Privacy Notice pursuant to Article 13 of EU Regulation 2016/679 (GDPR)

1) Data Controller

The Data Controller is Studio De Finis Strumia Dott.Comm. Associati, with registered office at Corso Rosselli 1, 10128, Turin (TO), Italy – VAT/Tax Code: 07374520018, contactable at segreteria@studiodefinis-strumia.it.
The Controller processes data in accordance with the principles established by the GDPR, including lawfulness, fairness, transparency, purpose and storage limitation, data minimization, accuracy, integrity, and confidentiality.


2) Processed Data

The Controller processes users’ browsing data as follows:
The computer systems and software procedures used for the operation of this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
These are not collected to be associated with identified individuals, but by their nature could allow user identification through processing and association with third-party data.
This data category includes IP addresses, domain names of users’ devices, URI (Uniform Resource Identifier) addresses of requested resources, request time, method used to submit the request, file size received, response status code, and other data related to the user’s operating system and environment.
These data may be used to determine liability in the event of cybercrimes against this site or related sites. Otherwise, web contact data is stored only temporarily, for a few days.
Additionally, through statistical analysis services (e.g., Google Analytics), the user’s IP address may be logged.


3) Purposes of Data Processing

The data is processed for the following purposes:

  • to allow navigation on the website;

  • to comply with legal obligations or authority requests;

  • to analyze site traffic, user frequency, and preferences, possibly for sending personalized marketing communications.


4) Legal Basis of Processing

The legal bases for processing are:

  • the need to fulfill user requests (e.g., access and use of the website);

  • compliance with legal obligations or official requests;

  • the user’s explicit consent.


5) Cookies

Cookies are small text files automatically stored on the user’s device via the browser. They contain basic Internet navigation data and are recognized each time the user revisits the site.

This site uses cookies, including third-party cookies, to improve browsing experience, provide online services, and display personalized ads.
No cookies are used to transmit personal data or for persistent tracking. Session cookies are used solely to ensure safe and efficient site navigation and are deleted once the browser is closed.
These session cookies avoid using other potentially intrusive technologies and do not collect personally identifiable information.

Users may disable analytical cookies (e.g., Google Analytics) or anonymize them.

Duration – Some cookies (session cookies) are deleted when the browser closes. Others (persistent cookies) remain for future sessions, generally up to 6 months.

Browsers allow users to manage cookie preferences for individual websites. For example:

  • Firefox

  • Internet Explorer

  • Chrome

  • Opera

  • Safari for Mac

Users can also manage advertising-related cookies via services like Your Online Choices for participating ad networks (http://www.edaa.eu).

⚠️ When using services from third parties (e.g., social media buttons, external links), personal data may be processed by such parties under their own privacy terms. In such cases, users should consult the respective privacy policies. The Controller disclaims responsibility for such third-party processing.


6) Mandatory or Optional Data Provision

Providing navigation data is essential for accessing the website; refusal will prevent site access or use of its services.
Providing data for statistical analysis or personalized communications is optional; consent can be withdrawn at any time, and analytics can be disabled to ensure anonymous browsing.
Disabling cookies, including third-party cookies, does not block access to the site, but may affect certain features.


7) Data Recipients and Disclosure

Data may be shared only to the extent necessary for the stated purposes.
Categories of recipients include:

  • parties essential for website operation and service provision (acting as Data Processors);

  • internal staff and authorized persons;

  • third parties (e.g., Google) providing analytical services.


8) Data Retention

Data is retained for as long as necessary to provide the service, meet legal obligations, or fulfill the purposes outlined in this notice.


9) Data Subject Rights

Data subjects have the right to:

  • access their personal data;

  • request correction or deletion (“right to be forgotten”);

  • request restriction or object to processing;

  • request data portability;

  • file a complaint with a supervisory authority or take legal action;

  • withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

They also retain rights under Article 7 of Legislative Decree 196/2003 (as amended), including:

  • confirmation of whether their personal data exists, its origin, the identities of data controllers/processors, and its transformation or blocking if processed unlawfully.


10) Changes to This Policy

This policy has been in effect since 28/11/2018.
The Data Controller reserves the right to update or modify this privacy notice in whole or in part, including in response to regulatory changes.
Any updates will be posted on this website and will be binding from the time of publication. Users are encouraged to check this section regularly.