What role does the Italian Data Protection Authority (Garante) play?

The GDPR is the European regulation that sets out how to process people's personal data, and it applies to websites too. For a company in Como or Brianza it means informing users, collecting only what is needed and protecting the data. For your specific case, check with your legal advisor or DPO.

A company website processes personal data collected from contact forms, newsletters, private areas, job applications and statistics tools. For companies in Cantù and Como the exact list depends on the tools active on the site: we map them, while the legal assessment is up to your legal advisor or DPO.

The record of processing activities is an internal document describing what personal data a company processes, for what purposes and with which tools. For companies in Como and Milan the website is one of the items to consider. Whether and how to keep it is assessed by your legal advisor or DPO.

The data controller is, in general terms, the party that decides why and how the data collected by the website is processed: normally the company that runs it. For businesses in Como and Milan, who it is in a specific case should be assessed with your legal advisor or DPO.

For the newsletter, consent is, in general, a voluntary and specific action by the user, accompanied by a clear notice about who is writing and how to unsubscribe. We develop sign-up forms for companies in Como and Brianza; your legal advisor or DPO assesses the specific case.