Privacy notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.
This notice explains how we process the personal data of users who visit www.aclawfirm.eu (the “Website”) or contact the firm through the form on the Website.
In brief
- The Website does not use cookies or any analytics, profiling or tracking tools.
- The Website is hosted on GitHub Pages: for technical and security reasons the provider logs visitors’ IP addresses.
- Data entered in the contact form is forwarded by e-mail to the firm through the Web3Forms service and is used only to reply to the enquiry.
- You may exercise your rights at any time by writing to info@aclawfirm.eu.
Full notice
1. Data controller
The data controller is Avv. Antonio Circosta, Traversa I Via Gramsci 2, 89042 Gioiosa Ionica (RC), Italy, VAT no. IT 02573920804. Contact: e-mail info@aclawfirm.eu, certified e-mail (PEC) avvcircosta@legpec.it, phone +39 0965 890508.
2. Data processed
2.1 Browsing data. In the course of their normal operation, the systems that deliver the Website collect certain data whose transmission is inherent in the use of Internet protocols: IP address, date and time of the request, page requested, server response code, browser type and operating system. This data is not collected to identify users and is processed by the hosting provider to ensure the operation and security of the service (for example, to prevent cyber attacks).
2.2 Data provided voluntarily through the contact form. By completing the form, users provide their full name and e-mail address and, optionally, their phone number and company, the practice area concerned and the text of their message. The language and the page from which the enquiry was sent are also recorded. This data is needed to reply; without it the enquiry cannot be handled.
2.3 Data provided by e-mail, PEC or phone. Sending messages to the contact details shown on the Website is optional and entails the collection of the sender’s address and of the other data contained in the communication, which is used to reply.
2.4 Special categories of data. Please do not include in the form any data concerning health, criminal convictions or offences, or other special categories of data (Articles 9 and 10 GDPR). Any information needed for legal advice will be collected later, with appropriate safeguards and within the professional relationship.
3. Cookies and similar technologies
The Website does not set any cookies, whether technical or profiling, and does not use analytics tools, tracking pixels or local browser storage. Fonts are hosted on the Website itself, so browsing does not involve requests to external services such as Google Fonts. For this reason there is no cookie banner.
The “Open in Maps” links lead to Google Maps: by opening them, users leave the Website and Google’s privacy policy applies.
4. Purposes and legal basis
- Operation and security of the Website (browsing data): the controller’s legitimate interest in providing a secure website (Art. 6(1)(f) GDPR).
- Replying to enquiries (form, e-mail, phone): steps taken at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR). The consent checkbox in the form confirms that the user has read this notice.
- Compliance with legal obligations and the establishment, exercise or defence of legal claims (Art. 6(1)(c) and 6(1)(f) GDPR).
Data is not used for marketing purposes or for automated decision-making or profiling (Art. 22 GDPR).
5. Recipients and processors
Data is processed by the controller and by authorised and instructed staff of the firm. The Website relies on the following providers, acting as processors or as independent controllers for their own processing:
- GitHub, Inc. – 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA – GitHub Pages hosting service (browsing data). Privacy policy: GitHub General Privacy Statement.
- Web3Forms – service forwarding the contact form by e-mail (data entered in the form). Privacy policy: web3forms.com/privacy.
- The provider of the firm’s e-mail account, where messages are received.
Data may also be disclosed to public authorities where required by law. It is not disseminated or shared with third parties for any other purpose.
6. Transfers outside the European Union
The providers listed in section 5 may process data on servers located outside the European Union, in particular in the United States. Such transfers rely on the European Commission’s adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework), for providers certified under it, or on the Standard Contractual Clauses approved by the Commission (Art. 46 GDPR).
7. Processing methods and retention
Data is processed with electronic and manual tools, with appropriate security measures (Art. 32 GDPR). It is kept only for as long as strictly necessary:
- browsing data: according to the hosting provider’s technical retention periods, as set out in its privacy policy;
- enquiries: for as long as needed to handle the enquiry and, if no engagement follows, for no longer than 12 months; if the firm is engaged, for the duration of the professional relationship and for the periods required by law.
8. Your rights
Under Articles 15–22 GDPR, you may at any time:
- access your data and obtain a copy;
- request its rectification or completion;
- request its erasure or the restriction of processing;
- object to processing based on legitimate interest;
- receive your data in a structured, machine-readable format (portability);
- withdraw any consent given, without affecting the lawfulness of prior processing.
Requests should be sent to info@aclawfirm.eu or by PEC to avvcircosta@legpec.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
9. Updates
This notice may be amended following changes to the Website or to the law. Last updated: October 2026.
This is a translation provided for convenience. In the event of any discrepancy, the Italian version shall prevail.