Privacy notice

1. Data controller

The controller is Angelo Galanti, Studio Legale Galanti, whose office is at III Traversa Privata di Via Rotabile San Francesco 93, 03012 Anagni (FR), Italy. The controller may be contacted at studio@avvocatogalanti.it.

2. Personal data processed

When the website is visited, technical browsing data may be processed, including the IP address, date and time of the request, the resource requested, and the type of browser and device used. These data are required for communications to be transmitted and for the security of the service.

The ‘Scrivi allo Studio’ contact form collects first and last name, email address, telephone number, enquiry area, a short description and, optionally, city or province. The appointment request form also collects the preferred meeting format, Friday and time; a short description is optional. If a user contacts the Firm by telephone or email, the Firm also processes the data included in that communication. The forms do not accept documents.

3. Purposes and lawful bases

• to provide, protect and maintain the website, on the basis of the controller’s legitimate interest in the security and proper operation of the service;
• to respond to enquiries and assess a potential professional engagement, in order to take pre-contractual steps at the data subject’s request;
• to comply with legal obligations and, where necessary, to establish, exercise or defend legal claims.

4. Provision of personal data

Using the form is optional. Fields marked as required are necessary to receive and assess the enquiry and respond. Acknowledging this privacy notice does not amount to consent to marketing communications.

5. Recipients and international transfers

Brevo is used as the transactional email provider to deliver enquiries submitted through the contact form to the Firm. Personal data may also be processed by providers of technical, hosting, e-mail and IT support services, appointed as processors where required, as well as by public authorities and other persons entitled to receive the data by law. Any transfer to a country outside the European Economic Area is carried out in accordance with the safeguards required by the GDPR.

6. Retention

Technical data are retained for the period required to operate and secure the website. Data supplied voluntarily are retained for the time needed to respond and, if a professional relationship is established, for the periods required by law and for the protection of the controller’s rights.

7. Data subject rights

Where the conditions set out in Articles 15–22 of the GDPR apply, the data subject may request access, rectification, erasure, restriction, data portability or object to processing by writing to the controller’s contact details. A complaint may also be lodged with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

8. Automated decisions and external websites

The website does not carry out automated decision-making or profiling. Links to third-party websites lead to independent services governed by their own privacy notices.