1. Data controller
The data controller is SP Law, with its main office at Via dell'Acqua Traversa, 195 – 00135 Rome (RM), Italy.
Contact details: email info@sp-law.org; phone +39 06 83978521. To exercise your GDPR rights, please write to info@sp-law.org.
2. Personal data we process
We process the following categories of personal data:
- Browsing data: IP address, browser type and version, operating system, pages visited, visit times and traffic data, collected automatically by the IT systems and the cookies necessary for the site to function.
- Voluntarily provided data: first name, surname, email address, phone number, subject and content of the message, as well as any attachments, submitted via the contact form or by email.
- Data collected through cookies and similar technologies: please see the Cookie Policy for details.
3. Purposes and legal basis of processing
Personal data are processed for the following purposes:
- Replying to information, quotation or appointment requests: performance of pre-contractual measures or a contract (Art. 6(1)(b) GDPR).
- Ensuring the technical operation of the site, its security and preventing abuse: legitimate interest of the controller (Art. 6(1)(f) GDPR).
- Complying with legal, tax, accounting or professional obligations: compliance with a legal obligation (Art. 6(1)(c) GDPR).
- We do not carry out profiling activities or send promotional communications without your explicit consent.
4. Provision of data
Providing contact details is necessary to receive a response to your requests. Failure to provide them may make it impossible to process the request or provide the service requested.
5. Recipients of data and transfers
Personal data are not sold to third parties. They may be disclosed to parties acting on behalf of the controller, such as hosting providers, IT consultants and email providers, strictly to the extent necessary for the tasks assigned.
Data are generally stored within the European Economic Area. Any transfers outside the EEA will only take place if necessary and with appropriate safeguards under Articles 44-49 GDPR.
6. Retention period
Browsing data are kept for the time necessary for the operation of the site and security management, generally up to 12 months, unless required for the protection of rights in legal proceedings.
Data provided through the contact form are kept for the time necessary to handle the request and, afterwards, for up to 24 months, unless longer legal or professional obligations apply. After that period, data are deleted or anonymised.
7. Data subject rights
Data subjects may exercise their rights of access, rectification, erasure (right to be forgotten), restriction of processing, objection, data portability and withdrawal of consent at any time by writing to info@sp-law.org.
Requests will be answered as soon as possible and, in any case, within one month of receipt. The period may be extended due to complexity, and you will be informed accordingly.
8. Complaint to the supervisory authority
Anyone who believes that the processing of their personal data violates the GDPR has the right to lodge a complaint with the supervisory authority (in Italy: www.garanteprivacy.it).
9. Minors and links to third parties
This site is not intended to process personal data of minors under 16. Links to social networks (Facebook, Instagram, WhatsApp) and Google Maps lead to external platforms with their own privacy and cookie policies; please read them before interacting with those services.
