PRIVACY NOTICE

Studio Dignani informs its clients and individuals interested in its services about how personal data collected in the course of its professional activities is processed.

DATA CONTROLLER

The Data Controller is:

Studio Dignani
Via Trento 39/D – 62100 Macerata – Italy
Tel.: 0733 237412
Email: [amministrazione@dignanisaccani.it](mailto:amministrazione@dignanisaccani.it)

The Data Controller may be contacted for any request concerning the processing of personal data and the exercise of the rights granted under applicable data protection legislation.

PERSONAL DATA PROCESSED

Studio Dignani may process the following categories of personal data:

  • personal and identification data;
  • residential or registered office address;
  • tax identification number and VAT number;
  • telephone numbers and email addresses;
  • banking, tax, accounting and financial data;
  • employment and social security data;
  • data contained in documents and communications provided to the Firm;
  • technical data relating to the use of the website and digital services.

Where necessary for the performance of professional services, the Firm may also process special categories of personal data, health data, information relating to employment or trade union status, and data relating to criminal convictions and offences, within the limits permitted by applicable law.

Personal data is normally collected directly from the data subject, the client or the organisation on whose behalf the professional engagement is carried out. Certain information may also be obtained from public registers, public authorities, social security institutions, financial institutions or other authorised entities.

PURPOSES OF PROCESSING

Personal data is processed for the following purposes:

  • assessing and managing enquiries received;
  • preparing quotations and professional engagement agreements;
  • providing accounting, tax, corporate and administrative services;
  • managing accounting records, tax returns and electronic filings;
  • processing payroll, certifications and employment-related obligations;
  • providing business, administrative and management advisory services;
  • managing contractual, administrative and accounting relationships with clients;
  • issuing and recording invoices and managing payments;
  • complying with legal obligations, including tax, accounting and anti-money laundering requirements;
  • protecting the Firm’s rights and legitimate interests, including in the event of disputes or debt recovery;
  • ensuring the security of IT systems and processed data;
  • responding to enquiries submitted through the website, by email or through other contact channels.

LEGAL BASIS FOR PROCESSING

Depending on the activity concerned, the processing of personal data is based on:

  • the performance of a contract, professional engagement or pre-contractual measures requested by the data subject;
  • compliance with legal obligations;
  • the Firm’s legitimate interest in protecting its rights, ensuring system security and properly managing its professional activities;
  • the data subject’s consent, exclusively where required by applicable law.

Special categories of personal data and data relating to criminal convictions and offences will only be processed where necessary for the performance of the professional engagement and where permitted by law.

PROVISION OF DATA

The provision of data required for the performance of the professional engagement and compliance with legal obligations is mandatory. Failure to provide such data may prevent the Firm from accepting or continuing the engagement and from providing the requested services. The provision of any additional information that is not strictly necessary is optional.

HOW DATA IS PROCESSED

Personal data is processed using paper-based, electronic and digital systems, with appropriate technical and organisational measures in place to protect it against loss, unauthorised access, disclosure, alteration or unlawful use.

Data is processed exclusively by authorised personnel, professionals and collaborators who have been appropriately instructed and trained.

No fully automated decision-making processes or profiling activities are used.

DATA RECIPIENTS

Personal data may be disclosed, to the extent necessary for the performance of the professional engagement, to:

  • employees, collaborators and professionals appointed by the Firm;
  • tax, legal, IT and specialist advisors;
  • providers of IT, management, cloud, email and data storage services;
  • banks, insurance companies and debt collection agencies;
  • social security and welfare institutions;
  • the Italian Revenue Agency and other public authorities;
  • judicial, administrative or supervisory authorities;
  • other entities where disclosure is required by law.

Personal data will not be disclosed to the public.

External parties processing data on behalf of the Firm will be appointed as data processors where required by applicable law.

TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

Where certain IT or digital service providers involve the transfer of personal data outside the European Economic Area, such transfers will be carried out in accordance with the conditions and safeguards required by applicable data protection legislation.

DATA RETENTION

Personal data will be retained for the duration of the professional engagement and thereafter for the period necessary to comply with tax, accounting, administrative and legal obligations.

Data may be retained for a longer period where necessary to protect the Firm’s rights, manage disputes or comply with requests from competent authorities.

At the end of the applicable retention period, data will be securely deleted, anonymised or destroyed.

DATA SUBJECT RIGHTS

Data subjects may exercise the rights provided for under Articles 15 to 22 of EU Regulation 2016/679 (GDPR), including the right to:

  • obtain confirmation as to whether their personal data is being processed;
  • access their personal data and information concerning its processing;
  • request the correction of inaccurate or incomplete data;
  • request the deletion of their data, where permitted by law;
  • request the restriction of processing;
  • object to processing where provided for by law;
  • receive their personal data in a structured format, where applicable;
  • withdraw any consent given, without affecting the lawfulness of processing carried out before withdrawal;
  • lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Requests may be sent to:

Studio Dignani
Email: [amministrazione@dignanisaccani.it](mailto:amministrazione@dignanisaccani.it)

Studio Dignani may update this Privacy Notice in response to changes in applicable legislation, its organisational structure or the services it provides.

Last updated: August 2026