PRIVACY POLICY

(In accordance with Articles 13 and 14 of EU Regulation 2016/679 – GDPR)

Data Controller

The Data Controller is LEO CONSULTING SOCIETÀ A RESPONSABILITÀ LIMITATA SEMPLIFICATA, with its registered office in Milan (MI), Piazza del Duomo no. 20, ZIP code 20122, Tax Code / VAT Number: 12798910969, PEC: leoconsulting@arubapec.it.

The Data Controller processes personal data in compliance with the principles of lawfulness, fairness, transparency, and protection of confidentiality as provided for by Regulation (EU) 2016/679 (“GDPR”).

Types of Data Processed

identifying data (first name, last name, company name);
contact details (email, phone);
tax and administrative data;
data voluntarily provided through the website;
browsing data (IP addresses, logs, cookies).

3. Purpose of processing

a) to respond to requests for information;
b) to provide business, tax, legal, and asset advisory services;
c) to fulfill contractual and legal obligations;
d) administrative and accounting management;
e) protection of the Data Controller’s rights;
f) sending informational/commercial communications (subject to prior consent).

4. Legal basis for processing

- performance of pre-contractual or contractual measures;
- legal obligations;
- legitimate interest of the Data Controller;
- consent of the data subject (where required).

5. Methods of processing

Processing is carried out using electronic and paper-based tools, adopting appropriate security measures.

6. Data retention

The data are retained:
- for the duration of the professional relationship;
- in accordance with legal requirements (tax and civil law);
- for legal defense purposes.

7. Data sharing

The data may be shared with:
- consultants (legal, tax, accounting);
- banking and insurance institutions;
- IT and hosting providers;
- competent authorities.

The data are not disclosed.

8. Transfers outside the EU

Any transfers to countries outside the EU will be carried out in compliance with the GDPR.

9. Data subject rights

The data subject may exercise the rights provided for in Articles 15–22 of the GDPR (access, rectification, erasure, objection, portability).

Requests may be sent to: leoconsulting@arubapec.it

10. Complaint

A complaint may be lodged with the Data Protection Authority.

11. Nature of data provision

The provision of data is:
- necessary for contractual/legal obligations;
- optional for marketing purposes.

12. Updates

This privacy notice may be updated at any time.