Dear User

in compliance with the provisions of the current legislation on the protection of personal data, namely the EU Regulation No.2016/679 (also referred to as "GDPR"), applicable as of May 25, 2018 and, to the extent applicable, the complementary Italian legislation, as well as the Measures issued by the Privacy Authority (henceforth, cumulatively, "the Privacy Legislation") we would like to inform you about the processing of your personal data.

This information is provided for personal data collected from you.

(a) Identity and contact details of the data controller.

The Data Controller is the professional association Studio Perotta & Partners, based in Via Conservatorio n.17 - Milan - P.Iva 10379270969 in the person of the Legal Representative Dr. Riccardo Perotta, hereinafter the "Data Controller". His contact details are as follows:

b)Purpose and legal basis of the processing

Your data may be processed for the following purposes:

1.Execution of your Request
In order to fulfill your pre-contractual request to receive information, documentation and subsequent updates on the activities of Studio Perotta & Partners, the processing of your personal data for this purpose finds its legal basis in Article 6.1.b (Execution of Your Pre-contractual Request) of the GDPR and does not require your consent;

The provision of your data for the above purposes is optional; however, failure to provide it will result in the impossibility of executing to your specific request.

2. Marketing Activities.
To enable the Controller to carry out on its own initiative, without a specific request from you, Marketing activities such as: advertising and promotional information, commercial communications, Newsletters and periodic publications through the use of paper mail, telephone, your e-mail address.

The processing of personal data for this purpose finds its legal basis in Article 6.1.a of the GDPR and requires your consent.

The provision of your data for the purposes referred to in this point is optional. Failure to provide your data for these purposes and your lack of consent will not affect the execution of your request but will result in the impossibility of sending you communications about new initiatives, offers or improving our level of service to you.

(c) Method of processing and data retention period.

Personal data will be processed both with and without the aid of electronic tools. Specific security measures will be observed to prevent data loss, illicit or incorrect use and unauthorized access. It may be processed for marketing activities, with your consent, for the purposes stated above.

The data will be kept for the time necessary to achieve the purposes for which they were collected, except for any additional storage time required by law. After this period they will be destroyed or anonymized

d) Recipients of personal data. Subjects who may become aware of it.

For the purpose of enabling the realization of the purposes stated above, the data may be made known to the following subjects:

to our employees and collaborators in the commercial, marketing, administrative and technical sectors who act under our authority and are authorized to process them as Data Processors;
to third parties to whom our company possibly outsources certain activities and who consequently provide the writer with certain instrumental services, however related to the processing and purposes described above, such as, for example, administrative, accounting, tax, auditing, information system management, credit collection, mass storage, customer support services. These third parties carry out processing on behalf of our company and are authorized to process them as Data Processors according to the provisions of Article 28 of the GDPR.
to Public Administrations, security and inspection authorities and, more generally, to subjects to whom the right to access the data is recognized by specific legal provisions or by a measure issued by an authority empowered to do so by law.
Your data will not be disseminated, i.e. it will not be made knowable to unspecified subjects.

e) Rights you are entitled to

The GDPR grants you the following rights in relation to your personal data, which you may exercise within the limits and in accordance with the provisions of the legislation:

Right of access to your personal data (Art. 15);
Right to rectification (art. 16);
Right to erasure (right to be forgotten) (art. 17);
Right to restriction of processing (art. 18);
Right to data portability (art. 20);
Right to object (Art. 21);
Right to object to a decision based solely on automated processing (Art. 22);
The right to revoke, at any time, the consent given, without affecting the lawfulness of the processing based on the consent given before revocation.
You may achieve this by sending a written request addressed to the Data Controller at the postal address or by e-mail, as indicated in (a) above.

In addition, you have the right to lodge a complaint with the Data Protection Authority ( if you believe that the processing of your data is contrary to current legislation (art. 77) or take legal action (art. 79)


Depending on the above, we would be grateful if you would like to express your consent to authorize or deny the processing that will allow the purposes that require it to be carried out, thus completing your request by entering your e-mail address and clicking the "I WANT TO SUBSCRIBE" button found in the online subscription request.