Privacy Policy
Last updated: 10 November 2026
Data controller
The data controller is Raffaele Santoro, VAT 02328310780, tax code SNT RFL 65D08 B774E, with offices at Via Francesco Carlini, 5, 20146 Milan (MI), and at Piazza F. e L. Gullo n. 88, 87100 Cosenza (CS). For any matter concerning the processing of personal data you may write to r.santoro@sralex.it, or to the certified email address avvsantororaffaele@pec.giuffre.it.
Scope of this policy
This policy describes how personal data are processed in connection with the use of this website and of the professional services offered by the firm. It is drafted pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Categories of data and legal bases
| Processing | Categories | Legal basis |
|---|---|---|
| Navigation and technical logs | IP address, browser data, navigation data | Art. 6(1)(f) GDPR — legitimate interest in ensuring the security and operation of the site |
| Contact requests | Name, contact details, information provided | Art. 6(1)(b) GDPR — pre-contractual measures at the data subject's request |
| Professional engagement | Identity, fiscal data, case information, correspondence | Art. 6(1)(b) and (c) GDPR — performance of the professional mandate and compliance with legal obligations |
| Client newsletter | Email address | Art. 6(1)(a) GDPR — consent, withdrawable at any time |
| Retention and defence of claims | Professional and fiscal documentation | Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR |
Cookies
This site uses only technical cookies, needed for the site to function and for the preference stored locally on your device. No profiling or advertising cookies are used. The cookie banner allows you to review and change your choice at any time; declining technical cookies does not prevent browsing the site.
Recipients of the data
Personal data may be disclosed to the parties strictly necessary for the performance of the professional mandate, such as counterparties, courts and public authorities, professionals and consultants appointed by the client, and the firm's external accountants and IT providers, who act as separate controllers or processors under a written agreement. The data are not disclosed for marketing purposes to third parties.
International transfers
Where personal data are transferred outside the European Economic Area, the transfer is based on an adequacy decision of the European Commission or on appropriate safeguards pursuant to Article 46 GDPR, such as standard contractual clauses.
Data retention
Data relating to professional engagements are retained for the periods required by the applicable professional, fiscal and civil rules. Data collected for contact requests are retained for the time necessary to deal with the request and any subsequent professional relationship. Newsletter subscriptions are retained until the consent is withdrawn.
Your rights
You may at any time request access to your personal data, their rectification or erasure, the restriction or objection to processing, and the portability of data provided in a structured format, as well as the withdrawal of consent where processing relies on it. These rights may be exercised by writing to the contact details above. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Security
Appropriate technical and organisational measures are adopted to protect personal data against unauthorised access, loss, alteration or disclosure, consistent with the nature of the processing and the state of the art.
Changes to this policy
This policy may be updated to reflect legislative or case-law changes. The date of the last update is shown at the top of this page.