Notice given under articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and of Italian Legislative Decree no. 196/2003 as amended by Legislative Decree no. 101/2018.
Last updated: 4 September 2026
Data controller
The data controller is Alessandro Monteleone, avvocato, whose office is at Largo di Torre Argentina 11 – Palazzo Besso, 00186 Rome, Italy – Italian VAT number 10012551007.
E-mail: info@alessandromonteleone.it – Certified e-mail (PEC): alessandromonteleone@pec.it – Telephone: +39 06 56559917.
The controller has not appointed a Data Protection Officer, the conditions in article 37 GDPR not being met.
Data processed and purposes
Through this website the controller processes the following categories of data:
- Browsing data. The computer systems and software procedures that operate this website acquire, in the ordinary course of their working, certain data whose transmission is implicit in the use of internet communication protocols (IP addresses, browser type, device parameters, time of the request, pages visited). This data is used solely to allow the website to be delivered correctly and to keep it secure.
- Data provided voluntarily through the contact form. Name and surname, e-mail address, telephone number if given, subject matter of the enquiry and the content of the message. This data is processed solely in order to answer the enquiry and to consider arranging a first meeting.
- Statistical browsing data, subject to consent. If you give your consent through the banner, the website collects aggregated data about visits through Google Analytics 4: pages viewed, time spent, source of the traffic, type of device and approximate geographical area. This data does not allow you to be identified by name and is processed for the sole purpose of measuring how the website performs. Without consent no such collection takes place.
- Data provided by e-mail, certified e-mail or telephone. Sending a message to the addresses given, which is optional, involves the acquisition of the sender’s contact details and of the data contained in the message, processed in order to answer the enquiry.
Please do not enter in the contact form any special category data within the meaning of article 9 GDPR (data concerning health, criminal convictions, sex life, religious or political beliefs) or any confidential document. Such information may be collected, where necessary, at the first meeting and in the course of the professional relationship, under a separate notice.
Legal basis
- For browsing data and technical cookies: the legitimate interest of the controller in the correct working and the security of the website (article 6(1)(f) GDPR).
- For data from the contact form and from messages: steps taken at the request of the data subject prior to entering into a contract (article 6(1)(b) GDPR) and the consent of the data subject to being answered (article 6(1)(a) GDPR).
- For statutory obligations connected with any instructions subsequently given: legal obligation (article 6(1)(c) GDPR).
Whether provision of data is required
Provision of the data marked as required in the form is necessary in order for your enquiry to be answered; without it no answer is possible. Provision of the remaining data is optional.
Manner of processing and security
Processing is carried out by electronic means, following logic strictly related to the purposes stated and with technical and organisational measures appropriate to ensure the security of the data, under article 32 GDPR. The website uses HTTPS encryption.
Recipients and disclosure of data
The data may be processed by those who supply the controller with technical and IT services, appointed as processors under article 28 GDPR: in particular the hosting and e-mail provider and, as regards statistical data only and subject to your consent, Google Ireland Limited as the provider of Google Analytics 4. The data is not disseminated and is not transferred to third parties for marketing purposes.
Transfers outside the European Union
The data is processed on servers located within the European Union. Where particular services involve a transfer to a third country, that transfer is made in accordance with articles 44 et seq. GDPR, on the basis of an adequacy decision or of standard contractual clauses. In particular, Google Analytics 4 may involve a transfer of data to the United States, based on the European Commission’s adequacy decision of 10 July 2023 concerning the EU-U.S. Data Privacy Framework.
Retention period
- Data from the contact form and from messages not followed by instructions: kept for as long as is necessary to reply and in any event for no more than 24 months from the last contact.
- Data relating to professional relationships entered into: kept for the duration of the retainer and thereafter for the periods laid down by law and by the rules of professional conduct, including for the purposes of defending legal claims.
- Browsing data: kept for no longer than is strictly necessary and in any event within the periods laid down for security logs.
Rights of the data subject
You may exercise at any time the rights conferred by articles 15 to 22 GDPR: access to your data, rectification, erasure, restriction of processing, portability, objection to processing and withdrawal of any consent given, without affecting the lawfulness of processing carried out before withdrawal.
Requests should be addressed to the controller at the contact details given above. The controller replies without undue delay and in any event within one month of receiving the request.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome – garanteprivacy.it), under article 77 GDPR.
Cookies
For information about the cookies and tracking tools used by this website, please see the Cookie Policy.
Changes
The controller may amend this notice. Any amendment is published on this page together with the date of the last update.
Language of this page
This page is an English translation provided for the convenience of readers who do not read Italian. The Italian text, published at alessandromonteleone.it/privacy-policy/, is the authoritative version: in the event of any discrepancy between the two, the Italian version prevails.