Privacy Policy

Information provided, in accordance with Article 13 et seq. of EU Regulation 679/2016, hereinafter referred to as “GDPR”and of Articles 13 and 122 of the Personal Data Protection Code (Legislative Decree 196/03) to users who connect to the website www.6499milano.com, hereinafter referred to as “website“.

Purpose of Processing

The personal data provided through the website, or otherwise acquired in compliance with current legislative and contractual provisions, will be processed in compliance with the aforementioned regulations and confidentiality obligations exclusively for the following purposes:

• purposes related to registration and authentication on the site as a registered user;
• purposes connected and/or instrumental to the carrying out of the requested activity
• sending of the periodic newsletter with any commercial information of interest to the registered user;
• sending personal communications in response to and/or relating to requests submitted through the website's contact forms (requests for clarification, error reports, suggestions, etc.)
• publication of professional profiles, subject to further user authorisation, for website editorial staff collaborators;
• management of items submitted by users and contributors, as referred to in the respective Information.

 

The processing of information concerning the user is based on the principles of fairness, lawfulness, transparency, and protection of privacy.
Therefore, any use that is different and/or conflicting with the user's interests is excluded.

Information subject to processing

Regarding the data processed, a distinction must be made based on the activities carried out by the user on the site.

 

1) Navigation

This applies to the user (registered or not) who browses the site to consult texts or use online applications.

The information entered into the online application forms on the website they are not stored permanently on the server but remain available to the user exclusively for the duration of the work session.

Nor is all information relating to accounting documents (invoices, memos, quotes, etc.) that are compiled by the user via this site, such as, for example, the subject, number, and date of the document, retained on the server.

Regarding textual content, we record the number of reads for each article in an aggregated form.

 

2) Interaction via contact form

This applies to online consultation requests, domiciliation, page reporting, sending suggestions, etc.

In addition to the data expressly entered by the user on the form (name, email, telephone where required, etc.), we record the following information in our databases:

• consent to the processing of data based on this notice.
• the IP address from which requests originate (this information is classified by GDPR as “personal data”).
• the type of browser used and whether it is a mobile device.
• the anonymous user identifier created by a proprietary internal algorithm. The identifier is constructed in such a way that it is not possible to trace back to the user's IP address.
• in some cases, also the page of the website visited immediately before submitting the request.
• The date and time of the operation.

Regarding requests for legal advice submitted via the website, further documents may be requested to be sent via email or certified email (PEC), which will be subject to GDPR regulations and, in any case, professional ethics regarding confidentiality.

 

3) Website registration (if yes, if no, to remove)

It applies in the stages where the user wishes to register on the site to open their own personal account and use their Private area.

Passwords for registered users to access the site are stored in a way that No it is ever possible to trace back their original content.

In addition to the data requested at the time of registration (username, email and password), we store in appropriate archives the information that the user, after registration, enters into their personal area.

Registered users who become collaborators from the site, sending articles free of charge for publication, as indicated in the appropriate Information, can Publish your professional profile via a specific option available in the reserved area.

 

4) Newsletter Sign-up (if yes, if no, to remove)

This applies to users who do not intend to register on the site but wish to subscribe to the newsletter.

In that case, we shall only record in our archives the email address entered by the user at the time of registration, in addition to what is described in point 2).

Unsubscription from the newsletter and its archives can be made directly by the user via a dedicated link at the bottom of each newsletter.
Registered users can unsubscribe from the newsletter via the private area as well.

 

5) Sending articles to the editorial department

This applies to users who propose their articles to the website's editorial team for publication.

The same considerations as seen for point 1) apply.

Furthermore, if the user is registered as a collaborator, they can make their professional profile public, which will be automatically linked in all published articles.

 

6) Code for webmasters

This applies to those who intend to use the webmaster code which allows sharing application masks on third-party sites under the conditions stated in the privacy notice.

For statistical purposes, we record the use of the code for webmasters in an aggregated form, storing the following information in our archives, which does not relate to users visiting the site that uses this code, but only to the usage of the code itself:
domain name, shared application, number of views, date of last view.

In accordance with the GDPR, the submission of data for the purposes referred to in points 2), 3), 4), and 5) requires’express acceptance by ticking a specific box found on the various screens where this notice can be directly consulted.

Without such acceptance, it is not possible to proceed with the execution of the requested online operation.

The website No is not currently tracking the user's location.

 

Treatment and storage method

The data will be processed using tools that ensure security and confidentiality, and may also be processed using automated tools for storing, managing, and transmitting the data.

The information is stored using IT tools protected by security systems (e.g. firewall, tools for controlling hacker attacks, tools for automatic detection of malware and potential vulnerabilities, etc.).
The site is developed with a proprietary CMS using tools and techniques that implement the Best practices in matters of software security and robustness.

The content of web pages and all data entered on the website and sent to the server are encrypted via the protocol SSL (Safe browsing); the use of the protocol for secure browsing can be identified by the presence of internet addresses starting with https:// and from the inscription “Secure” that most modern browsers display in the address bar next to the internet address visited.

However, should all security systems in place prove insufficient to prevent the theft of information, as foreseen by Article 33 of the GDPR, the data controller undertakes to report and promptly notify the national Supervisory Authority of any infringements relating to users' personal data.

 

The data of registered users is stored without any Expiry date pre-established and the user can request its deletion (right to be forgotten) in accordance with Article 17 of the GDPR at any time by following the procedure provided within the reserved area, adequately documented.

We use the web server to provide the pages to the user. Apache che, like all web servers, records in appropriate log file protected and inaccessible from outside, user requests for site resources (web pages, images, and other files necessary for operation).
The purpose of such log files is to identify any users carrying out malicious actions against the site (attacks Hackerand at the same time to prevent any misuse of the site's resources to protect other users.
These files are stored on the server for a maximum of 10 days and, in certain cases, if necessary, we can make copies in other protected, externally inaccessible archives for longer storage, however, not exceeding 3 months.

 

Nature of consent, refusal and withdrawal

The provision of personal data is not a legal obligation.

However, the lack of the same, the refusal or revocation of consent to processing as specified below, will make it impossible to establish any professional consulting relationship with the user or to finalise the use of the online services of the site listed below:

• the request for consultancy and professional collaboration.
• Registration on the website.
• the user's request for assistance, both regarding the restricted area and the use of applications.
• sending communications and messages to the editorial team or the webmaster via the site.
• receiving the newsletter.
• access to confidential documents (e.g. case law attached to articles).
• the publication of the professional profile for editorial staff.

 

Communication / dissemination

The data will not be communicated to other parties, nor will it be subject to disclosure or transfer to third parties for any reason, either in Italy or abroad, with the exception of personal data that, for fiscal reasons, it will be necessary to communicate to the Association's accountant (limited to the invoicing of online legal advice) who has provided assurance regarding compliance with the Privacy regulations and absolute confidentiality.

The data controller reserves the right to analyse the data acquired in an aggregated form to perform internal statistics on the use of certain services (e.g. newsletter opens and usage of particular applications), supplementing what already occurs with third-party tools for site traffic monitoring (Google Analytics).

 

Data controller

Data controller is 6499 SRL - Via Del Torchio, 1 - 20123 Milan | VAT number 12095180969

 

User rights

In relation to the processing of personal data and in accordance with Article 13 of the GDPR and Article 7 of Legislative Decree 196/2003, the user has the right:

• Data Access(Article 15 GDPR)
  The user has the right to obtain confirmation as to whether or not personal data concerning them exist and their communication in an intelligible form.
  The request can be sent directly via email to the data controller (see. Addresses mail.
• Correction and cancellation(Articles 16 and 17 GDPR)
  The user has the right to request the rectification, erasure, or restriction of the processing of personal data.
  Registered users can edit their personal and professional details directly from their Private area through appropriate management masks.
  For cancellation, also in the reserved area, it is available on the personal data page the Checkbox for the data erasure request.

 

Warnings

• The account cancellation request is automatically forwarded to the site's technical staff and is irrevocable, or once confirmed, It can no longer be cancelled.
• The user will receive confirmation of the deletion of their data after a few days.
• Once the request has been submitted, the user can no longer access the members' area.
• The username Noit can be reused for a new recording.

• Treatment Limitation(Article 18 GDPR)
  The user has the right to object, in whole or in part, on legitimate grounds, to the processing of personal data concerning them, even if relevant to the purpose of collection.
  In this specific case:
  • Send newsletter:
    Registered users can revoke the use of their email address for sending newsletters at any time by accessing their private area; unregistered users subscribed to the newsletter can exercise this option by clicking on the dedicated link at the bottom of the newsletter.
• Data portability(Article 20 GDPR)
  The registered user has the right to receive the personal data concerning them in a structured, commonly used and automatically readable format. The request must be addressed to the data controller; the personal data will be provided in the format XML.
• Communication
  The user has the right to obtain the identification details of the data controller, as well as any collaborators to whom the data may be communicated or who may become aware of it; the site's collaborators who provide assistance to the user limit access to personal data solely for the purposes requested by the user (request clarification, helpdesk, error resolution, etc.).
• Complaint
  The user has the right to lodge a complaint with the national supervisory authority (Garante) if they identify any use of data that is not in accordance with the aforementioned regulations.;

Communications to the website can be forwarded via the designated contact menu or by sending an email to the data controller.