Privacy and data protection

We offer a complete and integrated service on legal issues concerning privacy and data protection, dealing both with professionals and with companies.

Being part of several and various business activities, both in the private and in the public sector, our work is characterized and talented by strong personality and deep experience. We advise on companies’ privacy procedures and on the implementation of activities and behaviors, in order for them to comply with the legislation, which constantly changes.

Following the entry into force of the EU Regulation 679/2016, the path has changed: data processors will have to face long term challenges. For this reason, our experts offer a wide range of services: examination of the level of implementation and compliance concerning data protection legislation, drafting of both specific and standard agreements, of privacy notice, pre-assessment and monitoring of potential legal risks and training courses.

A few examples of our recent activities in the field of privacy and data protection follow:

• we regularly carry out the activity of checking compliance with EU Reg. No. 679/2016 of the security measures adopted by the client companies for the protection of personal data processed;
• we prepare preliminary reports on the management of data protection, undertaken by one of our client companies;
• we have arranged a turnkey agreement model in favor of a professional firm whose experts deals with special categories of personal data;
• we have carried out the activity of revision of documents, arrangement and drafting of the appropriate contracts and of privacy notices in favor of one of our client companies that supplies services;
• we have organized training courses for the employees of a corporation;
• we have drafted both cookies and privacy policies to be included in the websites of one of our client companies;
• we have examined the technical and organizational measures for data protection implemented by one of our client companies, in relation to the compliance with the GDPR;
• we have assisted a web agency in drafting of contracts to appoint processors for data processing;
• we have reviewed the functions of geolocation of a software employed by a transportation company in order to locate its fleet, in relation to the compliance with the principles of privacy by design and privacy by default;
• we have drafted privacy notices for patients who are part of clinical trials;
• we have arranged the documentation required to equip the establishment of one of our client companies with video surveillance: privacy notices for visitors and employees, examination of the technical details of the video system and data protection impact assessment (DPIA);
• we have carried out the Data protection impact assessment pursuant to Article 35 of the EU Regulation 679/2016 in relation to processing geolocation data used by a road transportation company;
• we have arranged the privacy documentation needed for the correct usage of new technologies within the company structure: privacy notices for employees, technical report, data protection impact assessment;
• we have organized a training course for employees of the marketing and commercial offices of one of our client companies, with a particular focus on fair communication and social networks.