Notice on the processing of personal data pursuant to Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018

1. Data Controller

The Data Controller is:
Studio Scau
Via Nazionale Guardia, 31 – 95024 Acireale (CT), Italy
Email: studio@studioscau.it
Phone: +39 095 800086

2. Data Protection Officer

The Data Protection Officer is:
Ing. Ciurcina Fabrizio – reachable at the same email address as the Controller.

3. Purposes of Processing

Personal data may be processed for the following purposes:

  • Management of contractual and pre-contractual relationships;
  • Fulfillment of tax, accounting, and legal obligations;
  • Responding to user requests and communications;
  • Marketing and informational activities (only with explicit consent);
  • IT security management.

4. Legal Basis

  • Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR)
  • Compliance with legal obligations (Art. 6(1)(c) GDPR)
  • Consent of the data subject for specific purposes (Art. 6(1)(a) GDPR)
  • Legitimate interest of the Controller to protect IT assets and prevent abuse (Art. 6(1)(f) GDPR)

5. Processing Methods

Data is processed using electronic and paper-based tools, adopting adequate security measures to ensure confidentiality, integrity, and availability.

6. Data Retention

  • Contractual/tax data: up to 10 years after the termination of the relationship.
  • Data collected through forms or requests: up to 24 months.
  • Data processed for marketing purposes: until withdrawal of consent.

7. Data Sharing

Data may be communicated to:

  • External professionals (accountants, legal consultants);
  • IT service providers (hosting, email, cloud providers);
  • Public authorities in compliance with legal obligations.

No data transfers outside the European Economic Area are foreseen, except to providers certified under Standard Contractual Clauses or EU adequacy decisions.

8. Data Subject Rights

Data subjects may exercise the rights provided by Articles 15–22 GDPR:

  • Access;
  • Rectification and updating;
  • Erasure (“right to be forgotten”);
  • Restriction of processing;
  • Data portability;
  • Objection to processing.

Requests may be sent to studio@studioscau.it.
It is always possible to lodge a complaint with the Italian Data Protection Authority (Garante Privacy).

9. Amendments

This notice may be updated; the latest version will always be available on the website.

Last update: September 9, 2025