Privacy Policy

Information pursuant to article 13 of Regulation (EU) 2016/679 of 27 April 2016 – General Data Protection Regulation

Our Firm will process data in accordance with data protection law, including Regulation (EU) 2016/679 of 27 April 2016- General Data Protection Regulation (hereinafter the “GDPR”).


1. Controller

The data controller is Poggio Saraceno, Avvocati – Associazione professionale di Avvocati, with registered office in Torino, corso Montevecchio n. 58, which may be contacted at the following address:

Poggio Saraceno, Avvocati

To the attention of Mrs. Anna Saraceno

Corso Montevecchio n. 58

10129 Torino.


2. Purpose and Legal Basis

Our Firm will process the data for the sole purpose of the accurate and complete performance of the professional mandate, both in court proceedings and in non-contentious activities.

The processing is based on the need to perform the obligations deriving from the professional mandate and from the legitimate interest of the controller and the client to its correct performance.

The possible need to process special categories of data is based on the consent of the data subject or on the need to establish, exercise or defend a legal claim.

The refusal to provide personal data may affect the possibility to perform, in whole or in part, the professional mandate.


3. Recipients

The personal data will be communicated to partners, associates and employees of our Law Firm, who are subject to confidentiality obligations.

The data will be also accessible to the IT consultant, who will process them – on the basis of a specific contract – as data processor pursuant to Article 28 GDPR and for the sole purpose of providing IT consultancy services to our Law Firm.

The data may be transferred to third parties for the purposes of performing the professional mandate (for example, to operators of the judiciary, counterparties and their defendants, arbitrators, etc.). In such case, if necessary for the defence, the data may be transferred abroad.


4. Storage Period

The data will be stored for the entire duration of the mandate and for the further period required by law or necessary for the protection of the controller’s rights, which in any case may not be longer than the statute of limitation governing possible claims relating to the mandate.


5. Data Subject’s Rights

The data subject may request:

  • access to, rectification or erasure of personal data, restriction of the processing, or may object to the processing, pursuant to articles 15-18 and 21 GDPR;
  • data portability, pursuant to article 20 GDPR;

and may withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

For the exercise of the rights above, the data subject may contact our Law Firm at the following address:

The data subject may also lodge a complaint with the Italian supervisory authority.