Information and transparency.

The Data Controller is Avv. Erica Vicentini, with office at Via Grazioli 73, 38122 Trento (Italy), fiscal code VCNRCE90L58H612F, VAT number 02492130220, enrolled with the Trento Bar Association.

For any request related to the processing of personal data, please write to erica@avvocatoericavicentini.it or to the PEC address listed on this page.

Contact data voluntarily provided by the user through the contact form on the site (first name, last name, email, phone, subject, message) or via email, PEC or phone.

Browsing data automatically collected by the systems and software procedures running the site (IP addresses, browser, operating system, visited pages). These data are not associated with identified users but, by their very nature, could allow identification of the data subjects. They are used only for technical and security purposes.

During the professional relationship, special categories of data may also be processed (e.g. data relating to criminal proceedings, health data, data relating to minors), strictly necessary for legal defence or advice.

Responding to requests for information and advice received through the contact form, email, PEC or phone.

Fulfilling obligations connected with the professional engagement of legal representation or advice, including tax, accounting, anti-money-laundering and ethical obligations.

Fulfilling obligations imposed by laws, regulations and EU legislation.

Ensuring the security of the site and preventing abuse.

Performance of pre-contractual measures at the request of the data subject (art. 6.1.b GDPR), to respond to requests and manage any subsequent professional engagement, as well as performance of the related contract.

Compliance with legal obligations (art. 6.1.c GDPR), such as tax, accounting, anti-money-laundering and ethical obligations.

Establishment, exercise or defence of legal claims (art. 9.2.f and art. 10 GDPR), for the processing of special categories of data and judicial data within the engagement.

Legitimate interest of the Controller (art. 6.1.f GDPR) to respond to communications received, ensure the security of the site and prevent abuse.

Processing is carried out with electronic tools and, where necessary, in paper form, in compliance with the technical and organisational security measures required by the GDPR.

Data are not subject to automated decision-making or profiling.

Requests received through the contact form that do not lead to a professional engagement are kept for the time strictly necessary to respond and in any case no longer than 24 months.

Data relating to the professional engagement are kept for the time necessary for the engagement and, afterwards, for the statutory limitation periods (generally 10 years under art. 2946 of the Italian Civil Code) and for document retention obligations.

System logs are kept for the time strictly necessary for technical and security purposes.

Data may be communicated to third parties acting as data processors on behalf of the Controller, in particular: the site hosting provider (Vercel Inc., USA); the provider of the email service used to send messages generated by the contact form (Resend, Resend Inc., USA); the email service used to receive and manage requests (Hostinger International Ltd, Hostinger group); the provider of the interactive map embedded in the contact page (Google LLC / Google Ireland Ltd. – Google Maps); tax and accounting advisors, collaborators and IT service providers of the office.

Data may also be communicated to judicial and administrative authorities, opposing parties and their counsel, court-appointed experts and consultants, within the limits strictly necessary for the engagement.

Data are not disseminated.

Some providers (Vercel Inc., Resend, Google LLC) are based in the United States. Transfers are safeguarded by the Standard Contractual Clauses approved by the European Commission (decision 2021/914) and, where applicable, by the providers' adherence to the EU-US Data Privacy Framework.

The data subject has the right to request access to their personal data, rectification, erasure, restriction of processing and data portability. They may also object to processing and withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Requests must be addressed to erica@avvocatoericavicentini.it or to the PEC address of the office. The Controller responds within 30 days of receipt.

The data subject has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Providing the data requested by the contact form is voluntary. Not providing the required fields, however, makes it impossible to respond to the request.

Within the professional engagement, providing the data necessary for the engagement is mandatory: without them, legal assistance cannot be provided.