Privacy Policy

1. Data Controller

The Data Controller of personal data is Studio Legale Alessandri & Lo Torto, with offices in Milan and Venice. Email: segreteria@alessandrielotorto.it

2. Types of data collected

The Firm collects the following data: name, email or telephone number, the content of the message sent via the contact form, and browsing data (technical cookies and visit statistics, see the Cookie Policy). A request sent with the form also carries the first page visited and the source of the visit (including, if you arrive from a Google ad, its click code); only if the optional box is ticked, also the number of visits to the website and the days since the first one.

3. Purposes of processing

Data is processed for the purposes of legal consultancy, management of contact requests and contractual obligations. It is not used for marketing purposes without explicit consent. The legal basis is the reply to your request and pre-contractual measures (Art. 6(1)(b) GDPR) and, for visit statistics, the Firm’s legitimate interest in improving the website (Art. 6(1)(f) GDPR).

4. Methods of processing

Data is processed using electronic and paper-based tools, with security measures suitable to prevent loss or unauthorised access.

5. Who processes the data

Requests sent with the contact form are collected by Netlify (Netlify, Inc., United States), which hosts the website, and can be viewed only by the Firm and by TeoTech, the website’s technical provider, in a private panel on Cloudflare servers, where only the status of the request is noted. Visit statistics are run by TeoTech on Cloudflare servers in the European Union and by Google Ireland Limited with Google Analytics (see the Cookie Policy). These providers process the data on behalf of the Firm as data processors; transfers to the United States take place with the safeguards set out in Chapter V GDPR. With Google Signals and ad personalisation on, Google may also use Google Analytics data for its own services, as an independent controller.

6. Retention

Contact requests are kept as long as needed to handle them and, if an engagement follows, as required by professional obligations. TrackTeo statistics data are deleted after 13 months, Google Analytics data after at most 14 months.

7. Rights of the Data Subject

You have the right of access, rectification, erasure, restriction, data portability and objection to processing. To exercise these rights, please contact segreteria@alessandrielotorto.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).