The firm and this website
Privacy and cookies
Notice on personal data processed when browsing this website and making initial contact with the firm, under Article 13 of Regulation (EU) 2016/679 (GDPR).
Controller and contact details
The data controller is Studio Legale Tuzza – Professional Association of Lawyers, Viale Città d’Europa 10, 00144 Rome. For personal data enquiries and to exercise your rights, please use the contact details below.
Office: segreteria@studiotuzza.it.
Telephone: +39 06 5922543.
Data provided when making initial contact
When you contact the firm by email or telephone, we process the identity and contact details you provide and the information in your enquiry. Providing data is voluntary; without the essential contact details and information, the firm may be unable to reply or arrange a meeting.
Any subsequent professional engagement is covered by a separate privacy notice, including any special-category data or criminal-offence data needed to handle it.
Purposes and lawful bases
We use the data to respond to enquiries, make an initial assessment, check whether an engagement can be accepted and arrange appointments. Where contact is made to request legal assistance, the lawful basis is taking steps at the individual’s request before entering into a contract (Article 6(1)(b) GDPR).
Informational correspondence and contact with representatives of organisations or businesses are based on the firm’s legitimate interest in managing professional communications (Article 6(1)(f)). Statutory duties are based on Article 6(1)(c); any retention necessary to protect the firm’s rights is based on its legitimate interest in that protection.
Contact details received through these enquiries are not used for promotional campaigns. Handling enquiries does not involve profiling or solely automated decisions.
Processing and recipients
Data is processed electronically and, where necessary, on paper by authorised people within the firm who are bound by confidentiality. Email and IT support providers may process it in the roles required by data protection law, and it may be disclosed to authorities when required by law. Enquiry data is not published on the website.
Retention criteria
Enquiries that do not result in an engagement are kept for the time needed to reply and conclude the correspondence. Any further retention is limited to data needed for statutory duties or the protection of rights, for the duration of the duty or the applicable limitation period. Where an engagement follows, retention criteria are set out in the notice for the professional relationship.
Browsing, cookies and the platform
The website can be viewed without signing in. The pages built by the firm do not include data-collection forms, traffic analytics, advertising pixels or profiling cookies. Search, filters and menus work in the browser without sending search queries to the firm. Email links open the visitor’s email application: the website does not receive or store messages or attachments.
Hosting is provided by ChatGPT Sites. The platform infrastructure may process technical connection data, such as IP addresses and browser information, to deliver and secure the service, and use technical tools for those purposes. Processing on the firm’s behalf is governed by the data processing agreement applicable to the service used; the platform’s own processing is described in OpenAI’s privacy notice.
The Cloudflare infrastructure uses the technical cookie __cf_bm to protect against automated requests and malicious traffic. According to the provider’s documentation, it expires after 30 minutes of inactivity.
ChatGPT Sites data processing agreement
International processing and transfers
The hosting service may involve processing outside the European Economic Area, including in the United States. OpenAI’s data processing agreements provide for European Commission adequacy decisions or standard contractual clauses for transfers within their scope. Exclusive storage of website data within the European Union is not guaranteed. You can contact the firm for information on the applicable safeguards and to request a copy.
Your rights
Subject to the conditions and limits in the GDPR, you may request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. Requests can be sent to segreteria@studiotuzza.it or the firm’s postal address. You also have the right to lodge a complaint with Italy’s data protection authority, the Garante per la protezione dei dati personali.
External links
Articles, recordings, conference programmes and maps open on the original websites only when you select their links. Those websites are governed by their operators’ privacy notices and terms.