This Privacy Policy is issued pursuant to art. 13 Regulation EU 2016/679 (“GDPR”)
1. DATA CONTROLLER
Data collected through user’s interaction with the website https://www.studioimproda.com/ (“Website”), or by Studio Legale Improda – Avvocati Associati, headquartered in Rome Via Barberini n. 67, VAT number 08802841000, as Data Controller (“Data Controller”), are collected in accordance with GDPR principles.
Users can contact Data Controller at any time by:
– sending a registered mail with return receipt to Data Controller’s above mentioned headquarter;
– sending an e-mail to info@studioimproda.com
Data Controller is not liable for the compliance with legal regulation of other websites accessible through the Website’s interaction.
Services available on the Website are reserved for adults; Data Controller does not collect personal data of under 18s people.
2. TYPE OF DATA
Data collected through Website’s interaction and by filling online form are personal data such as name, surname, e-mail address and browsing data related to the user’s natural interaction with the Website (such as IP address, domain names, cookie).
Legal basis of the processing: user’s consent (art. 6.1, lett. a GDPR).
Purpose: reply to questions received from online form
Data retention: period of time necessary to process the request, anyway within 12 months, without prejudice to Data Controller’s legal obligations.
3. PROCESSING PURPOSES AND LEGAL BASIS
Users personal data are processed pursuant to art. 6 GDPR, according to the following legal basis:
– user’s consent (art. 6.1 lett. a GDPR);
– execution of a contract (art. 6.1 lett. b GDPR);
– legal obbligations (art. 6.1 lett. c GDPR);
– data controller legitimate interest (art. 6.1 lett. f GDPR).
Personal data collected by user’s interaction with the Website are processed for the following purposes:
a. to give assistance and legal advice;
b. to reply to any request received from online form;
c. to send educational materials
d. to invite users to Data Controller’s events.
Consent to purposes a and b above mentioned is optional but necessary to join Data Controller’s services, anyway the consent is always revocable.
There is no automated decision-making process and no profiling activity is carried out.
4. METHODS OF PROCESSING AND DATA RETENTION PERIODS
The Data Controller will process users’ personal data using manual and computerised tools designed to ensure the security, confidentiality and integrity of the data.
Personal data is processed and stored in the cloud and at the Data Controller’s offices (see the Contact section of the Website) located within the EU for a maximum period of 10 years for the purpose set out in point (a) of the preceding paragraph and for 5 years for other purposes. Once this period has elapsed, personal data will be deleted if the user does not renew their consent, unless it is necessary to retain the data for a longer period for contractual reasons and/or to comply with legal obligations.
5. COMMUNICATION AND DISSEMINATION
Personal data may be disclosed to employees and/or collaborators of the Data Controller, or to third parties (e.g. suppliers, external consultants, partners, sponsors), in their capacity as authorised persons and/or data processors. Please note that all of these individuals have been specifically trained and instructed by the Data Controller.
Users are entitled to obtain a list of the aforementioned parties at any time by making a request to the Data Controller.
Please note that, in addition to the aforementioned cases, no data will be disclosed or disseminated.
6. USERS’ RIGHTS
Users are entitled to exercise the rights referred to in Articles 15–22 of the GDPR. These rights can be exercised by contacting the Data Controller in the following ways:
Please refer to the instructions outlined below in order to proceed with this process:
– Firstly, please ensure that you send a registered letter with acknowledgement of receipt to the Data Controller’s registered office.
Should you require any information regarding the origin of the personal data, the purposes and methods of processing, the logic applied in the case of processing carried out with the aid of electronic tools, the identification details of the Data Controller and Data Processors, or the subjects or categories of subjects to whom the personal data may be disclosed or who may become aware of it in their capacity as Data Processors or persons in charge of processing, please direct your enquiry to info@studioimproda.com.Furthermore, users have the right to obtain:
a) access to, and the updating, rectification or, where they have an interest, the integration of the data;
b) the erasure, anonymisation or blocking of data processed in breach of the law, including data which need not be retained in relation to the purposes described above;
c) confirmation that the operations referred to in points a) and b) have been brought to the attention, including as regards their content, of those to whom the data have been disclosed or disseminated, except where this proves impossible or involves a manifestly disproportionate effort compared to the right being protected.
Furthermore, users have:
a) The right to withdraw consent at any time, in the event that processing is based on their consent.
b) (where applicable) the right to data portability (the right to receive all personal data concerning them in a structured, commonly used and machine-readable format), the right to restriction of processing of personal data and the right to erasure (‘right to be forgotten’).
c) The right to object.
i) To exercise their right to have their personal data processed, in full or in part, for legitimate purposes, even if this is not directly related to the initial purpose of collection.
ii) for the purposes of sending advertising or direct sales material, or for carrying out market research or commercial communication, to the processing of personal data concerning them, either in whole or in part.
iii) In the event of personal data being processed for direct marketing purposes, consent for this processing can be withdrawn at any time. This includes profiling in relation to such direct marketing.
d) You have the right to lodge a complaint with the Italian Data Protection Authority, with its registered office at Piazza Venezia, No. 11, 00186 – Rome (RM), at the following link: https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/4535524
The information was last updated in June 2026.