Policy
Information Notice on the Processing of Personal Data
This notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) and Legislative Decree No. 196/2003, as amended (“Privacy Code”), and describes the methods of processing personal data of users who browse and interact with the website www.modo.legal (the “Website”).
The Data Controller is Modo Legal STA s.r.l. (VAT no. IT18522651001), with registered office at Via Luciano Manara 43 00153 Rome (the “Controller” or “Modo”).
This notice applies exclusively to the Website and does not concern any other websites that may be accessed through external links.
1. Categories of Data Processed
a) Browsing Data
The IT systems and software procedures used to operate the Website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
Such data include, by way of example:
IP addresses or domain names of the devices used;
URI addresses of the requested resources;
time of the request;
method used to submit the request to the server;
size of the file obtained in response;
numerical code indicating the status of the server response;
other parameters relating to the user’s operating system and IT environment.
This information is not collected to be associated with identified data subjects; however, it could potentially allow identification through processing or association with data held by third parties.
Such data are processed solely for the purposes of:
obtaining anonymous statistical information on the use of the Website;
ensuring its proper functioning;
ascertaining liability in the event of hypothetical cybercrime.
The data are retained for the time strictly necessary to achieve the above purposes.
b) Data Provided Voluntarily by the User
The Controller processes personal data voluntarily provided by users through:
sending requests via email;
completing forms available on the Website;
subscribing to the newsletter;
submitting curriculum vitae spontaneously.
By way of example, the following data may be processed: first name, last name, email address, telephone number, address, city, and information contained in the curriculum vitae.
The Website is not intended to collect special categories of data pursuant to Article 9 GDPR nor data relating to criminal convictions and offences.
This notice also applies to any data that may be collected through official pages managed by the Controller on social media platforms (such as, by way of example, LinkedIn and Instagram).
2. Purposes and Legal Bases of Processing
a) Provision of Requested Services
Data voluntarily provided are processed for the purposes of:
responding to information requests;
managing newsletter subscriptions;
enabling the download of materials;
assessing professional applications.
The legal basis for processing is:
Article 6(1)(b) GDPR (performance of pre-contractual or contractual measures);
for newsletter subscription, the data subject’s consent (Article 6(1)(a) GDPR);
the Controller’s legitimate interest in ensuring the security and proper functioning of the Website (Article 6(1)(f) GDPR).
Provision of data is necessary for the delivery of the requested services; failure to provide such data may result in the inability to fulfil the request.
b) Compliance with Legal Obligations
Personal data may be processed in order to comply with obligations provided by applicable law.
Legal basis: Article 6(1)(c) GDPR.
3. Disclosure of Data to Third Parties
Personal data may be disclosed to third parties acting as Data Processors pursuant to Article 28 GDPR, for purposes strictly related to those indicated above.
An updated list of Data Processors is available upon request by writing to: info@modo.legal.
4. Data Retention Period
Data are retained for the time strictly necessary to achieve the purposes for which they were collected and, in particular:
contact request data: for the time necessary to handle the request;
newsletter data: until consent is withdrawn;
other data collected via the Website: no longer than 12 months, unless otherwise required by law;
curriculum vitae: up to 12 months from receipt in case of non-selection; in the event of a positive outcome, for the entire duration of the employment relationship and within the limits provided by applicable law.
5. Rights of the Data Subject
Within the limits provided by the GDPR, data subjects may exercise the following rights:
access to personal data (Art. 15 GDPR);
rectification (Art. 16 GDPR);
erasure (Art. 17 GDPR);
restriction of processing (Art. 18 GDPR);
data portability (Art. 20 GDPR);
objection to processing (Art. 21 GDPR).
Requests may be sent to the Controller at: info@modo.legal.
Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority.
6. Amendments to this Notice
The Controller reserves the right to amend or update this notice, including as a result of changes in applicable legislation.
Any amendments will be published on the Website and will become effective upon publication. Users are therefore invited to consult this section periodically.
