INFORMATION

PRIVACY ARTIFICIAL INTELLIGENCE

INFORMATION ON THE PROCESSING OF PERSONAL DATA IN THE FRAMEWORK OF PROFESSIONAL ACTIVITY

The lawyer Valentina Remonato, as data controller, provides you with the necessary information as required by EU Regulation no. 679 of 2016 pursuant to articles 13 and 14 (hereinafter GDPR).

It is not mandatory to provide the information indicated by the art. 14 GDPR if the personal data are not collected directly from the interested party and must remain confidential in accordance with an obligation of professional secrecy governed by Union or Member State law, including a statutory secrecy obligation. By obligation of the Forensic Code of Conduct, the Data Controller is required, in the interests of the client and the assisted party, to strictly observe professional secrecy and to maintain maximum confidentiality regarding facts and circumstances in any way learned in the activity of representation and assistance in court, as well as in carrying out the activity of legal consultancy and extrajudicial assistance and in any case for professional reasons.

In the following text, for personal data, pursuant to art. 4 GDPR, means: "any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more elements characteristic of his physical, physiological, genetic, mental, economic, cultural or social identity".

Purpose of the Processing

Personal data is processed for the purpose of carrying out professional activities.

The data is therefore taken with the following objectives:

      • Carry out a professional activity.
      • Manage the execution of the mandate received.
      • Carry out the necessary pre-contractual activities.
      • Respond to customer requests.
      • Exercise the rights of the Owner, including defense in court.

Legal Basis of Processing

The processing of personal data by the Data Controller is lawful for the following reasons, in accordance with Regulation (EU) 2016/679 (GDPR).

      • The processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same. This applies to the management of the mandate received and the necessary pre-contractual activities. Article 6.1.b GDPR.

      • Processing is necessary for the pursuit of the legitimate interests of the Data Controller or third parties, unless the interests or fundamental rights and freedoms of the interested party which require the protection of personal data prevail. In this case, the legitimate interest manifests itself in the efficient exercise of the professional activity, carried out in compliance with the ethical obligations existing on the lawyer (responding to requests, exercising rights). Article 6.1.f GDPR.

      • The processing is necessary to fulfill a legal obligation to which the Data Controller is subject. This includes compliance with the legal obligations to which the lawyer is required in the context of his professional activity. Article 6.1.c GDPR.

      • The processing of particular data to ascertain, exercise or defend a right in court (art. 9, par. 2, letter f) GDPR).

What data is processed and source

The Data Controller processes common data (recognition, address, ownership, ordinary information necessary for the assignment...);

and particular data pursuant to art. 9 GDPR (so-called sensitive) to ascertain, exercise or defend a right in court (e.g. before the Court and in general judicial bodies).

The data can be provided not only by the interested parties, but also by the Data Controller's customers or collected through the Public Registers or the databases of public bodies (e.g. Company Register, Public Automotive Registry, risk centres, land register, registry, municipal registers, tax registers, including the archive of financial reports, and of social security institutions, for the acquisition of all relevant information for the identification of things and credits to be subjected to enforcement, including those relating to relationships maintained by the debtor with credit institutions and employers or clients...).

Categories of recipients

Without prejudice to communications carried out in compliance with legal and contractual obligations, the data collected and processed may be communicated to the following categories of subjects:

      • Professionals or companies that provide technical assistance in relation to the exercise of rights or the fulfillment of legal obligations, for example in accounting, administrative, fiscal and tax matters.
      • Judicial consultants for party technical consultancy.
      • Companies and individuals who provide IT services (e.g. TIM cloud storage, Email service, technical assistance). Subjects who provide auxiliary services for the operation of the website (e.g. assistance activities in managing the website's data traffic, IT service providers, hosting).
      • Employees or similar personnel and collaborators of the Controller, who will operate as persons authorized to process personal data.
      • Public administrations for the performance of institutional functions as established by law (Courts, notification offices, chambers of commerce, registrars, revenue agencies...).

The subjects belonging to the above categories act, in some cases, as data controllers. The list of subjects to whom your personal data may be communicated can be requested by contacting the Data Controller. The data is not disclosed, except in cases where there are legal obligations that require the disclosure of the data.

Data transfer

Any transfer of personal data outside the EU is regulated by specific contracts aimed at requiring the recipient to comply with the adequate guarantees provided for by current legislation on Privacy, or to subjects who benefit from an adequacy decision (ex. art. 44 et seq. GDPR); a copy of the adequate guarantees can be requested by contacting the Controller and obtained in the event of transfer.

Period of retention of your personal data

Your personal data will be processed by the Data Controller for the entire duration of the assignment conferred (e.g. duration of litigation). It is specified that data subject to retention obligations established by law (e.g. invoices) or potentially necessary for the protection of rights will be retained for the times established by law as obligations or terms for exercising rights. Therefore, the data is generally stored for 10 years from its last use.

How your personal data will be processed

The processing of your personal data will take place using methods suitable to guarantee its security and confidentiality in compliance with the provisions of the art. 32, GDPR.

Nature of the provision and consequences of a refusal to provide personal data  

The provision of personal data requested by the Data Controller is a necessary requirement for the provision of the professional services requested and any failure to provide the requested data will make it impossible for the Data Controller to fulfill the contractual obligations in whole or in part.

No consequences are foreseen for data freely provided and not requested (e.g. spontaneous data communications...).

Rights of the interested party

In accordance with the characteristics of the service provided to you, the rights provided for in the articles are recognized. 15 to 21 and more generally by the GDPR. In summary:

      • right of access;
      • right of rectification;
      • right to erasure (right to be forgotten);
      • right to limit processing;
      • right to data portability;
      • right to object (at any time, to the processing of personal data concerning you based on the condition of lawfulness of legitimate interest, unless there are legitimate reasons for the Controller to continue processing which prevail over the interests, rights and freedoms of the interested party or for the establishment, exercise or defense of a right in court);
      • revoke consent where previously given, without prejudice to the lawfulness of the processing based on the consent given before the revocation;
      • lodge a complaint with the Guarantor Authority (Guarantor for the protection of personal data). For further information, you can consult the website of the Guarantor for the Protection of Personal Data:  garanteprivacy.it.

Primary method of exercising rights

In order to be certain that your request to exercise your rights will be received, we recommend that you send a registered letter with return receipt. to lawyer Valentina Remonato, Via Vittorio Emanuele II n. 38, 25030, Coccaglio (BS), or a certified Email to valentina.remonato@brescia.pecavvocati.it

The Controller will take care of your request and provide you, without unjustified delay and, in any case, at the latest within one month of receiving it, the information relating to the action taken regarding your request.

Controller and further contact details

The owner is the lawyer. Valentina Remonato with address in Via Vittorio Emanuele II n. 38, Coccaglio (BS), e-mail studiolegale@valentinaremonato.it, pec valentina.remonato@brescia.pecavvocati.it, Office. 39 338 8785457.

⭡

INFORMATION ON THE USE OF ARTIFICIAL INTELLIGENCE SYSTEMS

Pursuant to Law 23 September 2025, n. 132 and Regulation (EU) 2024/1689, customers are informed that the lawyer. Valentina Remonato uses generative artificial intelligence (AI) systems operating in a cloud environment to support processing, jurisprudential research, drafting documents and document management.

The use of these systems occurs in compliance with the following principles:

      • AI systems are used exclusively to improve the efficiency and quality of legal services;
      • every activity carried out via AI is subject to human supervision and control;
      • the processing of personal data via AI systems takes place in compliance with the legislation on the protection of personal data;
      • users are informed when interacting with AI systems;
      • AI systems are not used for activities that may affect fundamental rights without adequate human supervision;
      • the technical and organizational measures necessary to prevent risks and guarantee correctness, transparency and safety in the use of AI systems are adopted.

The use of artificial intelligence systems is limited to instrumental and support activities and in no way replaces professional judgment.
Every decision, evaluation and content processed with the help of AI is verified, validated and assumed under the full responsibility of the lawyer. Valentina Remonato, whose human contribution remains prevalent and decisive in all phases of professional activity.

Date

Last update: 09.10.2025

⭡