Privacy notice

1. Data controller

The controller is Angelo Galanti, Studio Legale Galanti, whose office is at III Traversa Privata di Via Rotabile San Francesco 93, 03012 Anagni (FR), Italy. The controller may be contacted at studio@avvocatogalanti.it or through the certified e-mail address galanti.angelo@pec.it.

2. Personal data processed

When the website is visited, technical browsing data may be processed, including the IP address, date and time of the request, the resource requested, and the type of browser and device used. These data are required for communications to be transmitted and for the security of the service.

If a user voluntarily contacts the Firm by telephone, e-mail or certified e-mail, the Firm will process the identifying and contact details, together with any other personal data included in the communication.

The review form collects the name, surname or initials chosen for publication, an e-mail address used solely for verification, a rating from one to five stars, the review text and the declaration of authenticity and consent. The e-mail address is not published.

3. Purposes and lawful bases

• to provide, protect and maintain the website, on the basis of the controller’s legitimate interest in the security and proper operation of the service;
• to respond to enquiries and assess a potential professional engagement, in order to take pre-contractual steps at the data subject’s request;
• to receive, verify and, with the reviewer’s consent, publish genuine reviews of experiences with the Firm; reviews remain hidden until approved by the controller;
• to comply with legal obligations and, where necessary, to establish, exercise or defend legal claims.

4. Provision of personal data

Providing personal data in communications sent to the Firm is voluntary. Failure to provide information that is necessary to deal with the enquiry may, however, make it impossible for the Firm to respond. Use of the review form is voluntary; mandatory fields are required to verify and, where approved, publish the review.

5. Recipients and international transfers

Personal data may be processed by providers of technical, hosting, e-mail and IT support services, appointed as processors where required, as well as by public authorities and other persons entitled to receive the data by law. Any transfer to a country outside the European Economic Area is carried out in accordance with the safeguards required by the GDPR.

6. Retention

Technical data are retained for the period required to operate and secure the website. Data supplied voluntarily are retained for the time needed to respond and, if a professional relationship is established, for the periods required by law and for the protection of the controller’s rights. Reviews that are not published are erased within twelve months of submission. Approved reviews, together with the information required to verify authenticity, remain published until consent is withdrawn, erasure is requested or the purpose no longer applies.

7. Data subject rights

Where the conditions set out in Articles 15–22 of the GDPR apply, the data subject may request access, rectification, erasure, restriction, data portability or object to processing by writing to the controller’s contact details. A complaint may also be lodged with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

8. Automated decisions and external websites

The website does not carry out automated decision-making or profiling. Links to third-party websites lead to independent services governed by their own privacy notices.