disclosure for processing of personal data
In compliance with the provisions of D.Lgs 196/03 as emended and of the Regulation (EU) 2016/679 of the European Parliament and Council (“General Data Protection Regulation” or “GDPR”), Stefano Boeri Architetti S.r.l., with registered office at Via Donizetti 4 – 20122 Milano, VAT Registration No. 07526210963, acting in its capacity as Controller, informs you of the procedures and purposes of the processing of your personal data.
1. Data which are subject to the Processing
During commercial negotiations, or the stipulation and performance of contracts or commercial agreements with Stefano Boeri Architetti S.r.l., you will be asked for or you will provide the following data to Stefano Boeri Architetti S.r.l.:
2. Legal basis and purpose of processing
Your personal data, as described hereinabove, shall be processed by Stefano Boeri Architetti S.r.l.:
All other purposes shall be covered by a dedicated disclosure and eventual, specific, separate consent.
3. Processing procedures
The personal data shall be processed by means of the operations indicated in Article 4(2) GDPR, and specifically through the collection, recording, organisation, storage, consultation, elaboration, modification, selection, extraction, comparison, use, interconnection, block, communication, deletion, and destruction of the data.
The personal data shall be subject both to paper and electronic and/or automated processing.
The Controller shall adopt appropriate security measures to prevent the unauthorised access, disclosure, modification, or destruction of the personal data.
The personal data shall be processed not only by the Controller but also by the Controller’s employees, contract workers, consultants, and professionals. They shall always do so within the framework of the purposes mentioned hereinabove and after their being designated by the Controller as authorised parties, including specific instructions as necessary to comply with personal data protection regulations.
Your data shall not be distributed and shall be rendered accessible, only for the purposes indicated in Article 2 hereinabove, to the Controller’s employees and contract workers in their capacity as internal persons in charge of the processing and/or internal data processors, to external consultants for the management of tax and social security contribution compliance, and to system administrators as well as eventually transmitted to third parties that will operate as autonomous Data Controllers (
The personal data shall be managed and stored on servers located within the European Union and managed by the Controller. The servers are currently located in Italy.
The data treated for the purposes set forth above to chap. a) and b) Art. 2 above, shall not be transferred outside the European Union. Regardless, it is agreed that the Controller may also move the servers to another country in the European Union and/or outside the European Union if necessary. In that case, Stefano Boeri Architetti S.r.l. hereby assures that the data shall be transferred outside the European Union in compliance with the provisions of applicable laws, after stipulating agreements guaranteeing an adequate level of protection and/or by adopting the standard contractual clauses required by the European Commission.
Personal data treated for the purpose set forth to letter c) of art. 2 above, shall be treated also by using the services provided with Mailchimp.
MailChimp is a Newsletter distribution platform owned by the US provider Rocket Science Group, located in LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
The email addresses, name and surname of people included in our Newsletter list are stored on the MailChimp servers in the USA to allow MailChimp to spread our Newsletters more quickly and in a more personalized way.
MailChimp uses this information to send and evaluate the Newsletters on our behalf.
Please note that emails sent with Mailchimp contain a “web beacon”, such as a pixel file, which is retrieved by the MailChimp server each time the email is opened. This means that when our email is received, technical information is collected and is used to improve the newsletter distribution services. The information can be give evidence of the specific recipient of the newsletter only in case of technical necessity. The statistical survey allows us to know if the newsletters have been opened, when and what links have been consulted. This type of information helps us adapt the contents of our newsletters and send You emails always of your interest.
In any case, we inform you that, as included in the list for sending the Newsletter, we will send the recipient an e-mail to give notice of it and to allow him, if he does not agree to receive our newsletter, to deactivate the service simply and quickly by clicking a button in our email.
4. Duration of the processing
The data will be stored for the entire duration of the contractual relationship. After termination of the relationship, the data shall be stored, in protection of the Controller’s rights and in such a manner as to be accessible only when necessary, for a period of time corresponding to the statute of limitations on any rights that might be claimed against the Controller. That period varies according to the type of information and any occurrence of causes for the interruption or suspension of the statute of limitations.
Once those terms for record retention expire, the collected datatreated for the purposes set forth above to chap. a) and b) Art. 2shall be eliminated from all computer and/or paper media.
The collected data treated for the purposes set forth above to chap. c) Art. 2 shall be treated until the opt out communication from Newsletter service.
5. Nature of the provision of data and consequences of failure to provide them
Provision of the data and issuance of the consent to processing for the processing indicated at Article 2 hereinabove are absolutely necessary to accomplish the purposes described hereinabove. Failure to provide the collected data might render it impossible to pursue the aims mentioned hereinabove.
The opt-out option from Newsletter service in no way compromises the processing of data for the purposes referred to in points a) and b) of art. 2 above.
6. Data subject’s rights
In connection with the purposes of processing, you may exercise the rights envisaged in Articles 15 et seq. GDPR, and in particular the right to:
Moreover, pursuant to Article 7, paragraph 3, GDPR, you are granted the right to revoke your consent at any time. The revocation of consent does not prejudice the legality of the processing based on your consent before revocation.
7. Procedure for exercising rights
The data subject may exercise his/her rights at any time, as provided at clause 8 hereinabove, by sending:
– a certified letter with return receipt to Stefano Boeri Architetti S.r.l., at its office at Via Donizetti 4 – 20122 Milano, VAT Registration No. 07526210963
– an e-mail to privacy@
8. Controller, data processors, and persons in charge of the processing
The Controller is Stefano Boeri Architetti S.r.l. with office at Via Donizetti 4 – 20122 Milano, VAT Registration No. 07526210963.
The updated list of categories of data processors and persons in charge of the processing is kept at the registered office of the Controller.
Confirmation upon having read and promise to share the disclosure
We declare we have read the disclosure and we promise to share the disclosure to employers and collaborators, whose personal data are transmitted to and processed by Stefano Boeri Architetti S.r.l. who processes data for the business.