Privacy Policy

Privacy Policy for the processing of data
(subject to the GDPR for European residents only)

This is a privacy policy pursuant to Article 13, Regulation (EU) 2016/679 (hereafter “GDPR”), when applicable, with regard to personal data of data subjects in the EU that the we obtain by reason of the contact initiated by you or on your behalf and by reason of the engagement of our firm or the possible engagement of our firm.

Please notice that if you share with us data of other people, it is your responsibility to collect such data in compliance with local legal requirements. For instance, you should inform such other people, whose data you provide to us, about the content of this notice and obtain their consent, if necessary.

Data controller

The controller is Wizner Law, PLLC, represented by Andrew L. Wizner, Esq., with headquarters at 999 Asylum Avenue, Suite 202, Hartford, Connecticut 06105 (hereinafter also referred to as “WL”). The controller can be contacted by email at the following address: andrew@wiznerlaw.com.

Purposes of the data processing

The processing of data will be carried out to answer your inquiry and to be able to perform our professional engagement (preparation of petitions, visa applications, issuance of opinions, etc.). The data will also be processed for the purposes that follow:

To comply with tax, accounting, ethics obligations or with other legal obligations imposed on us;
To obtain and maintain insurance coverage (in the unlikely case the insurance requires a list of our clients or in other cases where the disclosure of client data to insurance is required);
For WL to be able to establish, exercise, or defend legal claims if necessary;
To analyze the profitability of our practice or one of more areas of practice;
To improve our services with the use of technology (e.g., cloud computing, electronic databases, etc.);
In case of lateral hiring of a lawyer of the firm (inquire more on this at andrew@wiznerlaw.com);
To keep contacts with you and to inform you of important legal developments and news about our firm.

We may process special categories (data revealing data subject’s racial origin, political opinions, religious beliefs, health status, or sexual orientation) but only when necessary for the establishment, exercise, or defense of legal claims in your interest or when authorized by you. We may process personal data relating to criminal convictions and offences or related security measures but only when the processing is authorised by EU or Member State law in compliance with Article 10 of the GDPR. Personal data may be processed also by automated means (including via laptops and portable devices and smart phones) and will be processed only insofar as it is necessary to carry out abovementioned purposes.

Legal basis for the processing

WL processes the data subject’s personal data lawfully where the processing:

is necessary for the performance of the engagement agreement (or other contract to which you are a party) or for the taking of steps at your request prior to possibly entering into such contracts;
is necessary to fulfill a legal obligation incumbent on WL (e.g., duty of keeping tax and accounting records);
is necessary for the legitimate interests (professional, corporate, organizational, and business) pursued by the WL or by a third party. Learn more about our legitimate purposes by contacting us at: andrew@wiznerlaw.com
is based on the legitimate interest to keep contact with you and to inform you of important legal developments and news about our firm.

Processing of data in the United States of America and transfer

You acknowledge that WL is based in the United States of America and that personal data provided to us by you will be processed therefore in the United States of America. On July 12, 2016, the EU Commission found that the United States of America offers adequate level of protection. We may transfer your data abroad but only: i) where transfer is subject to one or more of the “appropriate safeguards” for international transfers (e.g., standard data protection clauses adopted by the European Commission); ii) a EU Commission’s decision provides the country or territory to which the transfer is made ensures an adequate level of protection; or iii) there is another situation where the transfer is permitted under applicable law (e.g. where we have your explicit consent or one of the other exceptions provided in Article 49 of the GDPR applies).

Consequences of the failure to communicate personal data

With regard to personal data relating to performance of the engagement agreement (or other contract to which you are a party) or the taking of steps at your request prior to entering into such contract, the failure to disclose personal data prevents the performance of the contractual relationship itself.

Data retention

Your personal data will be stored for the duration of the agreement and, subsequently, for the period for which the WL is subject to a duty to keep data for tax, accounting and ethics purposes or for other purposes provided by law or necessary for the purposes of the legitimate interests pursued by the WL or by a third party, as above listed.

Communication of the data

In the limit permitted by our ethics rules, your personal data may be transmitted to:

consultants (e.g., accountants) or other third parties that provide services functional to the purposes above indicated (e.g., developers);
banks and insurers that provide services functional for the purposes above indicated;
subjects who process data due to specific legal obligations;
judicial, governmental and administrative authorities, for the fulfillment of legal and ethics obligations.

Profiling and data dissemination

Your personal data is not subject to fully automated decision-making processing, including profiling. Your data is not subject to dissemination and we do not sell your data to third parties.

Right of the data subject

Data subjects have the following rights:

Right of access, i.e., the right to obtain confirmation as to whether we process personal data concerning the data subject, and, where that is the case, access to the personal data and the other information provided in Article 15 of the GDPR;
Right to rectification (Article 16 of the GDPR), i.e., to have inaccurate data rectified or to have incomplete data completed;
Right to erasure, i.e., the right to have your personal data deleted (upon the occurrence of one of the conditions indicated in Article 17(1) of the GDPR and in compliance with the exceptions provided for by 17(3));
Right to restriction of processing, i.e., the right to obtain the restriction of processing of your personal data (if one of the situations indicated in Article 18(1) of the GDPR, arises).
Where applicable, right of portability, i.e., where the processing takes place on the basis of contract or consent and it is carried out by automated means – the right to obtain from WL your personal data in a machine-readable format, also in order to communicate such data to another data controller.
Right to object at any time to the processing of your personal data in certain specific situations as provided in Article 21. In particular, for communications from us with which we inform you of important legal developments and news about our firm, you have the right to object at any time to processing of personal data concerning you pursuant to Article 21(2).
Withdrawal of consent at any time (if processing is based on consent). The processing based on consent and carried out prior to the withdrawal of the consent remains lawful.
Right to lodge a complaint with a supervisory authority.

If you have any doubts or questions, please contact me: Andrew L. Wizner, Esq., andrew@wiznerlaw.com.