Privacy notice

Updated 5 October 2026

This notice describes how the personal data of visitors to this website and users of the contact form are processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.

Data controller

Lorenzo de’ Rossi, lawyer, Via Guido Banti, 41 – 00191 Rome, Italy. Email: lorenzo.derossi@ldrlex.it, telephone +39 06 45214578.

Data processed

  • Data entered in the contact form: full name, email address, telephone number (optional) and the content of the message.
  • Browsing data: the server hosting the website records in its technical logs the IP address, the date and time of the request, the page requested and the browser type.

The website does not use cookies, analytics or tracking tools.

Purposes and legal basis

  • Replying to enquiries sent through the form and handling the contacts that follow: the processing is necessary to act on the request of the data subject (Article 6(1)(b) GDPR) and is based on the consent given by ticking the box in the form (Article 6(1)(a)).
  • Operation and security of the website, for browsing data: legitimate interest of the controller (Article 6(1)(f)).

The form data are necessary to reply: without them no answer can be given. You are not asked to include special categories of data (Article 9 GDPR) in your message; if you do, they are processed solely to reply to your enquiry.

Processing and retention

Messages sent through the form are delivered to the controller’s email mailbox and kept for as long as needed to reply. If the enquiry leads to a professional engagement, the data are kept for the duration of the relationship and for the periods required by law; otherwise they are deleted within twelve months. Technical logs are kept by the hosting provider for the time strictly necessary for the security and operation of the service.

Recipients

The data may be processed by the providers of the hosting and email services, to the extent necessary to deliver those services. The data are not disclosed or communicated to other parties, except where required by law. No transfers to countries outside the European Union are envisaged.

Your rights

You may at any time request access to your data, their rectification or erasure, the restriction of processing, object to processing and request data portability (Articles 15–22 GDPR), and withdraw the consent given, without affecting processing already carried out. Requests should be sent to the controller’s contact details above. You may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Updates

This notice may be updated; the version in force is the one published on this page, with the date shown above.