Information Notice on the Processing of Personal Data
Pursuant to Regulation (EU) 2016/679, the “General Data Protection Regulation” (the “GDPR”), Cz Design Studio di Claudio Zanchini, with registered office in Viale Rosmini, 11/E – 47924 Rimini (RN), tax code ZNCCLD76A05H294N, VAT number 03844080402, acting as Data Controller (the “Studio” or the “Controller”), together with any individual Professional Collaborators of the Studio (the list of whom is available on the website czstudio.it), hereby provides you with the following information pursuant to Articles 13 and 14 of the GDPR regarding the possible processing of certain of your personal data, including data belonging to the special categories referred to in Articles 9 and 10 of the GDPR, which may be collected — also verbally — directly from you (as the “Data Subject”), from persons authorized by you, or from third parties (collectively, the “Data” and the “Processing”).
Purposes and Legal Bases of Processing
In any case, the Data will be processed for the following purposes (the “Purposes”):
For the establishment, execution, or termination of the contract entered into with you or with the organization on whose behalf you act, including billing requirements. The Processing will take place, pursuant to Article 6(1)(b) of the GDPR, on the basis of the necessity to perform the contractual relationship, to comply with legal obligations pursuant to Article 6(1)(c) of the GDPR, or on the basis of your consent pursuant to Article 6(1)(a) of the GDPR.
It is understood that, in any case, the Studio may use your personal data to pursue its own legitimate interests, within the limits set forth in Article 6(1)(f) of the GDPR.
The provision of Data is mandatory for all that is required by legal and contractual obligations related to the existing relationship; therefore, any refusal to provide such data or objection to its subsequent processing may result in the Studio being unable to carry out the contractual relationship.
Furthermore, the processing of your personal data (in particular, your name, surname, home address, and email address) may be carried out for informational, educational, and promotional purposes of the Studio, such as subscription to a possible Studio newsletter or invitations to training events. In this regard, the processing is entirely optional and will only occur insofar as a legitimate interest of the Studio exists pursuant to Article 6(1)(f) of the GDPR and as long as your consent remains valid pursuant to Article 6(1)(a) of the GDPR.
Parties Involved in Processing and Data Communication
The Processing will be carried out directly by the Studio or by the individual professionals within the Studio, as Data Controllers or Joint Controllers. Recipients of your personal data also include other authorized individuals, such as internal collaborators, administrative staff, and personnel performing specific functions related to the management of the Studio, all of whom are constantly identified, appropriately trained, and made aware of the constraints imposed by the GDPR and applicable laws.
In processing your data, the Studio may also use specific service providers, such as companies specialized in the provision of IT services related to electronic communications, data and database management, storage, invoicing, and accounting. Such entities are appointed as Data Processors pursuant to Article 28 of the GDPR.
The complete list of Data Processors appointed by the Studio under Article 28 of the GDPR is always available and may be requested by sending an email to info@czstudio.it
Without prejudice to communications and disclosures made in compliance with legal and EU obligations, the personal data subject to Processing may be communicated within Italy to the following categories of recipients:
Credit institutions;
IT consulting companies;
Persons, companies, associations, or professional firms providing services or assistance and consultancy to our Studio, particularly (but not exclusively) in accounting, administrative, tax, and financial matters.
If, in carrying out the consulting and/or assistance and/or legal representation assignment entrusted by the Data Subject to the Studio or individual professionals, the intervention of an external third-party professional becomes necessary, collaboration with such a party will be established only with the Data Subject’s consent. In that case, the third-party professional will act, together with the Studio, as Joint Controller or Data Processor pursuant to Article 28 of the GDPR.
Data Retention
The Data will be processed in Italy, either at the Studio’s premises or by the individual Data Processors. No transfer of Data to Processors established in non-EU countries is foreseen.
The Studio will process the Data for the entire duration of the engagement and until its termination.
Subsequently, the data will be retained, in compliance with legal requirements, for a period of 10 years following termination, after which the Studio will anonymize and/or delete all personal data of the Data Subject, except where longer retention is necessary for the Studio’s and/or individual professionals’ defense purposes (litigation exception).
Rights of the Data Subject and How to Exercise Them
Pursuant to Articles 13(2)(b) and (d), 15, 16, 17, 18, 20, and 21 of Regulation (EU) 2016/679, the Data Subject is informed that, at any time:
they have the right to access their personal data and to request its update, correction, integration, deletion, or restriction of processing;
they have the right to withdraw consent previously given under Article 6(1)(a) of the GDPR, where consent constitutes the legal basis for processing, without affecting the lawfulness of processing based on consent prior to withdrawal;
they have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), following the procedures and indications published on its official website: www.garanteprivacy.it
Legal Notice
The information and documents published on this website are provided solely for informational purposes to illustrate the activities carried out by CZ Studio and must not be regarded as legal advice or as a substitute for legal consultancy services.
The contents of this website have been prepared with care; however, CZ Studio, to the extent permitted by law, disclaims any liability for any cost, expense, loss, or damage that may arise from the use of the website or the information provided therein.
This website may allow access to other websites. CZ Studio disclaims any responsibility for the contents of such external websites.
The processing of personal data received by CZ Studio through this website will be carried out in compliance with the provisions of Regulation (EU) 2016/679 and Legislative Decree No. 196 of 30 June 2003.
