Privacy Policy

1.1. Data Controller

The Data Controller is Ana Maria Duverge, Esq. – Via Venezia, 59 – 20025 Legnano (MI) – VAT No. 06805340962. You may contact her with any requests or questions regarding the processing of personal data at the following email address: [email protected].

1.2. Purpose and Legal Basis for Data Processing

The personal data that the Firm lawfully possesses is processed for the following purposes:

1. Responding to contact requests: Managing contact forms to respond to requests for information related to the provision of legal services (Legal basis: consent of the data subject and legitimate interest of the Data Controller).

2. Booking a free orientation session or a paid consultation: Managing the schedule and setting appointments through the Calendly service (Legal basis: performance of precontractual or contractual measures at the user’s request).

3. Payment Processing: Management of financial transactions related to paid legal consulting services through the PayPal and/or Stripe payment gateways (Legal basis: performance of the contract and compliance with legal and tax obligations).

4. Customer Relationship Management (CRM): Storing and tracking customer requests and contact information via the Pipedrive platform (Legal basis: performance of the contract and legitimate interest in efficient organizational management).

1.3. Categories of Personal Data Processed

The personal data processed includes:

● Personal and contact information: First name, last name, phone number, email address, and any other information voluntarily provided by users in forms or on Calendly.

● Payment and billing information: Transaction amount, billing information, and payment status. Note: Financial and credit card information is processed directly by third-party providers (PayPal/Stripe) using encryption and is not stored on the Data Controller’s servers.

1.4. Recipients and Transfer of Personal Data

Users’ personal data is processed, in accordance with the specific purpose of the processing, through the use of third-party service providers designated as Data Processors (or independent Data Controllers for payments), including:

● GoHighLevel / LeadConnector: Technology platform on which the website is hosted and delivered (U.S., via Standard Contractual Clauses / Data Privacy Framework).

● Calendly LLC: A platform for scheduling and managing calendar appointments.

● PayPal (Europe) S.à r.l. & Stripe Payments Europe, Ltd.: Secure payment gateways for financial transactions related to paid consulting services.

● Pipedrive Inc.: A CRM platform for managing contacts and cases.

● Zapier Inc.: A platform for integrating and automating data flows between third-party platforms used by the Data Controller.

● Google LLC (Google Analytics 4 and Search Console): For anonymous and aggregated statistical analysis of traffic.

The data is not disclosed to third parties for their own commercial purposes.

1.5. Retention of Personal Data

Users' personal data will be retained for the time strictly necessary to respond to the request or to manage the provision of consulting services, and will subsequently be retained only for the time required by legal, tax, and accounting obligations (e.g., 10 years for payment transactions).

1.6. Rights of Data Subjects

Data subjects may exercise the rights provided for by the GDPR (EU Regulation 2016/679), including the right of access, rectification, erasure, restriction, data portability, and objection to the processing of personal data, by sending a written request to the Data Controller at the email address [email protected]. They also have the right to file a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

1.7. Changes to This Privacy Policy

This policy may be amended from time to time to comply with any new laws or the introduction of new technologies.