Privacy Policy

Introduction

Privacy Policy

Last Updated: March 2025

This Privacy Policy is provided pursuant to Article 13 of European Regulation No. 679/2016 and applies exclusively to all data collected through the website www.legallyitaly.com (“Website”). This Privacy Policy is subject to updates, which will be promptly published on the Website. This Privacy Policy, together with any other documents referred to herein and the Cookie Policy, establishes the basis on which the personal data of the Data Subject will be processed.

1. Data Controller

The Data Controller of the data collected from this Website is Selvaggia Amore, residing in Rome, Via Panama 86, VAT number 11353281006, email: avv.amore@gmail.com.

2. Collected Personal Data

Personal Data refers to any information relating to an identified or identifiable natural person (Data Subject). A natural person is considered identifiable when they can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to their physical identity.

3. Categories of Processed Personal Data

Among the Personal Data processed by this Website, either independently or through third parties, are common data such as Cookies and usage data.

Personal Data processed by this Website for the pursuit of pre-contractual and contractual purposes includes: name, surname, email, and phone number (if provided).

The voluntary, explicit, and optional sending of emails via the designated forms on this Website or using the addresses indicated on the Website results in the acquisition of the sender’s address, necessary to respond to requests, as well as any other Personal Data included in the email.

User consent for providing data is necessary to be included in the Controller’s databases and to ensure the proper execution of the services offered by the Controller, as well as third parties, for the fulfillment of specific requested activities. Failure to provide data prevents registration in the Controller’s databases, contract completion, and execution of requested services.

4. Purpose of Processing and Legal Basis

Processing Purposes and Legal Basis

Personal Data may be collected independently by the Controller or through third parties. In this case, the IT systems and software procedures used for the functioning of this Website acquire certain technical-informatic Personal Data (e.g., IP address, type of browser used, operating system, domain name, and addresses of websites from which access or exit was made, etc.), the transmission of which is inherent to the normal operation of the internet. These Data may be processed solely for obtaining anonymous statistical information on the use of the site and/or verifying its correct functioning and will be deleted immediately after processing.

Personal Data voluntarily provided by the Data Subject will be processed in compliance with the lawfulness conditions set out in Article 6 GDPR and will be processed to allow the Website to provide its services, as well as for the following purposes, and will be stored for the necessary period to fulfill said purposes.

5. The Purposes of Processing Are:
6. a) Information and Pre-Contractual ObligationsPersonal Data will be processed to respond to inquiries from the Data Subject regarding information, interest in purchasing services offered by the Controller, appointment scheduling, via email or contact forms, and other communication tools such as phone calls.

Legal Basis: This processing is optional and based on the Data Subject’s consent; however, providing data is necessary to pursue the indicated purpose.

Data Retention Period: Until consent is withdrawn by the Data Subject.

1. b) Processing Necessary in the Context of a ContractPersonal Data will be processed to fulfill obligations arising from the contract between the Data Subject and the Controller for the sale of services offered on the Website, to contact the Data Subject regarding the contract, and for contract management and resolution.

Legal Basis: This processing is necessary for the execution of the contract of which the Data Subject is a party, for pre-contractual measures, or to comply with a legal obligation to which the Controller is subject.

Data Retention Period: 10 years or as required by law.

1. c) Compliance with Legal ObligationsPersonal Data will be processed to comply with any obligations provided by applicable laws, regulations, and commercial and tax regulations, including those required by anti-money laundering laws (Legislative Decree 231/2007 and subsequent amendments).

Legal Basis: This processing is necessary to comply with a legal obligation to which the Controller is subject.

Data Retention Period: 10 years or as required by law.

6. Data Communication

In addition to the Controller, in some cases, data may be accessed by:

1. a) Categories of trained personnel involved in website management (administrative, commercial, marketing, legal, and system administrators);
2. b) External parties (such as third-party service providers, hosting providers, IT companies, communication agencies) appointed as Data Processors under Article 28 GDPR. The updated list of Processors, if appointed, can always be requested from the Controller;
3. c) Public or private entities with access rights under legal obligations;
4. d) Entities performing auxiliary and instrumental tasks related to the Controller’s activities.
5. Data Processing Duration

As expressly provided by Article 5(1)(e) GDPR, data are retained for the necessary time for processing concerning the requested service or the purposes outlined in this document.

At the end of the retention period, Personal Data will be deleted, making it impossible to exercise rights such as access, deletion, rectification, and portability.

8. Cookies

This Website uses cookies, which are small text files used to enhance the User’s experience, personalize content and ads, provide social media features, and analyze traffic. [Cookies Policy]

9. Data Processing Location and International Transfers

Personal Data is processed at the Controller’s operational headquarters. For more information, the Controller can be contacted. Data may be processed by individuals and/or legal entities acting on behalf of the Controller under specific contractual obligations and located in EU or non-EU countries. If data is transferred outside the EEA, the Controller will take appropriate contractual measures to ensure adequate data protection.

10. Data Subject Rights

The Data Subject has the right to exercise the faculties provided by Articles 7, 15-22 of European Regulation 679/2016, including withdrawing consent at any time, requesting access to their data, obtaining updates, restricting processing, requesting data rectification or deletion if processed unlawfully, and objecting to processing for legitimate reasons.

The Data Subject also has the right to file a complaint with the Data Protection Authority or take legal action. To exercise rights, the Data Subject can contact the Controller via email at: avv.amore@gmail.com.

Privacy Policy Updated in March 2025