Privacy notice – contact form

This notice is provided under Article 13 of Regulation (EU) 2016/679 (GDPR) and concerns the personal data submitted through the contact form on this website. For anything not covered here, please refer to the Privacy Policy.

Data controller

Avv. Stefano Ricci, Via Pietro Colletta 7, 20135 Milan, Italy – VAT no. 04850500960 – e-mail stefano@ricci.legal – certified e-mail (PEC) stefano.ricci@cert.ordineavvocatimilano.it.

Data processed

Name and surname, e-mail address and telephone number are required in order to reply; without them the request cannot be answered. The text entered in the “Request” field is optional. Since the controller cannot check its content in advance, please do not include health data or other special categories of data (Article 9 GDPR), or data relating to criminal convictions and offences (Article 10 GDPR), whether your own or third parties’: if needed, they can be provided after the first contact.

Purposes and legal basis

The data are processed to reply to the request and, where appropriate, to arrange a meeting, on the basis of Article 6(1)(b) GDPR (steps taken at the request of the data subject prior to entering into a contract). The form is protected by Google reCAPTCHA to prevent automated submissions, on the basis of the controller’s legitimate interest in the security of the website (Article 6(1)(f) GDPR).

Recipients and transfers

The data are sent by e-mail to the controller’s mailbox and may be processed by the hosting and e-mail service providers, acting as processors, and by Google Ireland Ltd for the reCAPTCHA service. For the latter, data may be transferred to the United States on the basis of the European Commission’s adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework).

Retention

The data are kept for as long as necessary to handle the request and in any case no longer than 24 months from the last contact; if the request leads to a professional engagement, they are kept for the period required to handle the engagement and to comply with legal obligations.

Your rights

You may exercise the rights under Articles 15-22 GDPR (access, rectification, erasure, restriction, portability, objection) by writing to stefano@ricci.legal, and you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of your EU Member State.