The data controller is Avv. Mario Picariello, Galleria di via P.S. Mancini 17, 83100 Avellino, Italy, e-mail info@studiolegalepicariello.com, PEC mario.picariello@avvocatiavellinopec.it.
The contact form does not send any data to the site: it only composes a message which users may send, if they wish, with the app of their choice (WhatsApp, Telegram or e-mail), subject to that provider’s privacy notice.
Appointment and waiting-list requests sent from the “Appointments” section of the Contact page (name, contact details, area of law, any short note, requested day and time) are transmitted to a Google Apps Script application of the Studio, recorded in a Google spreadsheet and notified to the controller by e-mail; confirmed appointments are entered in the controller’s Google calendar. When the visitor reaches the section, the page connects to Google’s servers to show the available times: Google receives the visitor’s IP address, but no cookies are used in the connection. Google may process the data in the United States: Google LLC participates in the EU-U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795). In the spreadsheet, requests are deleted sixty days after the requested date; confirmed appointments remain in the Studio’s diary.
Data provided to the Studio (name, contact details, content of the message or of the appointment request) are processed to respond to the request and to assess whether to accept the engagement, on the basis of Article 6(1)(b) of Regulation (EU) 2016/679, and are kept for as long as necessary to handle the request and, if the engagement is accepted, for the period required by professional and legal obligations.
Data subjects may request access, rectification, erasure and restriction of processing and data portability, and may object to processing (Articles 15–22 of the Regulation), by writing to the contact details above, and may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
The site does not use cookies or any other browser storage: details are in the cookie notice, available from the “Cookie notice” link at the bottom of every page. Fonts and images are hosted on the site itself.
The site is hosted by Netlify, Inc. (San Francisco, California, USA), which acts as processor under Article 28 of the Regulation and, in order to serve the pages, keep them secure and produce aggregate visitor statistics (without cookies), processes technical browsing data (IP address, date and time of the request, page requested and referring page, browser type), also through the other processors it uses, listed in a public list. The processing is based on the controller’s legitimate interest in making the site available securely and in knowing, in aggregate form, how it is used (Article 6(1)(f) of the Regulation). Browsing data may be processed in the United States: the transfer is governed by Netlify’s data processing agreement, which relies on the EU-U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) and, where that does not apply, on the standard contractual clauses adopted by Implementing Decision (EU) 2021/914. Data are retained by the provider for the periods set out in the same agreement.
This English version is provided for convenience; in case of discrepancy the Italian version prevails.
