Privacy Policy

de Tilla Studio Legale (hereinafter also “the Firm“), C.F. and VAT number 10153770960, based in Milan (MI), at via Fatebenefratelli 15, 20121, as Data Controller of the personal data you voluntarily disclosed pursuant to EU Regulation 679/2016 – General Data Protection Regulation (GDPR), hereinafter also just “GDPR”, recognises the importance of the protection of personal data and considers their protection one of the main objectives of its business.

This privacy policy has the purpose of informing users of the website in a clear and exhaustive manner about the processing of their personal data and the use of tools for collecting the same.

Holder of the treatment

The Data Controller of the Site is de Tilla Studio Legale, as defined above. The treatments connected to the web services of the Site take place at the Aruba SpA datacenter, with registered office in Ponte San Pietro (BG, Via San Clemente, 53, as well as at the headquarters of the Data Controller and on the devices of the same. For any information concerning the processing of the firm’s personal data, including the list of Managers who process data, please write to the e-mail address:

Personal data being processed

The data collected through the various contact channels are:

  • Contact details – information regarding name, address, telephone number, e-mail address.
  • Other personal data – information that you voluntarily provide to us regarding, for example, your date of birth, education or professional situation.
  • Use of the Site and Communications – information relating to how they use the site, open or forward communications from the Firm, including information collected through cookies and other tracking technologies.

The Firm processes your personal data if you contact us directly, via our website or by e-mail, to request information about our services, or if you subscribe to our newsletter. If you provide personal data on behalf of someone else, it is your responsibility to make sure, before doing so, that the interested party has read this Privacy Notice. If you are under the age of 16, please do not provide us with any personal data.

Purpose of the processing

Your personal data will be processed for the following purposes:

Periodic sending of newsletters – the Firm collects your contact data in order to send periodic communications by e-mail with informative content on activities, news, offers, events concerning the Firm itself or in a broad sense the area of ​​interest of the legal activity. The prerequisite for processing is the fulfillment of a contractual obligation, and you can choose to unsubscribe at any time.

Fulfillment of your request – to follow up on your requests for information, quotes, clarifications, request for contact or participation in events open to the public. The prerequisite for the processing is the execution of pre-contractual measures.

Compliance with legally binding requests for your personal data and legal protection of your right – to comply with legal obligations, regulations or provisions of the judicial authority, as well as to defend a right in court; the prerequisite is the fulfillment of obligations established by law or by an order of the Authority, as well as the legitimate interest of the Firm.

Statistical research / analysis – to measure site operation, traffic, usability and browsing experience; in this case no personal data are collected except in anonymous form that cannot be traced back to a natural person.

Data retention

The Firm keeps your personal data only for the time necessary to achieve the purposes for which it was collected or for any other legitimate related purpose.

Fulfillment of contractual obligations: the data processed to fulfill any contractual obligation with you may be kept for the entire duration of the contract as well as for 10 years after the end of the fiscal year following that of competence, to address any assessment and / or dispute of a fiscal nature.

In the event of disputes: in the event that it is necessary to defend oneself or act or even make claims against you or third parties, the Firm may keep the personal data that it reasonably deems necessary to process for these purposes, for the time in which this claim can be persecuted.

Sharing content via social networks

This Site also incorporates plugins and / or buttons for the main social networks, such as Facebook, Twitter, LinkedIn, Instagram, in order to allow easy sharing of content on your favorite social networks. These networks are platforms that use their own cookies to recognize users when they browse after connecting to their accounts. The Firm has no agreements with these platforms and is unable to control how they use user data; for more complete information, the Firm refers you to the relevant Privacy Policy:


Cookies are small text strings, similar to a small file, stored on the computer by the website during navigation, useful for saving preferences and improving site performance, to optimise the user’s browsing experience.

There are various types of cookies, depending on their characteristics and functions, and these can remain on the user’s computer for different periods of time: c.d. session cookies, which are automatically deleted when the browser is closed; CD. persistent cookies, which remain on the user’s equipment until a pre-established expiry date.

By law, the user’s express consent is not always required for the use of cookies. In particular, “technical cookies“, ie those used to the extent strictly necessary to provide a service explicitly requested by the user or indispensable for the functioning of the site, do not require this consent.

Technical cookies also include:

  • navigation or session cookies (to authenticate);
  • functionality cookies, which allow the user to browse according to a series of selected criteria (for example, the language, the products selected for purchase) in order to improve the service provided.

For “profiling cookies“, vice versa, ie those aimed at creating profiles relating to the user and used in order to send advertising messages in line with the preferences expressed by the same in the context of surfing the net, prior consent is required ‘user.

The Site uses the following cookies that can be de-selected, except for third-party cookies for which it must refer directly to the relative selection and de-selection methods of the respective cookies:

Type of cookie and owner Technical name of cookies Operation and purpose Persistence time
Google Analytics


Technical Cookie

_ga Used to recognise users 2 years

Technical Cookie

_gid Used to recognise users 24 hours
Google Analytics

Technical Cookie

_gat Used to moderate the request rate. If Google Analytics is done through Google Tag Manager, this cookie will be called _dc_gtm_<property-id>. 1 minute


Profiling Cookie

fr Advertising 3 months

You can block or delete (in whole or in part) technical and functional cookies through the specific functions of your browser. However, we inform you that not allowing technical cookies could make it impossible to use the Site, view its contents and use the related services. Inhibiting functionality cookies could mean that some services or certain functions of the Site are not available or do not work properly and you may be forced to modify or manually enter some information or preferences each time you visit the Site.
For more information on how to set preferences on the use of cookies through the Browser, you can consult the relevant instructions:

The Firm uses the Google Analytics service to find out how many people access the site, how many pages are opened, where the readers come from and what interests them, and other information of this type. This tool is used in anonymised form by clearing the last part of the IP address. The information generated by the Google Analytics cookie on your use of the site, in aggregate form and never linked to your identity, is transmitted to Google and stored on its servers in the United States. Google may transfer this information to third parties in the event that this is required by law or in the case of subjects that process this information on its behalf; for more information, please refer to the Google Analytics privacy policy at the following address:

If you do not want to be tracked, even anonymously, you can download the add-on to disable the sending of navigation data to Google Analytics, which works with the most popular browsers and is distributed free of charge by Google; you can find it at this address:

Although it is not possible to guarantee security from intrusions for the transmission of data that takes place on the internet and websites, the Firm endeavours to ensure physical, electronic and procedural safeguards aimed at protecting your personal data in compliance with the protection requirements. some data. It adopts, among others, measures such as:

  • the strict restriction of access to your personal data, based on need and only for the purposes communicated;
  • the transfer of data collected only in encrypted form;
  • IT firewall systems to prohibit unauthorised access, for example by hackers;
  • permanent monitoring of access to IT systems to identify and stop the abuse of personal data.


The e-mail address and other data that you may have provided through the appropriate form are used to allow you to fulfil the request for sending the newsletter, and related registration in the mailing list, concerning contents on activities, news, offers, events that concern the Firm itself or in a broad sense the area of ​​interest of the legal activity. The Data Controller uses the service offered by MailChimp, registered trademark of The Rocket Science Group, LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, for the provision and management of the newsletter of the Site, and therefore, in case of subscription to the newsletter service, your data may be transmitted and known by this American company providing the service and stored on the cloud database of the aforementioned company.

The data collected is processed through the platform and the IT tools offered by the MailChimp service, as well as through additional IT tools used by the Data Controller for data management and will therefore be transferred abroad; in order to legitimise and guarantee the transfer of said non-EU data, standard contractual clauses have been signed with the company providing the service, which also adheres to the Privacy Shield.

The collected data is stored on MailChimp’s secure servers. In any case, the guarantees provided by the MailChimp privacy policy apply, which you can consult at this address:

The provision of data is optional, but any refusal will make it impossible for the Owner to process the requests for sending the newsletter and its registration in the mailing list. The data are kept until your request for any opposition to the sending and the desire to renounce receiving the newsletter.


The Site may share some of the data collected with services located outside the European Union area, in particular with Google, Twitter and Microsoft (LinkedIn), through social plugins and the Google Analytics service, as well as with MailChimp for the provision of the Website newsletter service. The transfer is authorised on the basis of specific decisions of the European Union and the Guarantor for the protection of personal data, for which no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield.

Your rights

In accordance with the provisions of the GDPR, you have the right to exercise the following rights:

  1. right of access – Obtain confirmation as to whether or not personal data concerning you are being processed and, in this case, receive information relating, in particular, to: purposes of the processing, categories of personal data processed and retention period, recipients to which these can be communicated (article 15, GDPR);
  2. right of rectification – obtain, without undue delay, the correction of inaccurate personal data concerning you and the integration of incomplete personal data (Article 16, GDPR);
  3. right to cancellation – obtain, without undue delay, the cancellation of personal data concerning you, in the cases provided for by the GDPR (article 17, GDPR);
  4. right of limitation – obtain from the Data Controller the limitation of the processing, in the cases provided for by the GDPR (article 18, GDPR);
  5. right to portability – receive, in a format of common use and readable by an automatic device, the personal data concerning you provided to the Data Controller, as well as obtain that the same are transmitted to another Data Controller without impediments, in the cases provided for by the GDPR (Article 20 , GDPR);
  6. right to object – oppose the processing of personal data concerning you, unless there are legitimate reasons for the Data Controller to continue processing (Article 21, GDPR);
  7. right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal;
  8. right to lodge a complaint with the supervisory authority – Propose a complaint to the Guarantor Authority for the protection of personal data, based in Piazza di Montecitorio no. 121, 00186, Rome.

You may at any time exercise your rights as indicated above by sending an e-mail to the address:


This Privacy Policy is effective from 25/05/2018. The Firm reserves the right to modify or update its content, in part or completely, also due to changes in the Applicable Law. The Firm therefore invites you to regularly visit this section of the Site to become aware of the most recent version of the Privacy Policy so that you are always updated on the data collected and their use.