Notice provided under article 13 of Regulation (EU) 2016/679: data processed, purposes, retention periods and how to exercise the rights of the data subject.
On this page
This English version is provided for convenience. The Italian version prevails.
§ 1Data controller
The controller of the personal data collected through this site is Morvik Group Italia.
- Company name
- Morvik Group Italia
- Company name
- to be confirmed
- Legal form
- to be confirmed
- Registered office
- to be confirmed
- VAT no.
- to be confirmed
- Tax code
- to be confirmed
- REA
- to be confirmed
- Share capital
- to be confirmed
- PEC
- to be confirmed
- to be confirmed
- Data protection officer (DPO)
- to be confirmed
§ 2Categories of data processed
- Browsing data
- The IT systems that operate the site may log technical data relating to requests, such as IP address, date and time, requested page and browser type. These data are necessary for the operation and protection of the site and are not used to identify the data subject.
- Contact form
- Full name, email address, organisation (optional), topic, message text and page language. Each message is assigned a reference code.
- Protection against misuse
- To limit automated submissions, the server keeps, for 10 minutes and in memory only, an encrypted fingerprint of the IP address from which the form is sent. This fingerprint is never written to disk or linked to the message.
- Data not requested
- Morvik Group does not collect case data. Please do not include health data, judicial data or information on pending proceedings in your message; to have a claim evaluated, please contact ComproCausa (opens in a new tab).
§ 3Purposes and legal bases of processing
- Responding to enquiries
- To act on the data subject’s request (art. 6(1)(b) GDPR) and, where the request does not concern a contract, on the basis of the controller’s legitimate interest in responding (art. 6(1)(f)).
- Assessing applications
- To assess the profile submitted, at the data subject’s request (art. 6(1)(b)).
- Site security
- To protect the site and the form from misuse, on the basis of the controller’s legitimate interest (art. 6(1)(f)).
- Legal obligations
- Where the law requires the controller to retain or disclose the data (art. 6(1)(c)).
§ 4Provision of data
The provision of data is optional. Without a name, an email address and a message, however, it is not possible to respond to the request.
§ 5Recipients of the data
- Group staff responsible for handling the request, authorised to process the data and bound by an obligation of confidentiality.
- The providers of the services required to operate the site and email, appointed as processors under art. 28 GDPR. List of providers: to be confirmed.
- The companies of the group concerned by the request, such as ComproCausa or Kesita, only where this is necessary in order to respond.
- The competent authorities, where required by law.
The data are not sold and are not used for advertising purposes.
§ 6Transfers outside the European Union
Should a provider process data outside the European Economic Area, the transfer would take place only subject to the safeguards laid down in articles 44–49 GDPR, such as standard contractual clauses. Providers and safeguards: to be confirmed.
§ 7Retention period
- Messages
- For the time necessary to handle the request. Maximum period: to be confirmed.
- IP address fingerprint
- 10 minutes, in memory only.
- Browsing data
- to be confirmed
§ 8Rights of the data subject
The data subject may at any time request access to their data, its rectification or erasure, the restriction of processing and data portability, and may object to processing based on legitimate interest (articles 15–22 GDPR).
To exercise these rights, a request may be sent through the contact form. The data subject also has the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it (opens in a new tab)).
§ 9Automated decision-making
The data collected through this site are not subject to decisions based solely on automated processing, nor to profiling.
§ 10Cookies
This site uses no profiling cookies and no analytics tools. Further information is provided in the cookie notice.
§ 11Changes
This notice will be updated if the processing changes or when the information still being confirmed becomes available. The date of the last revision is shown at the top of the page.