies are used.

Further information is given in the Cookie Policy.

12. Updates

This notice may be updated from time to time.
The version published on the site is the one currently in force.