Privacy Policy

Data controller

Studio Legale Associato Ferrara, Zappoli & Partners, Piazza Alessandro Volta 33, 22100 Como (CO), Italia, Italian tax code and VAT number 03491670133.

To exercise your rights or ask any questions about the processing of your personal data, email privacy@fzlex.it or call +39 031 268 400.

The firm has not appointed a Data Protection Officer (DPO), as the applicable legal requirements do not make this necessary.

Data processed and purposes

• Contact form: full name, email address, telephone number (optional), subject and message. These data are processed to respond to the enquiry and, where appropriate, assess a potential professional engagement.
• Newsletter: email address and preferred language, processed to send the firm's legal updates and insights.
• Browsing and security data: IP address, browser type and technical data collected by the anti-spam system and hosting provider, processed to ensure the website operates securely.

Legal bases for processing

• Responding to enquiries: steps taken prior to entering into a contract and the controller's legitimate interest in responding (Article 6(1)(b) and (f) GDPR).
• Newsletter: freely given consent, which may be withdrawn at any time (Article 6(1)(a) GDPR).
• Website security and prevention of abuse: the controller's legitimate interest (Article 6(1)(f) GDPR).
• Legal obligations, including tax and anti-money laundering requirements, where a professional engagement is accepted (Article 6(1)(c) GDPR).

Data retention

• Contact form enquiries: 12 months from the last contact, unless the enquiry results in a professional engagement, in which case the retention periods applicable to the engagement records apply.
• Newsletter subscriptions: until consent is withdrawn or the subscriber unsubscribes.
• Technical logs and anti-spam data: for no longer than necessary, in accordance with the retention periods applied by the providers listed below.

Recipients and data processors

Personal data is not disseminated. It may be processed by authorised members of the firm and by providers that operate the website infrastructure and have been appointed as data processors:

• the hosting and database provider used to store enquiries;
• Resend, used to send automated confirmation emails;
• Google Ireland Ltd., which provides the reCAPTCHA anti-spam service and the map embedded on the Contact page;
• Sanity, used to manage editorial content in the Insights section.

Transfers outside the European Economic Area

Some providers may process personal data outside the European Economic Area. Any such transfer is based on Standard Contractual Clauses approved by the European Commission or on an adequacy decision, with appropriate safeguards under Articles 44 et seq. GDPR.

Data subject rights

You may request access to your personal data, rectification, erasure, restriction of processing, object to processing or request data portability at any time by emailing privacy@fzlex.it. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.

Whether providing data is mandatory

The data marked as mandatory in the contact form is required for the firm to respond to your enquiry. Without it, the firm cannot provide a response. Providing an email address for the newsletter is optional.

Professional secrecy

Information shared with the firm in the context of a professional relationship is protected by legal professional privilege and handled in accordance with the Italian Code of Conduct for Lawyers.