← Studio Legale Cammelli · Versione italiana

Privacy and Cookie Notice

pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) – last updated: 26 October 2026

This notice explains how personal data are processed when you visit www.studiolegalecammelli.net (the “Website”) or contact the firm using the details provided on it. It does not cover third-party websites that may be reached through links.

1. Data controller

Avv. Filippo Cammelli – Studio Legale Cammelli, Piazza Aldrovandi 3, 40125 Bologna, Italy, VAT no. 02147711200. Email: filippo.cammelli@studiolegalecammelli.net – Certified email (PEC): filippocammelli@ordineavvocatibopec.it – Tel. +39 051 221158.

The firm has not appointed a Data Protection Officer (DPO), as it is not required to do so.

2. Data processed

a) Browsing data. The systems running the Website automatically collect certain data whose transmission is inherent in the use of Internet protocols: IP address, date and time of the request, resource requested, response code, browser type and operating system, referring page. These data are not collected to identify users, but could allow identification if combined with other information.

b) Data you provide. When you write to the firm's email or certified email address, or call the firm, you provide your contact details and the information contained in your message. Please avoid sending special categories of data (Art. 9 GDPR) or data relating to criminal offences (Art. 10 GDPR) in a first contact unless strictly necessary.

The Website has no data collection forms, requires no registration and carries out no profiling.

3. Purposes and legal bases

Purpose	Legal basis
Enabling browsing and ensuring the security and proper functioning of the Website (browsing data)	Legitimate interest of the controller (Art. 6(1)(f) GDPR)
Replying to enquiries and assessing a possible engagement (data you provide)	Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR)
Establishing, exercising or defending legal claims and complying with legal obligations	Legal obligation and legitimate interest (Art. 6(1)(c) and (f) GDPR)

Providing contact details is optional, but without them the firm cannot reply.

4. How data are processed and professional secrecy

Data are processed electronically, with technical and organisational measures appropriate to prevent loss, unlawful use and unauthorised access. Information received in view of an engagement is handled in compliance with the lawyer's duties of professional secrecy and confidentiality.

5. Recipients

Data may be processed, solely for the purposes stated above, by:

IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany), which hosts the Website and manages the firm's email, acting as data processor (Art. 28 GDPR);
the firm's staff and collaborators, who are authorised to process data and bound by confidentiality;
public authorities, where disclosure is required by law.

Data are not published or sold to third parties for marketing purposes.

6. Transfers outside the European Union

Data are stored on servers located in the European Union and are not transferred to third countries.

7. Retention

Browsing data: up to 8 weeks, unless needed to investigate computer crimes.
Messages and contact details not followed by an engagement: as long as needed to handle the enquiry, and in any case no longer than 12 months.
If the enquiry leads to an engagement, data are kept for the duration of the engagement and for ten years thereafter, in line with the Italian statute of limitations (Art. 2946 of the Civil Code).

8. Cookies

The Website does not use cookies, whether technical or profiling, nor any other first- or third-party tracking tools. For this reason no cookie banner is displayed. Should the firm introduce non-technical cookies in the future, it will ask for your prior consent in accordance with the Italian Data Protection Authority's Guidelines of 10 June 2021.

9. Your rights

You may at any time exercise the rights provided by Articles 15–22 GDPR: access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interest. Requests should be sent to the contact details in section 1; the firm will reply within one month.

If you believe the processing infringes the GDPR, you may lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU Member State where you live or work.

10. Changes

This notice may be updated. The version in force is always published on this page, with the date of the last update.