Privacy Policy

Information on the processing of personal data

(Pursuant to Article 13 of the EU Regulation No. 2016/679 hereinafter “GDPR 2016/679)

  • Before completing and giving consent, please read the information below the form.


Privacy Policy

Holder of the treatment

The Data Controller is 00UP S.R.L.S., domiciled in Mondovi, Vicolo del Moro no. 6.

Object of the treatment

The Data Controller processes all personal data provided by you on the occasion of any contact with the firm, even before receiving formal assignment.

If the person providing the data is under the age of 16, the processing is lawful if and to the extent that consent is given or authorized by the holder of parental responsibility for the which are acquired the identification data and a copy of the document recognition.

Purpose of the processing

The processing of the personal data you provide is aimed at correct and complete execution of the assignment received, upon fulfillment the necessary tax obligations deriving from the current assignment as well as the fulfillment of the obligations established by law, regulation, legislation community or by order of the Authority.

For the aforementioned purposes, personal data are processed without express consent (Article 6 letters b) e) GDPR).

Methods of treatment and conservation

Personal data are processed both on paper and electronic and / or automated, in compliance with the provisions of art. 32 of the GDPR 2016/679 and regarding security measures and in compliance with the provisions of art. 29 GDPR 2016/679.

The treatment is carried out by means of the operations of art. 4 GDPR 2016/679 and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, block, communication, cancellation and destruction of data.

In compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 GDPR 2016/679, after Your free and explicit consent expressed at the bottom of this letter information, your personal data will be kept for the period of time necessary to achieve the purposes of the processing e in any case for no more than 10 years from the termination of the relationship.

Provision of data

The provision of common, sensitive and judicial personal data is strictly necessary for the purpose of carrying out the activities indicated in the processing purpose.

Refusal to provide data

Refusal to provide data makes it impossible to carry out the activities indicated in the processing purpose.

Access to data

Personal data may be made accessible pursuant to the processing purposes to employees and external collaborators of the Data Controller in their capacity as persons in charge and / or internal managers of the processing and / or system administrators and, in general, to all those public and private subjects. to whom the communication is necessary and / or mandatory for the correct fulfillment of the same purposes.

(the list of said subjects can be seen at at the link

These subjects will process the data in their capacity as independent data controllers.

Dissemination of data

Personal data are not subject to disclosure.

Transfer of personal data

Your data could be transferred to EU Member States European Union and in third countries not belonging to the European Union.

Special categories of personal data

Pursuant to art. 9 and 10 GDPR 2016/679, you could give the study data that can be classified as “particular categories of personal data”, that is, data that reveal “racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to a person’s health or sex life or sexual orientation“. These categories of data may be processed only with your free and explicit consent, given either in writing at the end of this notice or by digital consent at

Existence of an automated decision-making process

Studio 00UP S.R.L.S. does not adopt any automated decision-making process, including profiling, as referred to in Art. 22, paragraphs 1 and 4, of the GDPR 2016/679.

Rights of the interested party

At any time, you can exercise, pursuant to art. from 15 to 22 of the GDPR 2016/679, the following rights:

a) ask for confirmation of the existence or otherwise of their personal data;

b) obtain information on the purposes of the processing, the categories of personal data, recipients or categories of recipients to whom the personal data have been or will be disclosed and, when possible, the retention period;

c) obtain the correction and deletion of data;

d) obtain the limitation of the processing;

e) obtain data portability, i.e. receive them from the owner of the treatment, in a structured format, commonly used and readable by automatic device, and transmit them to another data controller without impediments;

f) oppose the processing at any time and also in the case of processing for direct marketing purposes;

g) oppose an automated decision-making process relating to individuals including profiling.

h) ask the data controller for access to personal data e the correction or cancellation of the same or the limitation of treatment that concern him or to oppose their treatment, in addition to the right to data portability;

i) withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;

l) propose a complaint to the Guarantor Authority.

How to exercise rights

You may exercise your rights at any time by written request sent to 00UP S.R.L.S., Vicolo del Moro no. 6 or to the address never

00up support