Privacy Policy


pursuant to Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the further national and European legislation as applicable

Dear User,

Studio Legale Zaglio Orizio e Associati, with registered office in Piazza della Loggia 5, 25121 – Brescia, telephone +39 0302408170, email [email protected], in its capacity as data Controller (hereinafter “Controller”), informs you that the purpose of this information notice is to describe how personal data collected through the website (hereinafter “Website”) is managed.

Your data will be processed in accordance with the law, according to the principles of necessity, correctness, lawfulness and transparency, protection of your privacy and rights, limitation of the purpose of processing and storage, data minimisation, accuracy and quality of data, data integrity and security.

This information notice does not apply to other websites – not belonging to the Controller – which you may access via links, banners or other links possibly present on our Site.

Each data subject is in any event responsible for the security of his/her own account and must not share access credentials or other account-related information with third parties.

Processing operations related to the Site’s web services takes place mainly at the aforementioned operational headquarters and are carried out using automated processes and/or by persons authorised to process data and/or by data processors.


I. Type and origin of personal data collected-Navigation data-The computer systems and software procedures used to operate this Site acquire, during normal operation, certain personal data which are then implicitly transmitted when using Internet communication protocols.

This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This data category includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.

Data provided voluntarily by the user- The optional, explicit and voluntary sending by you of e-mails to the addresses indicated on the Site and/or the optional, explicit and voluntary filling of forms and modules on the Site entail the acquisition and processing by the Controller of such data (such as, by way of example and without limitation, name, surname, address, telephone number, e-mail) as well as any other information contained in such communications for the purposes indicated below.

The consent of minors to the processing of their personal data is valid from the age of 16.

The Controller will not process personal data of children under the age of 16 unless their parents or guardians give their consent to the Controller’s collection and use of children’s information.

Although the provision of personal data is not compulsory, it may be indispensable to enable us to provide our services.


II. Purposes of the processing – On the basis of your free, explicit and informed consent – or on the basis of the other instances of lawful processing strictly provided for by the law under art. 6 Reg. (EU) 2016/679 – the Controller informs you that your data will be processed for the following purposes:

  1. Operational management and strictly related purposes for accessing the website.
  2. Prerequisite for processing: consent and execution of a contract.

  3. Processing for statistical purposes in an anonymous and aggregate form on the use of the site and verification of its proper functioning.
  4. Prerequisite for processing: consent and legitimate interest of the data Controller.

  5. Fulfilment of regulatory obligations (including identification and registration obligations pursuant to Legislative Decree No. 231 of 21 November 2007) following your voluntary submission of personal data.
  6. Prerequisite for processing: fulfilment of a legal obligation.

  7. Purposes functional to the Controller’s communication activity, in particular:
    1. the invitation of your representatives to exhibitions and other events organised by Studio Legale Zaglio-Orizio e Associati, also in collaboration with other professionals, entities or associations;
    2. the sending of information notices and/or other publications relating to regulatory and/or case-law developments;
  8. Prerequisite for processing: consent and legitimate interest of the data Controller.


III. Cookie Policy – Details of the cookies used on the Site are available in the “Cookie Details” disclosure at the following LINK, where you can customise your Site using experience.

VI. Processing modality and data protection – The personal data of data subjects will be processed using automated paper and/or computer tools, by Data Processors appointed pursuant to Article 28 of Regulation (EU) 2016/679 or by persons authorised to data processing – the updated list of Data Processors can be obtained from the following email address [email protected]for the time necessary to achieve the purposes for which they are collected or for any other legitimate related purpose (unless you withdraw your consent). At the end of this period, said data will be stored to comply with specific regulatory or contractual obligations, including those imposed by current civil and tax provisions, as well as for administrative purposes and/or to assert or defend one’s own rights, in the event of litigation and pre-litigation. In any case, the Controller undertakes to adopt adequate technical and organisational security measures to prevent the destruction or loss of data, possible unauthorised use and unauthorised access, pursuant to Article 32 of Regulation (EU) 2016/679.

Your data will not be disclosed in any way, but may be communicated to third parties whose activities are necessary and related to the achievement of the above purposes (such as, without limitation: professionals, competent administrative and judicial authorities, banks and credit institutions, audit firms, insurance companies, national and/or international legal and tax consultancy firms, national and/or international public authorities with the power to do so, Companies, including foreign companies cooperting with the Controller).


V. Data subject’s rights – As data subject, you may at any time exercise your rights pursuant to Articles 15 et seq. of Regulation (EU) 2016/679. In particular, you may ask the Controller to confirm the existence or non-existence of personal data concerning you, to access personal data and to rectify or erase data or to restrict the processing of data concerning you or to object to the processing of data, as well as the right to data portability and the right to lodge a complaint with a supervisory authority. You will be able to obtain information about the source of personal data and, where appropriate, whether data come from publicly accessible sources. Furthermore, where processing is based on explicit consent, the data subject shall have the right to withdraw consent at any time without affecting the lawfulness of the processing based on the consent given prior to withdrawal.

This information notice is written in Italian. In the event of any conflict between the Italian version and any translation thereof into another language in connection with construction, the Italian language version shall prevail.