Privacy Policy

1 Data Controller

The Data Controller for personal data processing is:

2 Types of Data Collected

Personal data collected by this website, either autonomously or through third parties, includes:

• Browsing data: IP address, browser type, operating system, pages visited, date and time of access
• Voluntarily provided data: name, surname, email, phone, company, and other information entered in contact forms
• Cookies and similar technologies: as described in the Cookie Policy

3 Purposes of Processing

Personal data is processed for the following purposes:

Necessary Purposes

• Responding to information and contact requests
• Providing the requested legal services
• Fulfilling legal, accounting, and tax obligations
• Managing any disputes

Consent-Based Purposes

• Sending informational communications and newsletters (with prior consent)
• Anonymous statistical analysis to improve the website

4 Legal Basis for Processing

The processing of personal data is based on:

• Performance of a contract (Art. 6.1.b GDPR): for providing the requested legal services
• Legal obligation (Art. 6.1.c GDPR): to fulfill legal obligations
• Consent (Art. 6.1.a GDPR): for sending promotional communications
• Legitimate interest (Art. 6.1.f GDPR): for website security and aggregate statistical analysis

5 Processing Methods

Personal data is processed using computer and/or paper-based tools, with organizational and logical methods strictly related to the stated purposes.

6 Data Communication and Disclosure

Personal data may be communicated to:

• Firm collaborators and employees, as authorized processors
• External professionals (accountants, consultants) for accounting and tax purposes
• Judicial or administrative authorities, where required by law
• Technical service providers (hosting, email) as Data Processors

7 Data Transfer

Data is stored on servers located in the European Union. Any transfers to third countries will only occur with adequate safeguards in place (adequacy decisions, standard contractual clauses, certifications).

8 Retention Period

Personal data is retained for the time necessary to achieve the purposes for which it was collected:

• Contact data: until the request is completed and for the following 2 years
• Professional engagement data: 10 years from the conclusion of the engagement (professional and tax obligations)
• Browsing data: 12 months
• Newsletter: until consent is withdrawn

9 Data Subject Rights

Pursuant to Articles 15-22 of the GDPR, you have the right to:

To exercise your rights, send a request to: info@studiolegaledesantis.com

10 Complaint to Supervisory Authority

You have the right to lodge a complaint with the Italian Data Protection Authority:

11 Cookies

For detailed information on the use of cookies, please see our Cookie Policy.

12 Changes to the Privacy Policy

The Data Controller reserves the right to modify this Privacy Policy at any time. Changes will be published on this page with an indication of the last update date.

We recommend checking this page periodically to stay informed about our data processing practices.