PRIVACY POLICY

Information on the processing of personal data

Pursuant to Article 13 of Regulation (EU) 2016/679

WEBSITE: www.ataxandlegal.it

Data controller

Each professional processes the personal data of their clients as an Independent Data Controller. Requests sent to the info mailbox are sorted by a person authorised to process personal data.

Headquarters: Via Andrea Appiani n.12 – 20121 Milan. E-mail: info@ataxandlegal.it 

TYPE OF DATA PROCESSED
PURPOSE
LEGAL BASIS – G.D.P.R.
STORAGE

Browsing data

(This category of data includes IP addresses or domain names of computers and terminals used by users)

browsing on this website solely to obtain anonymous statistical information on the use of the website

Art. 6(f)

legitimate interest (to check its correct functioning, as well as to ascertain any liability in the event of computer crimes)

3–6 months is the interval normally considered proportionate for site security, technical diagnostics, and possible investigation of computer crimes

Data communicated by the user

contact or information request

Art. 6(b) GDPR (implementation of pre-contractual measures at the request of the data subject)

1 year or immediately after the request has been processed

Data relating to interaction with social networks (e.g. LinkedIn) via links or plugins

To allow the user to quickly connect to the Data Controller’s professional profile; promotion and communication of the Law Firm’s activities

Art. 6(f) (Legitimate Interest: the Firm promoting its professional activities).

For retention periods, please refer to the privacy policy of the social network in question (LinkedIn).

Method of processing and retention periods

Personal data is processed, in accordance with the principles set out in Art. 5 GDPR, using paper, computerised and telematic tools, with logic strictly related to the purposes indicated above and, in any case, in such a way as to guarantee the security and confidentiality of the data. The data is processed exclusively by personnel authorised by the Data Controller and, if appointed, by Data Processors pursuant to Art. 28 GDPR. The updated list of Data Processors can be requested from the Data Controller using the contact details provided above. Personal data is stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which it is processed and, in any case, in compliance with the terms indicated in this policy and legal obligations.

The rights of the data subject

The data subject may exercise, in relation to the processing of the data described herein, the rights provided for by the GDPR (Articles 15-21), including:

  • receiving confirmation of the existence of the data and accessing its content (rights of access);
  • to update, modify and/or correct the data (right of rectification);
  • request the erasure or restriction of the processing of Data processed in violation
    the law, including those that do not need to be retained for the purposes for which the Data was collected or otherwise processed (right to be forgotten and right to restriction);
  • object to the processing (right to object);
  • lodge a complaint with the Supervisory Authority (garanteprivacy.it) in the event of a breach of personal data protection regulations.

To exercise these rights, the Data Subject may send their request to info@ataxandlegal.it 

Changes and updates

The Data Controller reserves the right to modify, update, add or remove parts of this privacy policy at its discretion and at any time. In order to facilitate this verification, the policy will contain an indication of the date of update.

December 2025

With regard to the activation of cookies, please refer to the cookie banner on the home screen.