Privacy Policy – Footprintlegal

1. THE DATA CONTROLLER

This privacy policy, under and in accordance with applicable regulation in relation to the protection of personal data and particular to EU General Data Protection Regulations (GDPR) (Regulation (EU) 2016/679), describes the methods and purposes of personal data processing carried out by Footprintlegal, with its registered offices at Building 3, Chiswick Business Park, 566 Chiswick High Road, London W4 5YA, UK, acting in the capacity of data controller (the Company or the Controller), both through the website www.footprintlegal.com (the Website or the Site) and through other means as described below.

2. PURPOSES OF PROCESSING

Footprintlegal processes personal data relating to lawyers, trainee lawyers, legal counsel and other professionals associated with the provision of legal services, who apply for or express interest in new professional roles (Candidates) with professionals, companies and organizations to which the Company provides search and/or recruitment services (Clients).

Footprintlegal also processes data of users of the Website, as specified below.

(a) data collected through the Website are processed to allow users to know and understand, by browsing the Website, the activities undertaken and the services offered by the Company; data are also processed to ascertain responsibility for computer crimes against the Website;

(b) other than browsing data, personal data collected by the Company, through the means described below, are processed to evaluate and select professionals, at their request and in accordance with Client instructions;

(c) subject to optional registration in the appropriate section of the Website, personal data of users will be processed in order to send email alerts and notifications regarding open job positions and opportunities deemed of interest to the user.

3. METHOD OF COLLECTION OF PERSONAL DATA AND TYPES OF DATA PROCESSED

(A) Browsing data

The computer systems and procedures required for the operation of the Website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with individual interested parties, but by its nature could, through processing and association with data held by third parties, allow identification.

This category of data includes, by way of example, the IP addresses or domain names of the computers used by users connecting to the Website, the addresses in Uniform Resource Identifier (URI) of the requested resources, the applicable timetable, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user’s computer environment.

These data, processed for the sole purpose of obtaining aggregated statistical information regarding the use of the Site and to control its correct functioning, are deleted immediately after their processing. They can also be used to establish responsibility in the case of computer crimes against the Website but otherwise are kept only as long as strictly necessary.

(B) Data voluntarily provided by Users

Candidates send Footprintlegal personal and professional data and, if they so choose, their curriculum vitae, so that such information can be made available to Clients, as expressly agreed by Candidates on a case-by-case basis, through the following methods:

(a) by e-mail to the e-mail address(es) given in the “Contacts” area of the Website;

(b) following any telephone conversation with our personnel, whose contact details are present on the Site (“Contacts” area);

(d) directly from the Site, by filling in the form in the “Register” area. The use of this method is only possible in response to a specific job post published by Footprintlegal on its Site and after filling in the required fields (name, surname, e-mail).

Candidates wishing to receive e-mail notices (alerts) on positions of interest are required to fill in the necessary information in the form “set up notices” within the “Register” area; the sending of the requested alerts will be automatic and fully managed by the Website. Candidates who no longer wish to receive notices need simply send an e-mail to the contacts on the Website with the phrase “I do not want to receive these e-mails”; the service will then be deactivated within five working days.

4. COMMERCIAL COMMUNICATIONS

The Company does not process the personal data of Candidates for purposes other than those strictly necessary for the proper performance of the service it provides to Clients and does not send commercial communications.

Further, Footprintlegal does not adopt web analytics or tracking systems for users, or perform profiling activities, and does not use geolocation services.

5. EXTENT OF CIRCULATION OF DATA

Personal data are processed only by Footprintlegal employees duly trained in compliance with legal obligations, for the sole purpose of fulfilling their professional duties. Similarly, personal data provided are communicated by the Company to Clients only for purposes of providing services to those Clients. In the event that data has to be transmitted to outsourced service providers of Footprintlegal, those service providers will process them as the responsible processing parties duly nominated by the Controller.

Without prejudice to the foregoing, personal data processed by the Company will not be disclosed to third parties other than in order to comply with legal obligations or at the request of the parties concerned.

There will be no dissemination or transfer of data outside the European Economic Area.

6. METHODS AND TIME PERIODS FOR THE CONSERVATION OF DATA

Footprintlegal is equipped with IT systems aimed at ensuring maximum security in the storage of data received.

All data collected in the manner described above are stored in the Footprintlegal information systems and, more specifically, in a database containing Candidates’ profiles.

In any case, personal data are stored for a period not exceeding that necessary for the purposes for which they were obtained, and in any case not for longer than 10 years. Curricula vitae will not be kept for longer than six years.

7. RIGHTS OF INTERESTED PARTIES AND NATURE OF PROVISION OF DATA

The provision of personal data is voluntary, although, without it, Footprintlegal will not be able to offer its services.

Candidates and users of the Website may at any time exercise their rights under applicable legislation on data protection, and in particular their rights:

(a) to access their personal data, obtaining evidence of the purposes pursued by the Controller, the categories of data involved, the recipients to whom they may be communicated, the applicable retention period, the existence of automated decision-making processes;

(b) to have any inaccurate personal data concerning them corrected without delay;

(d) to obtain details of the processing limitations;

(e) to request the data provided to the Controller, so as to receive such data in a structured format, commonly used and readable by automatic device or to transmit such data to another data controller, without obstruction by Footprintlegal, in all cases required by law;

(f) to make a complaint to any competent data protection authority – e.g. the Information Commissioner’s Office of the UK, the Italian Autorità Garante per la Protezione dei Dati Personali, or other as applicable.

The rights listed above may be freely exercised at any time, by sending a written request to the Company by e-mail to: in**@fo************.com.

8. MODIFICATIONS AND UPDATES

The Controller may without restriction modify or update this policy, in whole or in part, in particular to comply with applicable data protection law.

Any modification or update will be promptly notified to users through the homepage of the Website.

Users are invited to revisit this section in order to check the Company’s Privacy Policy as in effect from time to time.