Privacy Policy

Data controller

Studio Legale Associato Ferrara, Zappoli & Partners, Piazza Alessandro Volta 33, 22100 Como (CO), Italia, Italian tax code and VAT number 03491670133.

To exercise your rights or for any question about the processing of your data, write to privacy@fzlex.it or call +39 031 268 400.

No Data Protection Officer has been appointed, as it is not required in this case.

Data processed and purposes

• Contact form: name, email address, telephone number (optional), subject and message, processed to answer the enquiry and, where relevant, to assess a possible professional engagement.
• Newsletter: email address and preferred language, processed to send the firm's legal insights.
• Browsing and security data: IP address, browser type and technical data collected by the anti-spam system and by the hosting provider, processed to keep the website working and secure.

Legal basis

• Answering enquiries: pre-contractual measures and legitimate interest (Art. 6.1 b and f GDPR).
• Newsletter: freely given consent, which may be withdrawn at any time (Art. 6.1 a GDPR).
• Website security and abuse prevention: the controller's legitimate interest (Art. 6.1 f GDPR).
• Legal obligations, including tax and anti-money-laundering duties, where an engagement follows (Art. 6.1 c GDPR).

Retention

• Contact form enquiries: 12 months from the last contact, unless the enquiry leads to a professional engagement, in which case the retention periods applicable to case files apply.
• Newsletter subscriptions: until consent is withdrawn or the subscriber unsubscribes.
• Technical logs and anti-spam data: only for as long as necessary, according to the retention periods of the providers listed below.

Recipients and processors

Data is never disclosed publicly. It may be processed by authorised members of the firm and by the providers running the website infrastructure, appointed as data processors:

• the hosting and database provider that stores enquiries;
• Resend, for automated confirmation emails;
• Google Ireland Ltd., for the reCAPTCHA anti-spam service and the map embedded on the contact page;
• Sanity, for the editorial content of the Insights section.

Transfers outside the EU

Some providers may process data outside the European Economic Area. Such transfers rely on the Standard Contractual Clauses approved by the European Commission or on an adequacy decision, with appropriate safeguards under Articles 44 et seq. GDPR.

Your rights

You may at any time request access to your data, rectification, erasure, restriction of or objection to processing, and data portability, by writing to privacy@fzlex.it. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Nature of the provision of data

Providing the data marked as mandatory in the contact form is necessary to answer the enquiry; without it we cannot reply. Providing an email address for the newsletter is optional.

Professional secrecy

Information shared with the firm within a professional relationship is covered by legal professional privilege and handled in accordance with the Italian code of conduct for lawyers.