{"id":4261,"date":"2023-06-14T02:49:53","date_gmt":"2023-06-14T02:49:53","guid":{"rendered":"https:\/\/app-avvocati.it\/?page_id=4261"},"modified":"2026-04-22T15:05:16","modified_gmt":"2026-04-22T15:05:16","slug":"privacy-policy-en","status":"publish","type":"page","link":"https:\/\/app-avvocati.it\/en\/privacy-policy-en\/","title":{"rendered":"Privacy Policy EN"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy Policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The Law Firm Ascone Poltronieri Mulato & Partners is committed to protecting the Privacy and Personal Data of users browsing the website www.app-avvocati.it<\/a> in compliance with Regulation (EU) 2016\/679 (\u201cGDPR\u201d) and applicable national legislation.<\/p>\n

I. The Data Controller provides the website user with the following information:<\/p>\n

 a) INFORMATION ABOUT THE DATA CONTROLLER<\/strong><\/p>\n

The Data Controller pursuant to Art. 24 of the GDPR is the Law Firm Ascone Poltronieri Mulato & Partners (VAT No. 12712728150967), with registered office in Milan, Via Vitruvio 5. The user\/visitor of the website may exercise their rights pursuant to Articles 15 to 22 of the EU Regulation by writing to the following email address: studio@app-avvocati.it<\/a>. <\/p>\n

 b) INFORMATION ABOUT THE DATA PROTECTION OFFICER
<\/strong><\/p>\n

The Data Controller does not fall within the cases requiring the mandatory appointment of a Data Protection Officer under Art. 37 GDPR (DPO).<\/p>\n

 c) and d) PURPOSES OF PROCESSING, LEGAL BASIS AND LEGITIMATE INTEREST<\/strong><\/p>\n

Personal data are processed for the following purposes and legal bases: <\/p>\n

    \n
  1. To respond to requests for information on the services offered by the Firm (submitted by filling in a specific Form in which the necessary data are voluntarily entered), to be contacted again or to receive an initial free consultation \u2013 the legal basis for processing is the
    performance of pre-contractual measures at the request of the data subject pursuant to Art. 6(1)(b).<\/li>\n
  2. Possible storage of data for organizational and documentation purposes \u2013 the legal basis for processing is the legitimate interest of the Data Controller pursuant to Art. 6(1)(f).<\/li>\n
  3. To safeguard the proper functioning and security of the website in the interest of the Firm and users\/browsers \u2013 the legal basis for processing is the legitimate interest of the Data Controller pursuant to Art. 6(1)(f).<\/li>\n<\/ol>\n
     <\/div>\n
     e) RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
    <\/strong>
    <\/strong><\/div>\n
    Users\u2019\/visitors\u2019 personal data may be disclosed to the following categories of recipients: <\/div>\n
      \n
    1. Persons who process data under the authority of the Data Controller and who have legitimate access to personal data as a result of a written assignment for data processing (pursuant to Arts. 29 GDPR and 2-quaterdecies of the Privacy Code);<\/li>\n
    2. Companies, consultants or professionals possibly appointed for the installation, maintenance, updating and, in general, management of the hardware and software used by the Data Controller to provide its services (such as, for example, web hosting companies and IT support
      providers with whom the Data Controller has entered into a Data Processing Agreement pursuant to Art. 28 GDPR);<\/li>\n
    3. Competent authorities in the event of the verification of criminal offences through the website.<\/li>\n<\/ol>\n
       <\/div>\n
       f) TRANSFER OF DATA<\/strong><\/div>\n
      \n

      Data may be processed or stored on platforms also located in non-EU countries (e.g., social media, YouTube, cloud services), in compliance with the safeguards provided by the GDPR (e.g., Standard Contractual Clauses, adequacy decisions, etc.).<\/p>\n

      II. In addition to the information referred to in Section I, the Data Controller provides the user\/browser with the following additional information necessary to ensure fair and transparent processing:<\/strong><\/p>\n<\/div>\n

       a) DATA RETENTION<\/strong><\/p>\n

      Data are retained for no longer than necessary for the purposes for which they were collected and processed and\/or to establish or defend legal claims before judicial authorities.<\/p>\n

      In particular, data are retained for the time strictly necessary to respond to the user\u2019s request for information sent to the Firm by completing and submitting the relevant Form for one or more consultancy and assistance services offered by the Lawyers and, where applicable, to comply with
      legal or tax obligations if a professional relationship arises. In the absence of a professional engagement, data will be deleted within 12 months from the last contact.<\/p>\n

       b) RIGHT OF ACCESS TO PERSONAL DATA, RECTIFICATION, ERASURE, DATA PORTABILITY, RESTRICTION OR OBJECTION TO PROCESSING BY THE DATA SUBJECT<\/strong><\/p>\n

      The Data Subject may exercise the rights referred to in Articles 15 to 22 of the GDPR, where applicable; in particular, the right of access (Art. 15) allows the Data Subject to obtain confirmation as to whether or not personal data concerning them are being processed and, if so, access to such data; the right to rectification and completion (Art. 16) allows the Data Subject to request correction of data concerning them; the right to erasure\/right to be forgotten (Art. 17) provides the Data Subject with the right to request and obtain the deletion of personal data concerning them when at least one of the following applies: 1) the data are no longer necessary for the purposes for which they were collected; 2) withdrawal of consent where required; 3) objection to processing; 4) unlawful processing; the right to restriction (Art. 18) applies where the accuracy of the data is contested for the period necessary to verify their accuracy, or where the processing is unlawful and the Data Subject opposes erasure and requests restriction instead; the right to data portability (Art. 20) allows the Data Subject to receive their personal data in a structured, commonly used and machine-readable format and to have those data transmitted to another Data Controller indicated by them; the right to object (Art. 21) allows the Data Subject to object at any time to the processing of their data where the legal basis no longer applies; the right not to be subject to automated decision-making (including profiling) (Art. 22) that produces legal effects concerning them or similarly significantly affects them, except where such decision is necessary for entering into or performing a contract, is authorized by EU law, or is based on the Data Subject\u2019s explicit consent.<\/p>\n

       c) RIGHT TO REVOKE EVENTUAL CONSENT
      <\/strong><\/p>\n

      The processing of the Data Subject\u2019s data is based on the following legal grounds: performance of pre-contractual measures at the request of the Data Subject pursuant to Art. 6(1)(b), and the legitimate interest of the Data Controller pursuant to Art. 6(1)(f). The processing of data is not based on the Data Subject\u2019s consent.<\/p>\n

       d) RIGHT TO LODGE A COMPLAINT<\/strong><\/p>\n

      The Data Subject has the right to lodge a complaint with the Supervisory Authority regarding the processing of their personal data if such processing does not comply with the EU Regulation, using the following link: www.garanteprivacy.it<\/a>.<\/p>\n

       e) DATA PROVISION AND CONSEQUENCES OF REFUSAL<\/strong><\/p>\n

      The provision of data by the user\/browser is optional but necessary to interact with the Firm through the relevant Form and, where applicable, to use the services offered. Failure to provide the minimum required information (name, email) will make it impossible to receive a response or assistance.<\/p>\n

       f) SPECIFIC PROCESSING ACTIVITIES<\/strong><\/p>\n

      In carrying out the processing purposes described herein, the Data Controller does not perform automated decision-making processes pursuant to Art. 22(1) and (4).<\/p>\n

      Additional information for the user\/visitor<\/span><\/p>\n