Privacy

Privacy & website information

Information under Article 13 of Regulation (EU) 2016/679 (GDPR). Updated 14 October 2026.

Who is responsible for your data

The data controller is Avv. Luca Valente, Corso Trieste 123, 00198 Roma, Italy, VAT number 01363010537. For privacy requests, use the contact form, marked “Privacy request”, or write to the office. Professional email: studiolegalelucavalente@gmail.com. PEC: studio@pec.avvocatolucavalente.it.

What is collected and why

The enquiry form collects your name, email address, short message and acknowledgement that you have read this notice. These data are used to assess and answer your request and take steps at your request before a possible professional engagement (Article 6(1)(b) GDPR). Where you contact the practice on behalf of another person or organisation, the basis is the legitimate interest in assessing and answering professional correspondence (Article 6(1)(f)). Data may also be processed to meet applicable legal obligations (Article 6(1)(c)) or to establish, exercise or defend legal claims (Article 6(1)(f)).

Name, email and message are necessary to process an enquiry through this form. Without them it cannot be submitted. There is no newsletter subscription, advertising use, profiling or automated decision about whether to accept your matter. Reading this notice is not consent to marketing.

Send only a general description and any approaching deadline. Do not include medical information, criminal allegations, identity documents or other sensitive details. The form does not accept attachments. If further information is required, the practice will explain the appropriate transmission arrangements and provide any additional information relevant to the engagement.

Website delivery and security

Cloudflare provides hosting and delivery of the website and processes technical information such as IP address, request time, browser and connection information to deliver and protect it. The contact page uses Cloudflare Turnstile to distinguish legitimate requests from automated abuse. Turnstile processes device, browser and connection signals; the server validates its one-use token before sending a message. The legal basis for these security operations is the legitimate interest in operating and protecting the website (Article 6(1)(f)). See Cloudflare’s Turnstile privacy information.

The website has no advertising or audience analytics scripts and uses locally hosted fonts. Turnstile is used without pre-clearance. No optional advertising or analytics cookies are installed by the website. Technical processing by the hosting and security services remains necessary for their operation.

Who receives the information

Enquiries are handled by Avv. Luca Valente. Cloudflare processes the web request; Google Apps Script transmits the notification through Google’s email service, and Gmail stores the resulting correspondence in the practice’s designated mailbox. Message data are not published, added to marketing lists or sent to other visitors. Technical providers may use authorised subprocessors. Data may be disclosed to authorities or professional advisers where required by law or necessary to protect legal rights.

Providers operate internationally and processing may occur outside the European Economic Area. Applicable safeguards include European Commission adequacy decisions and, where required, standard contractual clauses. Details are available in Cloudflare’s data processing terms, and Google’s international transfer framework. You may contact the controller for further information about safeguards applicable to your data.

How long information is kept

Enquiry correspondence is kept for the time needed to assess and answer the request and manage any follow-up. If no engagement follows, continued retention is limited to what is necessary to document the correspondence or protect legal rights, taking account of the relevant limitation periods and any dispute. When an engagement is accepted, the applicable professional-file information and legal retention obligations apply. Data no longer needed for these purposes must be deleted or anonymised.

The website application does not maintain a separate database of enquiries and does not write message bodies to application logs. Email and technical service records remain subject to the providers’ applicable retention settings and legal requirements.

Your rights

Subject to the conditions and exceptions in the GDPR, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may lodge a complaint with the Italian Data Protection Authority (Garante) or another competent supervisory authority. Use the controller’s contact details above to exercise your rights.

Professional information

Avv. Luca Valente is registered with the Ordine degli Avvocati di Roma, Italy. The website provides general information, not advice on a particular matter. Sending an enquiry does not create a professional engagement or constitute acceptance of a deadline. Professional and contact details are available on the contact page.