Disclaimer

This page describes the procedures in accordance with which the information contained in the website www.vallalaw.com (the “Website”), is managed, with reference to the processing of personal data of the users accessing this Website. This information notice is also provided pursuant to Art. 13 of the EU Regulation 2016/679 (the “GDPR”) - to whoever will access the Website. The information notice is provided with regard to the Website www.vallalaw.com only, and not with regard to other Websites accessed by the user through links. Personal data will be processed in accordance with the GDPR and the laws of the United States, as it may be amended and integrated from time to time (the “Applicable Privacy Law”).

​

THE DATA CONTROLLER
Following access to this Website, data regarding identified or identifiable persons may be processed. The owner of such data processing is Valla Morrison & Schachne Inc., P.C. with offices in San Francisco, New York, and Los Angeles, United States of America, and a representative office in Milan, Italy.

​

DATA PROCESSING
Any data processing connected with the online services provided on this Website shall be carried out at the offices of Valla Morrison & Schachne Inc., P.C. solely by employees, consultants, associates or partners of Valla Morrison & Schachne Inc., P.C., in charge of the processing of data, or by persons entrusted with occasional maintenance operations.

 

TYPES OF DATA PROCESSED
Data automatically collected by the Website

The computer systems and software procedures implemented for the operation of this Website may acquire, during the course of their normal execution, personal data, the transmission of which is implied in the use of the Internet communication protocols. Such information is not collected in order to be associated with identified data subjects; however, due to its nature such information could permit the identification of users, through processing operations and associations with data held by third parties. This category of data includes IP addresses or domain names of the computers used by users who access the Website, URI (Uniform Resource Identifier) notation addresses of the resources requested, the time the request is submitted, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the state of the reply given by the server (sent, error, etc.), and other parameters relating to the user’s operating system and information environment. This data is only used to retrieve anonymous statistical information on the use of the Website and to control that it works properly. Such data will therefore be deleted immediately after being processed. Such data may be used to ascertain any liability in the case of any alleged computer crimes to the detriment of the Website. Except in the case of an alleged computer crime, for the time being data concerning the access to the Website shall be kept for no more than seven days.

​

Data Voluntarily Supplied by the User

The optional, express, and voluntary sending of electronic mail to the email addresses specified on this Website shall imply the subsequent acquisition of the sender’s email address, which is necessary for a reply to any request, as well as the acquisition of other personal data, if any, contained in the email.

Similarly, user’s request of submission of information material by Valla Morrison & Schachne Inc., P.C. shall lead to the acquisition of user’s email address, which is necessary for the transmission of the communications as requested.

Any personal data contained in the curricula vitae sent to Valla Morrison & Schachne Inc., P.C. shall be used for the sole purpose of the assessment of candidates’ profiles and their selection. Such data may be disclosed to other Valla Morrison & Schachne Inc., P.C.’s offices, including third parties. You can contact Valla Morrison & Schachne Inc., P.C. to check your personal data and to request that it be supplemented, updated or corrected, or to exercise any other rights provided for by Articles 15-22 of the GDPR.

 

COOKIES
In order for the Website to function properly, it is specified that only technical cookies are used, no user or third-party profiling cookies are used during the use of the Website.

 

OPTIONAL SUPPLY OF DATA
Apart from that which has been specified above with regard to the Web surfing data, the user shall be free to supply his/her personal data in order to solicit the sending of information material or apply for any professional position at Valla Morrison & Schachne Inc., P.C. If the user does not supply his/her personal data, it may be impossible for him/her to obtain the requested information or for the submitted application to be evaluated. Where required to do so, the failure to give consent shall imply the impossibility for the user to obtain the requested information.

​

PROCEDURES AND PURPOSES OF DATA PROCESSING
The personal data of the user collected at the time of registration of the same on the Website will be processed in order to outline the authentication profile necessary for the user to access their own discretion on the Website itself, as well as to outline the user's profile in order to optimize and customize the services available after registration. As well as to receive periodic newsletters regarding updates about international regulations.

Personal data processing through this Website is carried out in order to fulfill user’s requests or to ensure the proper and secure functioning of the Website itself. Therefore, pursuant to the Applicable Privacy Law, the user’s consent shall not be collected, apart from the cases in which information material (e.g. newsletter, events) is requested by user himself/herself.

​

DATA RETENTION
Data collected by Valla Morrison & Schachne Inc., P.C. through the Website will be retained as long as necessary to achieve the processing’s purposes, and in any event for no longer than the terms indicated below in relation to each category of data:

• Data automatically collected by the Website will be kept insofar as it is necessary to ensure the proper and secure functioning of the Website. Such data may be used to ascertain any liability in the case of any alleged computer crimes to the detriment of the Website. Except in the case of an alleged computer crime, for the time being data concerning the access to the Website shall be kept for no more than seven days;

• Data voluntarily provided by the users will be kept as long as it is necessary to discharge the users’ requests, and in any event for no longer than 10 years from the date they have been collected;
   

RIGHTS OF THE DATA SUBJECTS
1. Confirmation that personal data is being processed and, if so, to obtain access to such data, even if not yet recorded, and their communication in intelligible form;
2. A copy of user’s personal data;
3. The correction of any incorrect personal data or the integration of any incomplete personal data;
4. The cancellation of user’s personal data in the cases provided for by law;
5. Limitation of the processing of user’s personal data;
6. In a structured format, commonly used and readable by automatic device, the personal data and transmit them, directly or through the Data Controller, to another data controller (so-called data portability);
7. Indication:
·  of the origin of personal data;
·  of the categories of personal data processed;
·  of the purposes and methods of processing;
·  of the logic applied in case of treatment carried out with the aid of electronic instruments;
·  of the identification details of the Data Controller and of any responsible parties;
·  of the retention period of your personal data or of the criteria useful for determining this period;
·  of the subjects or the categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or persons in charge pursuant to art. 4 of the Privacy Code / persons authorized to process data in the name and on behalf of the Data Controller pursuant to art. 4 of the GDPR;
8. The transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
9. The attestation that the operations referred to in the preceding articles from 1) to 4) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case where this fulfillment it proves impossible or involves a use of means manifestly disproportionate to the protected right.
10. The user also has the right to object, in whole or in part:
·  for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
·  to the processing of personal data for the purpose of sending advertising materials or direct sales or for carrying out market research or commercial communication.

To exercise the aforementioned rights, Users may send a communication to the following email address gdpr@vallalaw.com indicating the subject "Privacy - Exercise of rights".

​

DATA PROCESSING IN THE CONTEXT OF THE FULFILLMENT OF THE PROFESSIONAL MANDATE
In order to fulfill its obligations under the engagement received from third parties (natural persons and/or natural persons representing legal entities), Valla Morrison & Schachne Inc., P.C. shall process personal data (including the “GDPR”, and personal data relating to criminal convictions and offenses or related security measures pursuant to art. 10 of the GDPR) related to the above-mentioned third parties or to their employees, providers, clients (jointly defined as the “Clients”) collected for the purpose of the establishment, management, execution or conclusion of the legal engagement conferred by the Clients.

Clients’ personal data will be processed electronically or manually, in any case, in such a way as to guarantee their security, protection and confidentiality, for purposes connected or related with: (i) the establishment, management, execution or conclusion of the legal engagement, (ii) information, communications (e.g. invitation to seminars, conferences, etc.) or publication of the relevant operations carried out by Valla & Associates, Inc., P.C. (limited to the Clients’ names and the nature of the service provided).

The processing of Clients’ personal data is necessary to the extent required to fulfill Valla & Associates, Inc., P.C.’s obligations under administrative law and under the engagement received from the Clients. Valla Morrison & Schachne Inc., P.C. shall collect Clients’ consent to process their personal data only in relation to the purposes under point (ii) above, unless the Applicable Privacy Law provides otherwise (e.g. the Clients’ consent is not necessary when Valla Morrison & Schachne Inc., P.C. has a legitimate interest in processing their personal data). Clients have the right to withdraw their consent in any moment, when it constitutes the legal basis for the data processing.

Clients’ personal data will be processed confidentially and in compliance with the GDPR, and they will be retained for a period not exceeding 10 years after their collection (save if longer periods are justified by grounded reasons). 

In pursuing the purposes mentioned above, Valla Morrison & Schachne Inc., P.C. may communicate or make available Clients’ personal data to third parties (which will process the personal data as data controllers, data processors or persons in charge of processing, depending on the circumstances), including, but not limited to professionals or clerks or assistants who work with Valla Morrison & Schachne Inc., P.C. or the supporting staff, duly appointed and instructed on the basis of a criterion that grants them access to the minimum amount of necessary personal data; individuals, companies, associations or firms that offer services or assistance and advice or provide services to Valla Morrison & Schachne Inc., P.C.; persons whose right to access personal data is recognized by law, regulations or provisions issued by legally empowered authorities.

Clients’ Personal Data may be transferred to EU and non-EU countries, with the Clients’ consent or in compliance with the relevant provisions of the Applicable Privacy Law, or to Valla Morrison & Schachne Inc., P.C.’s offices located outside the EU, or to appropriate government organizations, agencies, or anyone that is required or authorized by you to receive your information to properly perform the services hereunder.

Clients may exercise, by sending a written request to Valla Morrison & Schachne Inc., P.C., the rights provided by the GDPR and the Applicable Privacy Law, including: (i) to ask the data controller to confirm the existence of their personal data, (ii) to be informed of the origin of such data, the logic and purpose of their processing, (iii) to obtain the identification details of the controller and of the processors, (iv) to be informed of the categories of parties to whom the data may be communicated as designed representatives within the territory of the State, as data processors or as persons authorized to personal data processing, (v) to obtain the erasure, transformation into anonymous form or blocking of any data illegally processed, as well as updating, rectification or, if interested, integration of personal data and (vi) to object to the processing of personal data, wholly or partly, on legitimate grounds.