METI VALUE ADVISORY S.T.P. S.r.l. (hereinafter referred to as “METI”), owner of the personal data voluntarily communicated by you pursuant to EU Regulation no. 679/2016 – General Data Protection Regulation (GDPR), hereinafter also only “GDPR”, recognizes the importance of the protection of personal data and considers their protection one of the main objectives of its activity.

 

1. DATA CONTROLLER

   METI VALUE ADVISORY SOCIETA’ TRA PROFESSIONISTI A R.L.
   Viale Emilio Caldara n. 33
   20122 MILAN
   Legal representative: Dr. Federico Broglia

 

2. PERSONAL DATA SUBJECT TO PROCESSING

   By “Personal Data” we mean any information concerning an identified or identifiable natural person, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic elements of his/her physical, physiological, psychic, economic, cultural or social identity.

   In particular, the Personal Data collected by the Site are as follows:

   Automatic navigation data

   During their normal operation, the computer systems and software procedures used to operate the Site acquire some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the Site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters regarding the operating system and computer environment. These data are used in order to obtain anonymous statistical information on the use of the Site and to check its correct functioning; to allow – given the architecture of the systems used – the proper provision of the various features you requested, for security reasons and to ascertain responsibility in case of hypothetical computer crimes against the Site or third parties.

   Data provided voluntarily

   Apart from what has been specified above in relation to navigation data, which is necessary in order to implement computer and telematic protocols, the provision of Personal Data by users of the Site is free and optional, even though it is functional to the provision of certain services: in these cases, therefore, failure to provide data could compromise or make it impossible to provide the service.
   In particular, through the Site you have the opportunity to voluntarily provide Personal Data, for example, name, surname and e-mail for subscription to the Newsletter service or by sending, again optional and voluntary, e-mail messages containing contact requests, requests for quotes, spontaneous candidacy through the sending of CV or any other type of communication to the addresses or contact details indicated on the Site. The sending of said communications will entail the acquisition of your e-mail address, which is necessary in order to reply to your requests.

   METI will process the above mentioned data in compliance with the GDPR, assuming that they refer to you, your company or third parties who have expressly authorized you to provide them on the basis of a suitable legal basis that legitimizes the processing of the data in question. Compared to these assumptions, you stand as an independent owner of the treatment, assuming all the obligations and responsibilities of the law. In this sense, you confer on the point the widest indemnity with respect to any dispute, claim, request for compensation for damages from treatment, etc.. that may be received by the Owner from third parties whose Personal Data have been processed through your use of the Site in violation of the law.

 

3. NEWSLETTER

   In order to provide and manage the newsletter of the Site, METI uses the service offered by MailChimp. To subscribe to the mailing list that allows you to receive, automatically and free of charge, the Newsletters via e-mail, you can use the “Newsletter Sign-up” form on the Site.

   On this point, it should be noted that METI uses for this purpose the aforementioned MailChimp service of the company The Rocket Science Group, LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, and therefore, in the case of adherence to the newsletter service, the data of the interested party may be transmitted and known by this American company providing the service and stored on cloud databases of the aforementioned company.

   The data collected is processed through the platform and IT tools offered by the MailChimp service, as well as through additional IT tools used for data management.

   The data of the person concerned who subscribes to the Newsletter service will, therefore, be transferred abroad; however, we inform the person concerned that, in order to legitimize and guarantee the transfer of said data outside the EU, standard contractual clauses have been signed with the company providing the service, which also adheres to the Privacy Shield.

   The collected data is stored on MailChimp’s secure servers. In any case, the guarantees provided by the privacy policy of MailChimp apply.

   The conferment of data is optional, but the refusal involves the impossibility for METI to carry out the requests for sending the newsletter and its registration in the mailing list.

   The data are stored until the request of the interested party of any opposition to the sending and the will of the latter to waive the receipt of the Newsletter.

 

4. METHODS, PURPOSES, LEGAL BASIS, MANDATORY OR OPTIONAL NATURE OF PROCESSING, CONSEQUENCES OF REFUSAL, CONSENT

   The collection and processing of Personal Data by the Data Controller is carried out in compliance with the principles of lawfulness, correctness and transparency and in such a way as to guarantee adequate security, including protection, through appropriate technical and organizational measures, from unauthorized or unlawful processing and from accidental loss, destruction or damage.

   Personal Data are processed, mainly by electronic means, for the time strictly necessary to achieve the purposes for which they were collected, without prejudice to the need to store data to meet the obligations laid down by law and/or for the duration of the prescriptive terms applicable by law, even after the termination of processing operations.

   The processing operations connected to the web services of the Website are carried out by METI’s staff (dal personale di studio), authorized for this purpose to process Personal Data, as well as by third parties acting as Data Processors or Data Controllers in relation to the specific activities provided.

   No data deriving from METI web services, if not in anonymous and aggregate form, is subject to dissemination.

   The Personal Data you provide through the Site will be processed by the Data Controller:

   I) without your express consent (Article 6, letters b, c, f, GDPR), for the following purposes:

1. purposes of statistical research/analysis on aggregated or anonymous data, without therefore the possibility of identifying the user, aimed at measuring the operation of the Site, measuring traffic and assessing usability and interest;
2. purposes related to the fulfilment of obligations under the law, a regulation, legislation or an order of the Authority (such as anti-money laundering), to which the Owner is subject;
3. purposes necessary to ascertain, exercise or defend a right in court or whenever the judicial authorities exercise their jurisdictional functions.
4. II) with your consent (Article 7, GDPR), for the following purposes:
5. the sending of Newsletters containing material of an informative and popular nature, articles and publications, also in relation to the professional activity of the Owner.

   The legal basis for the processing of personal data for the purpose referred to in section II), point a) above is consent. The provision of data for this purpose is optional, with the consequence that you may decide not to provide your consent, or to revoke it at any time. Failure to provide this consent does not have any consequences on contractual relations.

   The interested party may revoke consent at any time.

   The Owner does not carry out treatments that consist of automated decision-making processes.

 

5. DATA STORAGE

   The management and storage of personal data takes place on servers located within the European Union owned by the Owner or the provider of hosting services for the website.

   Your Personal Data will be processed for the time strictly necessary to achieve the purposes indicated under par. 4 above. By way of example, the Data Controller will process your Personal Data for the Newsletter service until you decide to unsubscribe from this service.

6. RIGHTS

   In accordance with the provisions of Chapter III, Section I, GDPR, you have the right to exercise the rights indicated therein and in particular:

   Right of access

   The right to obtain confirmation as to whether or not your personal data are being processed and, if so, to receive information regarding, among other things: the purposes of the processing, the categories of personal data processed and the period of storage, the recipients to whom the data may be disclosed (Article 15, GDPR).

   Right of rectification

   To obtain, without undue delay, the amendment and/or the integration of incomplete or inaccurate personal data (Article 16, GDPR).

   Right to erasure

   To obtain, without undue delay, the deletion of personal data as provided for in the GDPR (Article 17, GDPR).

   Right of limitation

   Obtain from the Data Controller the limitation of processing as provided for by the GDPR (Article 18, GDPR).

   Right to portability

   To receive in a structured, commonly used and machine-readable format the personal data you provided to the Data Controller and to have them transmitted to another data controller without hindrance, as provided for by the GDPR (Article 20, GDPR).

   Right of opposition
   To object to the processing of personal data unless there are legitimate reasons for the Controller to continue the processing (Article 21, GDPR).

   Right to complain to the supervisory authority

   File a complaint to the Supervisory Authority for the protection of personal data, Piazza di Montecitorio n. 121, 00186 Rome (RM).

   You may exercise these rights by simply sending a request via e-mail to the address

   email: privacy@metistp.it.