Effective date: 24 September 2026
Data Controller
Bernadette Dessalvi – Studio Dessalvi
Via Filippo Garavetti, 20 – 09129 Cagliari (CA), Italia
Email: segreteria.b.dessalvi@mail.com – Tel.: 070 400306
This notice, provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR"), describes how the personal data of users visiting the website https://www.studiodessalvi.it/ (the "Website") is processed. It applies solely to the Website and not to any other websites that may be accessed via links.
What data we collect
Data voluntarily provided by the user
When you fill in the contact form, we collect the data you enter: first and last name, city, email address, telephone number and the content of your message. The same applies to data contained in emails you send to the addresses shown on the Website or provided by telephone. Please do not include special categories of data (for example, health-related information) in your message unless strictly necessary for your request.
Browsing data
The IT systems that operate the Website automatically collect certain technical data, such as IP address, browser type, and date and time of access. This data is used solely to ensure the proper functioning and security of the Website.
Cookies and third-party services
The Website uses technical cookies necessary for its operation and for storing your consent preferences. For details, please see our Cookie Policy. Cookie Policy.
The Website embeds a map provided by Google Maps (Google Ireland Limited). When the map is displayed, Google may collect data such as the visitor's IP address, which may be transferred to Google LLC in the United States. Google participates in the EU-U.S. Data Privacy Framework, recognised by the European Commission as providing adequate safeguards. For more information: https://policies.google.com/privacy https://policies.google.com/privacy
"Do Not Track" signals
The Website does not respond to "Do Not Track" signals sent by browsers. Users can, however, manage their cookie preferences at any time through the banner and the consent settings button available on the Website.
Purposes and legal bases of processing
- Responding to requests for information and appointments sent via the form, email or telephone. Legal basis: steps taken at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR).
- Managing any professional engagement that may result from the request. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- Complying with legal obligations, such as tax or accounting requirements, or requests from authorities. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
- Ensuring the security and proper functioning of the Website, preventing abuse, spam and fraudulent activity. Legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR).
- Non-technical cookies and third-party services, where present. Legal basis: consent (Art. 6(1)(a) GDPR), which may be withdrawn at any time.
Provision of data
Providing the data requested in the contact form is optional; however, without it we will be unable to respond to your request.
How long we keep your data
Data sent via the contact form, email or telephone is kept for as long as necessary to respond to the request and, in any case, for no longer than 24 months from the last contact. If the request leads to a professional engagement, the data is kept for the duration of the professional relationship and thereafter for the period required by law (for example, 10 years for tax and accounting obligations). Browsing data is kept only for as long as strictly necessary for security purposes.
Who we share your data with
Your data is not sold or disclosed to the public. It may be processed, solely for the purposes stated above, by service providers that support the Controller in managing the Website and communications, such as the hosting provider and the email service providers used by the firm. Data may also be disclosed to public authorities where required by law.
Transfer of data outside the European Union
Some providers (for example, Google and Microsoft) may process data in the United States. In such cases, the transfer takes place on the basis of the EU-U.S. Data Privacy Framework or other appropriate safeguards provided for in Articles 44 et seq. of the GDPR.
Automated decision-making
We do not carry out any automated decision-making or profiling.
Your rights
You may at any time exercise the rights provided for by Articles 15–22 of the GDPR: access to your data, rectification, erasure, restriction of processing, data portability, objection to processing, and withdrawal of any consent given, without affecting the lawfulness of processing carried out prior to withdrawal. To exercise these rights, please write to segreteria.b.dessalvi@mail.com. segreteria.b.dessalvi@mail.com.
You also have the right to lodge a complaint with the supervisory authority, the Italian Data Protection Authority – Garante per la protezione dei dati personali (www.garanteprivacy.it).www.garanteprivacy.it).
Children
The Website is not intended for children under the age of 16 and we do not knowingly collect their data. If you are a parent or guardian and believe that a child has provided us with data, please contact us and we will delete it.
Data security
We adopt appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure. However, no method of transmission or digital storage is 100% secure.
Links to other websites
The Website may contain links to external websites that are not managed by the Controller and are not covered by this notice. We recommend that you read their respective privacy policies.
Changes to this notice
This notice may be updated to reflect changes in legislation or to the Website. The version in force is always the one published on this page, together with its date of update. In case of discrepancies, the Italian version shall prevail.