What does this Privacy Policy cover?

This Privacy Policy is to be construed as information notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and applies to personal data collected and processed by Nctm Studio Legale, with registered office in Milan, Via Agnello 12 - as data controller - ("we",“us” or "our", as the case may be) through the website www.advant-nctm.com (the "Site") or, in any case, whenever you contact us or interact with us. Specific information notices may apply to data collected in certain sections of the Site.  

Besides Italy, we also operate abroad through or in collaboration with Nctm LLP, with registered office at 40 Bruton Street, W1J 6QZ, London (UK) and Nctm Studio Legale - Shanghai branch, Room 40102 Hong Kong New World Tower, 300 Middle Huaihai Road (CN), which may act, as the case may be, as our data processors or as autonomous data controllers for the same purposes and under the same terms and conditions indicated in this Privacy Policy. Any reference to us shall therefore be deemed to refer automatically, as the case may be, to Nctm LLP and Nctm Studio Legale - Shanghai branch.

It is understood that it is your responsibility to inform the persons to whom any personal data you provide us with of the processing referred to in this Privacy Policy and to obtain their consent if necessary.

What categories of personal data do we collect?

We may collect the following data:

1. Identifying data such as name and surname;

2. Contact details such as e-mail address;

3. Information about the organisation where you work;

4. Information relating to your access to and use of the Site such as the IP address and approximate location of your device, the browser you are using, the operating system, the web page you visited before accessing the Site, the pages you visited and the time you spent on those pages, the links you clicked on and other information, including information collected through cookies and other tracking tools;

5. Any other information you voluntarily provide us with.

For more information on cookies, please see our Cookie Policy.

The provision of your personal data is optional but necessary for the pursuit of the purposes listed below; if you do not provide us with your personal data, we cannot pursue these purposes.

How do we collect your personal data?

Most of the information we process is provided to us directly by you when you browse the Site, fill in the forms on the Site and generally whenever you contact us or interact with us. Some of your personal data may be collected from third parties

For what purposes and on what legal basis do we process your personal data?

We may process your personal data for:

1. Allowing you to use the services offered through the Site, to access the information content therein and to register and participate in activities organised, sponsored or promoted by us;

2. Answering your questions and handling requests addressed to us, our professionals and employees;

3. With your consent, send you - via e-mail or other automated communication systems - communications about activities organised, sponsored or promoted by us (including invitations to conferences, webinars, book presentations, exhibitions, events or other initiatives) as well as communications and materials of an informative  or promotional nature (including newsletters, memoranda, presentations and other documents) about us and our services;

4. If you are already our client, even without your consent, send you communications of an informative or promotional nature relating to services similar to those previously provided to you to the e-mail address you have provided;

5. To process statistics on the use of the Site by users on the basis of data collected through the cookies of the SIte;

6. Fulfill legal obligations to which we are subject;

7. Exercise or defend legal claims in judicial proceedings.

The processing of your personal data for the purposes set out in numbers (1) and (2), does not require your consent as it is necessary to fulfil your requests, pursuant to Article 6(1)(b) of the GDPR. The processing of your personal data for the purposes set out in number (3) requires your consent pursuant to Article 6(1)(a) of the GDPR. The processing of your personal data for the purposes set out in numbers (4), (5) and (7), does not require your consent as it is necessary for the pursuit of our legitimate interests pursuant to Article 6(1)(f) of the GDPR. The processing of your personal data for the purposes set out in number (6), does not require your consent as it is necessary to comply with legal obligations to which we are subject pursuant to Article 6(1)(c) of the GDPR.

How do we process your personal data?

We take appropriate technical and organisational measures to ensure an adequate level of protection for your personal data against the risks of destruction, loss or alteration (accidental or unlawful) of personal data and unauthorised disclosure of or access to them.

How long do we keep your personal data?

Your personal data will be kept for different periods of time depending on the purposes for which they were collected. Specifically:

1. the data collected and processed to fulfil your request will be kept until your request has been processed;

2. the data collected and processed for the purpose of sending the communications described above will be kept for two years from the date on which you first expressed or renewed your consent to the processing or, if you are already our client, from the date of your last communication with us; the data collected through cookies will be kept in a form that allows identification for the periods of time indicated in relation to each cookie in the 'preferences' section of the cookie banner.

3. data collected to fulfil legal obligations to which we are subject will be kept for as long as we are required to keep it on the basis of applicable legal provisions;

4. data collected for the purpose of exercising or defending legal claims in judicial proceedings shall be kept for a period of time equal to the limitation period of the rights for the exercise or defence of which the processing is necessary. 

To whom are your personal data disclosed?

Your personal data may be made accessible, brought to the attention of or communicated to the following subjects, who will act as authorised persons, data processors or autonomous data controllers:

1. our professionals, employees or collaborators in any capacity;

2. professionals, employees or collaborators in any capacity in other ADVANT law firms;

3. public or private entities, natural or legal persons, who carry out processing activities on our behalf or to whom we are obliged to communicate your personal data, by virtue of legal or contractual obligations such as suppliers and consultants whose services we use for the management of the Site or for the organisation of conferences, webinars, book presentations, exhibitions, events or other initiatives, etc.

We inform you that in the event that some of the subjects to which your personal data are communicated are established outside the European Economic Area, we will transfer your personal data, in the absence of an adequacy decision and since none of the exemptions set out in Article 49 of the GDPR apply, on the basis of the standard contractual clauses set out in Article 46(2)(c and d) of the GDPR.

The identity of the data processors can be requested by writing an e-mail to the e-mail address below.

Your rights under data protection legislation

Pursuant to Articles 15 to 21 of the GDPR, you have the right to ask us to:

1. be informed about the purposes and methods of the processing of your personal data;

2. access and receive copies of your personal data;

3. rectify incomplete, inaccurate or outdated data;

4. delete your personal data;

5. restrict the processing of your personal data, where applicable under the GDPR;

6. object to the processing, in whole or in part, where applicable under the GDPR;

7. obtain portability of your personal data, where applicable under the GDPR.

Where consent is required for the processing of personal data, you may also revoke the consent already given at any time, without affecting the lawfulness of the processing based on the consent given before revocation.

You can exercise the above rights and request any information on the processing of your personal data by contacting us at info@advant-nctm.com.

In addition, you have the right to lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it) if you feel that your rights under the GDPR have been violated.