Privacy policy

This privacy policy describes how Studio Legale Petillo & Partners processes the personal data of visitors to this website, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and D.Lgs. 196/2003 as amended by D.Lgs. 101/2018.

Data Controller

The Data Controller is Studio Legale Petillo & Partners, located at Piazza Albania 13, 00153 Rome (RM), VAT no. 08915291002.

To be completed by the Firm: exact legal name and corporate form, PEC address, any Data Protection Officer (DPO) along with relative contact details.

What data we collect and why

Contact form

When you use the contact form, we collect: full name, email address, phone number (optional), selected practice area, subject and body of the message, and any attachments. We also record the IP address, date and time of submission, and the text of the accepted privacy policy as proof of consent given.

Purpose: to respond to the request and evaluate a potential professional engagement.
Legal basis: consent of the data subject (Art. 6, par. 1, point a GDPR) and pre-contractual measures requested by the data subject (Art. 6, par. 1, point b GDPR).
Retention: messages are automatically deleted after the retention period set in the administration panel, unless a professional relationship is established, in which case statutory and professional ethics terms apply.

Browsing data

In their normal operation, computer systems acquire certain data whose transmission is implicit in the use of Internet communication protocols (IP addresses, request times, pages visited). This data is used solely to obtain anonymous statistical information and to ascertain responsibility in the event of cybercrimes.

Cookies

The site uses technical cookies necessary for its operation and, only with prior consent, analytics cookies and third-party content. Full details can be found in the cookie policy.

Third-party content

Google Maps maps and YouTube videos are not loaded automatically: they appear as placeholders and activate only if explicitly requested by the user. Until that moment, no data is transmitted to Google. When the user decides to load them, the privacy policies of the respective providers apply.

Who we share data with

Data is not disseminated or transferred to third parties for commercial purposes. It may be processed, in their capacity as data processors appointed pursuant to Art. 28 GDPR, by suppliers of technical services essential for the site's operation (hosting, email).

To be completed by the Firm: list of external data processors.

Transfers outside the EU

Data collected via the contact form is stored on servers located within the European Union. Any transfers to third countries would occur solely on the basis of the safeguards provided under Chapter V of the GDPR.

Your rights

As a data subject, you have the right to:

• access your personal data (Art. 15 GDPR)
• request its rectification (Art. 16) or erasure (Art. 17)
• request restriction of processing (Art. 18)
• receive your data in a structured format and transmit it to another controller (Art. 20)
• object to processing (Art. 21)
• withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
• lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it)

To exercise these rights, simply write to the contact details provided on the Contacts page.

Security

We adopt appropriate technical and organizational measures pursuant to Art. 32 GDPR: encrypted HTTPS connection, passwords protected with modern hashing algorithms, database credentials encrypted at rest, administrative activity logs, periodic backups.

Updates

This policy may be updated. The version currently in force is always the one published on this page.