According to Articles 13 and 14 of the EU Regulation 679/2016 and the Italian Privacy Code D.Lgs. n. 196/03, this bilingual information notice, each in its respective English and Italian version, explains how the personal data of those who access the site are processed and what the cookie policy is and illustrates the various types of cookies present on the website https://www.novastudia.com and https://www.novastudia.com/it.

INFORMATION ON THE PROCESSING OF PERSONAL DATA

1. Foreword
The EU Regulation 2016/679 on ‘the protection of individuals concerning the processing of personal data and on the free movement of such data’ (hereinafter ‘EU Reg. 2016/679’ or ‘GDPR’) contains several rules aimed at ensuring that the processing of personal data is carried out in compliance with the fundamental rights and freedoms of individuals.

According to Articles 13 and 14 of the GDPR, the following information regarding the processing of personal data is provided.

2. Data controller

The Data Controller of personal data processing is Mr. Nicola Tilli, (C.F. TLLNCL66E08G388R) with office and professional domicile via Quadronno, 4, 20122- Milano (MI) (hereinafter also referred to as ‘Data Controller’), with the following contact details:

Telephone: (+39) 02.58315358

Fax: (+39) 02.700419433

E-mail address: milano@novastudia.com

Certified e-mail address (PEC): nicola.tilli@milano.pecavvocati.it

3. Categories of personal data and source of data

Novastudia professionals do not request personal data from Users before the following paragraph on browsing data. Personal data may be freely provided by the User only in case of contact through the recruitment/employment function with us.

Browsing data

When connecting to the Site, the computer systems and software procedures used to operate them automatically and indirectly administer and/or acquire certain information whose transmission is implicit in the use of Internet communication protocols.

The processing of this data is necessary to guarantee the User the best possible browsing experience and to provide him/her with all the functions and services made available within the Site.

This category of data includes:

• the User’s Internet Protocol (IP) address or domain names of the computers and terminals used by the User;
• addresses in URI/URL(Uniform Resource Identifier/Locator) notation of the resources requested;
• the time of the request, the size of the file obtained in response, and the numerical code indicating the status of the response given by the server (successful, error, etc.);
• Other parameters relating to the User’s operating system and computer environment.

The navigation data do not persist for longer than the time necessary to ensure the operation of the site and are deleted immediately after their aggregation (except for any need to ascertain crimes by the judicial authorities).

Novastudia and its professionals do not collect or process any personal data temporarily acquired from the site for the navigation of the same.

Data provided voluntarily by the User

The optional, explicit and voluntary sending of messages to the contact addresses published on the Site, including the sending of CVs, implies the acquisition and subsequent processing of further personal data by the Data Controller (such as, for example, the sender’s name and e-mail address as well as further personal data possibly included in the communications).

Such data are in any case deleted after a period of 3 months from their acquisition, by contact received from the interested party who has voluntarily released them to the professionals of Novastudia.

4. Purposes of the processing and legal basis

The data collected will be processed for the following purposes:

1. a) to respond to requests for contact or information made by the data subject through the Controller’s contacts published on the Site;
2. b) to examine the candidature of the data subject made by sending a CV to the e-mail address published on the Site
3. c) fulfilling obligations provided for by laws and regulations to which the Data Controller is subject and/or executing orders issued by Authorities legitimated to do so.

The legal basis of the processing is:

– for the purpose referred to in sub a), the legitimate interest of the Data Controller in responding to requests for contact or information received (Art. 6, par. 1, lett. (f), EU Reg. 2016/679);

– for the purpose under b), from the execution of pre-contractual measures (Art. 6.1(b), EU Reg. 2016/679);

– for the purpose under c), from the fulfillment of a legal obligation (Art. 6(1)(c) EU Reg. 2016/679).

The provision of data is not compulsory, but any refusal by the data subject to provide his/her data will make it objectively impossible for the Data Controller to respond to the contact requests and/or information received as well as to evaluate the application of the data subject.

5. Processing methods

Personal data is processed by manual, computerized and telematic means with logic strictly related to the purposes stated in this document and, in any case, in such a way as to guarantee the security and confidentiality of the data by the regulations in force.

In the event of processing carried out by means of electronic and other processing methods, as well as by means of management and storage systems also with state-of-the-art hardware and software, the Data Controller may use third-party service companies that will be made aware of their responsibilities by notification of their appointment as Data Processors pursuant to Article 28 of the GDPR.

The updated list of Data Processors is kept at the Data Controller’s office.

6. Period of data retention

The data collected will be retained for a period of time not exceeding the achievement of the purposes for which they are processed (‘principle of retention limitation’, Art. 5 GDPR) for a period of three months from their acquisition, except in cases of compliance with a legal obligation or order of an Authority.

A check on the obsolescence of the retained data in relation to the purposes for which it was collected is carried out periodically. At the end of the retention period, personal data will be deleted, destroyed or rendered anonymous, without prejudice to any retention periods provided for by law. Therefore, at the expiry of this period, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

7. Categories of persons to whom the data may be disclosed

In some cases, the performance of all the activities connected with and/or instrumental to the management of requests entails the communication by the Controller of the personal data of the interested parties:

– to collaborators of the Data Controller in their capacity as persons authorized to process data and/or system administrators;

– to parties whose right of access is recognized by law;

– to companies or third parties who carry out activities for the Data Controller that are strictly connected or instrumental to the operation of the Site, such as, for example, the company in charge of managing the computer systems on which personal data are stored.

The subjects belonging to the categories to which the data may be communicated will process such data and will use them, depending on the case, in their capacity as Data Processors (if external subjects) expressly appointed by the Controller by the law or, rather, in their capacity as autonomous data controllers (if internal collaborators).

8. Place of processing

The data shall be processed by the Data Controller at the Firm and professional domicile located in via Quadronno, 4, 20122- Milan (MI).

9. Transfer of personal data outside the EU

Data are not transferred by the Controller to non-EU countries.

10. Rights of the interested parties

The interested party has the right to obtain:

– access to the data;

– portability of the data;

– opposition to the processing;

– rectification of data; restriction of data processing; deletion (oblivion) of data;

as well as to:

– withdraw consent;

– complain with the Supervisory Authority (Privacy Guarantor).

11. Procedures for exercising rights

The interested party may exercise his/her rights at any time by sending:

– a communication by paper mail addressed to the Data Controller at Milan, Via Quadronno 4, 20122

– an e-mail addressed to: milano@novastudia.com or nicola.tilli@novastudia.com

12. Minors

Minors under 18 years of age must not provide information or personal data to the Controller. without the consent of those exercising parental responsibility over them. In the absence of such consent, it will not be possible to respond to requests from minors.

The Data Controller invites all those exercising parental responsibility over minors to inform them about the safe and responsible use of the Internet and the web.

13. Changes

The Data Controller reserves the right to make changes to this policy at any time by informing Users on this page. We, therefore, ask that you consult this page regularly, taking as reference the date of last modification indicated at the bottom. If you do not accept the changes made to this Policy, you must notify the Data Controller and you may request that your personal data be removed. Unless otherwise specified, the previous Policy will continue to apply to personal data collected up to that point.

Update december 2024