What you need to respond well
General principles, not instructions for a specific case: timing and methods should be assessed with your advisor.
The technical side of the website
A well-documented website makes it easier to know where the data from forms, newsletters and private areas ends up, even when ERP, CRM and PIM systems are connected. For companies in Brianza and Milan we tackle it with your legal advisor or DPO, who is responsible for assessing your specific case: this is not legal advice.
The right to be forgotten is the possibility, in the cases provided by law, to request the erasure of your personal data. It is not absolute and may coexist with other retention obligations. For a company website in Como or Milan you need to know where the data is; every assessment is up to the advisor.
The right to data portability allows, in the cases provided for, receiving the data given to the controller in a structured, commonly used format, to reuse it elsewhere. For websites in Cantù and Brianza, how the data is organised matters; when it applies is assessed by your legal advisor.
Withdrawal of consent is managed by giving users a simple, always accessible way to withdraw it, for cookies, newsletters and forms. With Cookie CMP, cookie consent can be changed or withdrawn at any time: we build it for companies in Como, Brianza and Milan together with your advisor.
Secure data deletion removes data that is no longer needed from databases, backups and connected services, not just from the list visible in the CMS. For company websites in Brianza and Milan the storage points are mapped first; the timeframes are defined by your legal advisor or DPO.
The Italian Data Protection Authority (Garante per la protezione dei dati personali) is the independent Italian authority that oversees the application of privacy law, examines complaints and publishes guidance. For companies in Como, Brianza and Milan it is an institutional reference point; how to read its guidance in your case is for your legal advisor.