Privacy policy

The data controller is Annalisa Nocera, Avvocato, with professional domicile at Piazza della Repubblica 12, Milano (MI), Italy.

For any request concerning the processing of personal data you can contact the controller at the email address nocera-a@libero.it or by telephone at +39 388 170 3252.

The website is static and does not require the creation of an account. The personal data processed is exclusively that which the user voluntarily provides by completing the contact form:

• first and last name;
• email address;
• telephone number (optional);
• the content of the message, with a brief description of the matter.

No data belonging to special categories is collected (for example data concerning health, personal beliefs or sexual orientation): please do not include such data in the message. The website does not use profiling cookies or other tracking tools.

The data is processed solely in order to:

• respond to the request sent through the contact form and provide the information requested;
• handle subsequent communications relating to the request;
• comply with any legal obligations to which the controller is subject.

The data is not used to send commercial communications, newsletters or promotional material.

The processing is based on:

• the consent of the data subject (Art. 6(1)(a) GDPR), given by ticking the relevant box before submitting the form;
• the performance of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR), where the request is aimed at a possible professional engagement;
• compliance with legal obligations (Art. 6(1)(c) GDPR), where applicable.

Consent may be withdrawn at any time, without affecting the lawfulness of processing based on consent given before withdrawal.

The data may be communicated to:

• the provider of the contact-form forwarding service (for example Formspree or Web3Forms), where that service is activated by the controller: the provider processes the data as a processor, in accordance with the controller's instructions;
• the provider of the website's hosting services, for the sole technical purposes of operation and security;
• the controller's advisers and collaborators, to the extent necessary for carrying out the engagement.

If the form is not connected to an external service, submitting it opens the user's email client and the data is transmitted directly to the controller through the relevant email provider. The data is neither disseminated nor transferred to third parties for marketing purposes.

The data sent through the form is retained for the time necessary to respond to the request and in any case for no longer than 24 months from receipt, unless the request develops into a professional engagement: in that case the data is retained for the period required by the applicable professional, tax and legal obligations.

At the end of the retention period the data is deleted or irreversibly anonymised.

The data subject has the right to:

• obtain confirmation as to whether their personal data exists and to access it (Art. 15);
• request the rectification of inaccurate data or the completion of incomplete data (Art. 16);
• request the erasure of the data (the "right to be forgotten"), in the cases provided for (Art. 17);
• request the restriction of processing (Art. 18);
• receive the data provided in a structured, commonly used and readable format and transmit it to another controller (portability, Art. 20);
• object to the processing (Art. 21);
• withdraw consent at any time (Art. 7(3)).

The controller does not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

To exercise their rights the data subject may write to the email address nocera-a@libero.it or contact the controller at the details given in the "Data controller" section.

The controller replies within one month of the request; the deadline may be extended by two months for particularly complex requests, with notice to the data subject.

If the data subject considers that the processing of their personal data infringes the GDPR, they may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or bring proceedings before the competent court.

This website does not use profiling cookies or other tracking tools (analytics, advertising pixels, social plugins). For this reason there is no cookie-consent banner.

The website does not profile users and does not transfer personal data for marketing purposes.

This notice may be updated over time, for example following changes in the law or the activation of new services. The version in force is the one published on this page.

Last updated: publication date.