{"id":38821,"date":"2023-09-14T15:48:59","date_gmt":"2023-09-14T13:48:59","guid":{"rendered":"https:\/\/lexia.studioup.site\/privacy-policy\/"},"modified":"2026-09-18T09:45:27","modified_gmt":"2026-09-18T07:45:27","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.lexia.it\/en\/privacy-policy\/","title":{"rendered":"Policy privacy"},"content":{"rendered":"\n
PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA RELATING TO THE LEXIA.IT WEBSITE AND VISITS TO LEXIA OFFICES<\/strong><\/h5>\n\n\n\n

<\/p>\n\n\n\n

LEXIA, <\/strong>acting as data controller, hereby informs you, pursuant to Articles 13 and 14 of EU Regulation No. 2016\/679 (“GDPR<\/strong>“) and the applicable legislation on the protection of personal data set out in Legislative Decree 196\/2003, as subsequently amended by Legislative Decree 101\/2018 and its subsequent amendments (hereinafter, the “Privacy Code<\/strong>“), as well as any further regulations issued by the Garante (e.g.<\/em> orders, guidelines, general authorisations, etc<\/em>.) (hereinafter, the “Privacy Regulations<\/strong>“), that the data provided through the website www.lexia.it<\/a> (the “Website<\/strong>“) as well as during your visit to LEXIA’s offices, regardless of the method and tool used, will be processed in the manner and for the purposes set out below.<\/p>\n\n\n\n

This notice applies to the personal data that LEXIA collects from you as a user of the Website (the “User<\/strong>“) or as a client\/potential client or as a contact person of a client\/potential client where you act on behalf of a legal entity (respectively, the “Client<\/strong>” and the “Potential<\/strong> Client<\/strong>“) or as a candidate for open positions at LEXIA or where you submit a spontaneous application (the “Candidate<\/strong>“) (jointly and without distinction, the “Data Subjects<\/strong>“)<\/p>\n\n\n\n

This notice is provided for the Website as a whole, and not for other websites, pages or online services accessible through any hyperlinks that may be published or present on the Website but that refer to resources outside LEXIA’s domain, which may be consulted by the Data Subject.<\/p>\n\n\n\n

Specific summary notices may be progressively included or displayed on the pages of the Website or on domains external to LEXIA, prepared for particular services on request, where implemented.<\/p>\n\n\n\n

1. Data controller<\/strong><\/h2>\n\n\n\n

The data controller is LEXIA,<\/strong> with registered office in Milan, via del Lauro n. 9, 20121, Italian Tax Code and VAT No. 10584260961 (hereinafter the “<\/em>Controller<\/strong>“<\/em>).<\/p>\n\n\n\n

The Controller’s email <\/em>address is: privacy@lexia.it<\/a>. <\/p>\n\n\n\n

The Data Controller may appoint one or more data processors for the Personal Data pursuant to Article 28 of the GDPR, who, on behalf of the Data Controller, provide specific processing services or related, ancillary or support activities, adopting all appropriate technical and organisational measures to protect the rights, freedoms and legitimate interests recognised by law to the Data Subjects.<\/p>\n\n\n\n

2. Description of the processing<\/strong><\/h2>\n\n\n\n

The processing will concern individual operations, or a set of operations, involving the following personal data in connection with your use of the services provided by the Data Controller, through the Website and during your visit to the Controller’s offices, as described in the table below (the “Personal Data<\/strong>” or the “Data<\/strong>“).<\/p>\n\n\n\n

Type of data processed<\/u><\/strong><\/td>Purpose of the processing<\/u><\/strong><\/td>Legal basis for the processing<\/u><\/strong><\/td>Retention period<\/u><\/strong><\/td><\/tr>
<\/strong>Email<\/em> address, first name and surname of the Data Subject and area of interest, provided through the form<\/em> dedicated to sending the informative newsletter<\/em> on the Website.<\/strong><\/strong><\/td>To send LEXIA’s informative newsletter<\/em>, including regulatory updates and invitations to seminars and specialised events.<\/td>Express consent of the Data Subject (Article 6, paragraph 1, letter a) of the GDPR). The Data Subject may withdraw consent at any time by sending an email to the email <\/em>address indicated in this notice or by exercising the opt out<\/em> through the link<\/em> included in the newsletter<\/em> communication.<\/td>Up to two (2) years from collection and in any case until consent is withdrawn by the Data Subject through the dedicated link<\/em> included at the bottom of each communication and\/or through written communication.<\/td><\/tr>
Candidate data contained in spontaneous applications sent through the form <\/em>“Work with Us\u201d <\/em>on the Website or for open positions on the Website or on professional social networks <\/em>(e.g. LinkedIn) or in any questionnaires provided during interviews or provided by \u201chead hunting\u201d<\/em> agencies\/entities:<\/strong>
\u2022 Common data, <\/strong>including: first name and surname, telephone number, professional title, any professional register of membership, email<\/em> address, country and province of residence, attached Curriculum Vitae<\/em>, any further data spontaneously provided by the Candidate;
\u2022 only where necessary and required by the open position,<\/u> special categories of data<\/strong> under Article 9, paragraph 1, of the GDPR, such as data suitable for revealing health status (for example, membership of what are referred to as Protected Categories).<\/td>		\u2022 To assess new potential collaborators and employees;

\u2022 to contact the Candidate to arrange interviews.<\/td>		Performance of steps taken prior to entering into a contract, adopted at the request of the Candidate, pursuant to Article 6, para. 1, letter b) of the GDPR) and Article 111 bis of the Privacy Code and, with regard to special categories of data, fulfilment of obligations attributed to the Controller or the exercise of rights recognised to the Candidate, in the area of labour law and social security or social protection, pursuant to Article 9, paragraph 2, letter b) of the GDPR, as well as the guidance provided by the Garante Authority (e.g. General Authorisation No. 1\/2016 as updated by Order No. 146 of 2019).<\/td>Personal Data will be retained for the time necessary to fulfil the purposes of the processing and for a maximum period of twelve (12) months from the conclusion of the selection process, from the date the curriculum vitae is sent, or from the date of signature of any employment contract or collaboration agreement.<\/td><\/tr>
<\/strong>Data provided by Potential Clients through the Website or the contact addresses on the Website <\/strong>(e.g. professionals’ email addresses) or during a Potential Client’s visit to LEXIA’s offices<\/strong><\/td>\u2022 To respond to the requests of Potential Clients, who may be contacted again by email<\/em> address or telephone number provided;

\u2022 to hold preliminary meetings with the Potential Client.<\/td>		Performance of steps taken prior to entering into a contract, adopted at the request of the Potential Client (Article 6, paragraph 1, letter b) of the GDPR) and, with regard to any special categories of data and\/or judicial data that may be provided, to establish, defend or exercise a right in legal proceedings (pursuant, respectively, to Article 9, paragraph 2, letter f) of the GDPR and Article 10 of the GDPR, by virtue of Article 2 octies<\/em>, paragraph 3, letter e) of the Privacy Code).<\/td>For the time necessary to satisfy the requests of the Potential Client. In any case, this data may not be retained for a period longer than ten (10) years from the fulfilment of the requests received from the Potential Client. Where a client relationship is established with the Firm, reference is made to the privacy notice provided at the time the engagement\/mandate is conferred.<\/td><\/tr>
Users’ browsing data:<\/strong>
\u2022 information on the device used (e.g. mobile network system, unique device identifiers), hardware<\/em> and browser<\/em> settings, IP address;
\u2022 web<\/em> pages visited, duration of the visit, interactions with the page (e.g. scrolling, clicks, etc.), date and time of visits;
\u2022 other parameters relating to the operating system and IT environment used by the User.<\/td>		Monitoring the operation of the Website, including for the purposes of improving the user experience<\/em> and security.<\/td>Legitimate interest of the Data Controller (Article 6, paragraph 1, letter f) of the GDPR).<\/td>For a period of two (2) years.<\/td><\/tr>
To provide the services available on the Website.<\/td>Performance of a contract to which the User is a party or performance of steps taken prior to entering into a contract adopted at the request of the User (Article 6, paragraph 1, letter b) of the GDPR).<\/td>For the time necessary to handle the User’s request, not exceeding 5 years, subject to any need for verification by the competent authorities.<\/td><\/tr>
<\/strong>Cookies<\/em> and other technologies for reading\/storing information on the User’s device.<\/strong><\/strong><\/td>Please refer to the \u201cCookie Policy<\/em>\u201d relating to the Website, available at the following link<\/em>: https:\/\/www.lexia.it\/cookie-policy\/<\/a>.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

It is specified that, with regard to browsing data, the information collected, while not intended to be associated with identified individuals, could, by its nature, if associated with other Data held by third parties (e.g. internet service providers<\/em>), allow the identification of Data Subjects (e.g. IP addresses, domain names of the computers used, URL addresses of the resources requested, the time of the request, the numerical code relating to the status of the response given by the server).<\/p>\n\n\n\n

The User assumes responsibility for the personal data of third parties published or shared on the Website or at the contact addresses on the Website and guarantees that they have the right to disclose or share such data, releasing the Controller from any liability towards third parties.<\/p>\n\n\n\n

Where Candidates provide personal data that is not relevant and\/or pertinent, under the applicable legislation (e.g. rules on protected categories and mandatory hiring, etc.), to the selection process, the Controller will not process such data and will delete it immediately. In this regard, unless strictly necessary, we ask you not to provide this type of information.<\/p>\n\n\n\n

3. Source of the personal data<\/strong><\/h2>\n\n\n\n

The Controller may collect the Personal Data necessary to pursue the purposes set out above:<\/p>\n\n\n\n