Privacy Policy under Article 13
of Regulation (EU) 2016/679 (GDPR)
Consent to the Processing of Personal Data
This Privacy Policy is provided pursuant to Article 13 of Regulation (EU) 2016/679 (the “GDPR”).
It explains how your personal data will be processed when you assign your legal matter to our law firm.
If you wish to discuss or do not understand any aspect of the below,
please contact me at a.galligani@glitalianlawyers.com before accepting.
* * *
1. Data Controller and Data Protection Officer
The Data Controller is Avv. Alessandra Stefania Galligani (also referred to as the “Lawyer”, with elected domicile at Via Della Ralla, 15, 51013 Chiesina Uzzanese (PT), Italy.
The Data Controller may be contacted via email at the following address: a.galligani@glitalianlawyers.com
The law firm has not appointed a Data Protection Officer (DPO).
2. Purpose of the Processing
Your personal data will be processed in order to properly and fully perform the professional engagement entrusted to the Lawyer, both in court proceedings and in out-of-court matters.
Your data will also be processed in order to:
• comply with tax and accounting obligations;
• comply with legal and regulatory obligations applicable to the Lawyer.
Your personal data may be processed using paper files and electronic systems (including portable devices) and only to the extent strictly necessary to achieve the purposes listed above.
3. Legal Basis for the Processing
Your personal data is processed lawfully where the processing:
• is necessary to perform the mandate, a contract to which you are a party (the letter of engagement), or pre-contractual measures taken at your request;
• is necessary to comply with a legal obligation imposed on the Lawyer;
• is based on your explicit consent (sending the law firm newsletter).
4. Consequences of Not Providing Personal Data
If you do not provide personal data that is required to:
• perform the contract to which you are a party, or
• comply with legal obligations (for example, accounting and tax obligations),
the contractual relationship cannot be established or continued.
5. Data Retention Period
Your personal data will be retained:
• for the entire duration of the contractual relationship, and
• after its termination, for the period required by law for tax, accounting, or other legal purposes.
6. Communication of Personal Data
Your personal data may be shared with the following categories of recipients located worldwide:
1. consultants, accountants, or other lawyers providing services related to the purposes described above;
2. banks and insurance companies providing services related to the same purposes;
3. entities that process data to comply with specific legal obligations;
4. judicial or administrative authorities, where required by law or by the contractual relationship.
7. Profiling and Data Disclosure
Your personal data:
• will not be disclosed to the public, and
• will not be subject to automated decision-making processes, including profiling.
8. Your Rights as a Data Subject
Under the GDPR, you have the right to:
• obtain access to your personal data and related information; request correction of inaccurate data or completion of incomplete data; request erasure of your personal data where one of the conditions set out in Article 17(1) of the GDPR applies (subject to the exceptions in Article 17(3)); request restriction of processing in the cases provided for by Article 18(1) of the GDPR;
• receive your personal data from the Lawyer, where processing is based on a contract or consent and carried out by automated means, in a structured, commonly used, and machine-readable format, and to transfer such data to another data controller (right to data portability);
• object at any time to the processing of your personal data where there are reasons related to your particular situation;
• withdraw your consent at any time, where processing is based on consent for specific purposes and concerns either ordinary personal data (such as date and place of birth or residence) or special categories of personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health status, or sexual life). Processing carried out before withdrawal remains lawful;
• lodge a complaint with the competent supervisory authority (Italian Data Protection Authority – www.garanteprivacy.it).
If you agree with the above, please accept it by completing and submitting the form below.
Information Notice on the Use of Artificial Intelligence Tools
Pursuant to Article 13 of Law No. 132/2025 (Provisions on Intellectual Professions),
I, Avv. Alessandra Stefania Galligani, with registered office in Via Della Ralla, 15, 51013 Chiesina Uzzanese (PT), Italy
Hereby inform you that:
– during the performance of the professional engagement, both in judicial and out-of-court matters, where deemed appropriate, I and my collaborators may make use of Artificial Intelligence systems (“AI”) to carry out activities that are instrumental and/or supportive of my professional work;
– the use of Artificial Intelligence systems (“AI”) will always take place in full compliance with Regulation (EU) No. 2016/679 (GDPR) and with the professional and ethical duties governing the legal profession, in order to ensure the protection of the privacy and confidentiality of the Client and of the assisted party;
– any output generated through Artificial Intelligence systems (“AI”) will be subject to a careful and thorough review by me, both at the stage of content generation and in the verification of sources.