Privacy Policy

1. Data Controller

Under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, the controller of your personal data is:

2. Data We Collect

The personal data collected through this website includes:

• Contact data: first name, last name, email address, phone number (if provided)
• Browsing data: IP address, browser type, operating system, pages visited, date and time of access
• Profiling data: information collected via cookies and similar technologies for marketing and advertising purposes
• Lead-generation data: information voluntarily provided through the contact form or Facebook advertising campaigns

3. Purposes of Processing

Personal data is processed for the following purposes:

• Service delivery: responding to requests received through the contact form
• Direct marketing: sending commercial and promotional communications (with consent)
• Lead generation: managing and following up on leads acquired through Facebook advertising campaigns
• Targeted advertising: using data for personalised advertising campaigns on Facebook and other platforms
• Analytics and statistics: improving the website and the services offered
• Legal compliance: meeting obligations under applicable law

4. Legal Basis for Processing

Processing of personal data is based on:

• Consent of the data subject (Art. 6(1)(a) GDPR) for marketing and advertising purposes
• Performance of pre-contractual measures (Art. 6(1)(b) GDPR) to respond to contact requests
• Legitimate interest of the controller (Art. 6(1)(f) GDPR) for security and fraud-prevention purposes
• Compliance with legal obligations (Art. 6(1)(c) GDPR)

5. Transfer of Data to Third Parties

Personal data may be shared with:

• Facebook (Meta Platforms Ireland Limited): for managing advertising campaigns and conversion tracking. Data is transferred in accordance with the Standard Contractual Clauses approved by the European Commission
• IT service providers: companies providing hosting, maintenance and website management services
• Competent authorities: when required by law or by a judicial authority

Data is not sold to third parties for commercial purposes.

6. Retention Period

Personal data is retained for the time necessary to fulfil the purposes for which it was collected:

• Contact data: up to 24 months from the last contact or until consent is withdrawn
• Browsing data: up to 12 months
• Data for legal compliance: for the period required by applicable law

7. Rights of the Data Subject

Under Articles 15–22 GDPR, the data subject has the right to:

• Access: obtain confirmation of and access to their data
• Rectification: obtain the correction of inaccurate or incomplete data
• Erasure: obtain deletion of data when no longer necessary or when consent is withdrawn
• Restriction: obtain restriction of processing in certain circumstances
• Portability: receive their data in a structured format and transmit it to another controller
• Objection: object to processing on legitimate grounds
• Withdrawal of consent: withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal

To exercise these rights, the data subject may send a request to: clura@legalmail.it

8. Complaint to the Supervisory Authority

The data subject has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if they believe that the processing of their personal data infringes the GDPR.

9. Changes to this Privacy Policy

The controller reserves the right to amend this policy at any time. Changes will be published on this page with the date of the latest update.

10. Contact

For any questions or requests regarding the processing of personal data, you can contact the controller: