Privacy Policy

de Tilla Studio Legale (hereinafter also “the Firm“), C.F. and VAT number 10153770960, based in Milan (MI), at via Fatebenefratelli 15, 20121, as Data Controller of the personal data you voluntarily disclosed pursuant to EU Regulation 679/2016 – General Data Protection Regulation (GDPR), hereinafter also just “GDPR”, recognises the importance of the protection of personal data and considers their protection one of the main objectives of its business.

This privacy policy has the purpose of informing users of the website in a clear and exhaustive manner about the processing of their personal data and the use of tools for collecting the same.

Holder of the treatment

The Data Controller of the Site is de Tilla Studio Legale, as defined above. The treatments connected to the web services of the Site take place at the Aruba SpA datacenter, with registered office in Ponte San Pietro (BG, Via San Clemente, 53, as well as at the headquarters of the Data Controller and on the devices of the same. For any information concerning the processing of the firm’s personal data, including the list of Managers who process data, please write to the e-mail address:

Personal data being processed

The data collected through the various contact channels are:

  • Contact details – information regarding name, address, telephone number, e-mail address.
  • Other personal data – information that you voluntarily provide to us regarding, for example, your date of birth, education or professional situation.
  • Use of the Site and Communications – information relating to how they use the site, open or forward communications from the Firm, including information collected through cookies and other tracking technologies.

The Firm processes your personal data if you contact us directly, via our website or by e-mail, to request information about our services, or if you subscribe to our newsletter. If you provide personal data on behalf of someone else, it is your responsibility to make sure, before doing so, that the interested party has read this Privacy Notice. If you are under the age of 16, please do not provide us with any personal data.

Purpose of the processing

Your personal data will be processed for the following purposes:

Periodic sending of newsletters – the Firm collects your contact data in order to send periodic communications by e-mail with informative content on activities, news, offers, events concerning the Firm itself or in a broad sense the area of ​​interest of the legal activity. The prerequisite for processing is the fulfillment of a contractual obligation, and you can choose to unsubscribe at any time.

Fulfillment of your request – to follow up on your requests for information, quotes, clarifications, request for contact or participation in events open to the public. The prerequisite for the processing is the execution of pre-contractual measures.

Compliance with legally binding requests for your personal data and legal protection of your right – to comply with legal obligations, regulations or provisions of the judicial authority, as well as to defend a right in court; the prerequisite is the fulfillment of obligations established by law or by an order of the Authority, as well as the legitimate interest of the Firm.

Statistical research / analysis – to measure site operation, traffic, usability and browsing experience; in this case no personal data are collected except in anonymous form that cannot be traced back to a natural person.

Data retention

The Firm keeps your personal data only for the time necessary to achieve the purposes for which it was collected or for any other legitimate related purpose.

Fulfillment of contractual obligations: the data processed to fulfill any contractual obligation with you may be kept for the entire duration of the contract as well as for 10 years after the end of the fiscal year following that of competence, to address any assessment and / or dispute of a fiscal nature.

In the event of disputes: in the event that it is necessary to defend oneself or act or even make claims against you or third parties, the Firm may keep the personal data that it reasonably deems necessary to process for these purposes, for the time in which this claim can be persecuted.

Sharing content via social networks

This Site also incorporates plugins and / or buttons for the main social networks, such as Facebook, Twitter, LinkedIn, Instagram, in order to allow easy sharing of content on your favorite social networks. These networks are platforms that use their own cookies to recognize users when they browse after connecting to their accounts. The Firm has no agreements with these platforms and is unable to control how they use user data; for more complete information, the Firm refers you to the relevant Privacy Policy:


The e-mail address and other data that you may have provided through the appropriate form are used to allow you to fulfil the request for sending the newsletter, and related registration in the mailing list, concerning contents on activities, news, offers, events that concern the Firm itself or in a broad sense the area of ​​interest of the legal activity. The Data Controller uses the service offered by MailChimp, registered trademark of The Rocket Science Group, LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, for the provision and management of the newsletter of the Site, and therefore, in case of subscription to the newsletter service, your data may be transmitted and known by this American company providing the service and stored on the cloud database of the aforementioned company.

The data collected is processed through the platform and the IT tools offered by the MailChimp service, as well as through additional IT tools used by the Data Controller for data management and will therefore be transferred abroad; in order to legitimise and guarantee the transfer of said non-EU data, standard contractual clauses have been signed with the company providing the service, which also adheres to the Privacy Shield.

The collected data is stored on MailChimp’s secure servers. In any case, the guarantees provided by the MailChimp privacy policy apply, which you can consult at this address:

The provision of data is optional, but any refusal will make it impossible for the Owner to process the requests for sending the newsletter and its registration in the mailing list. The data are kept until your request for any opposition to the sending and the desire to renounce receiving the newsletter.


The Site may share some of the data collected with services located outside the European Union area, in particular with Google, Twitter and Microsoft (LinkedIn), through social plugins and the Google Analytics service, as well as with MailChimp for the provision of the Website newsletter service. The transfer is authorised on the basis of specific decisions of the European Union and the Guarantor for the protection of personal data, for which no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield.

Your rights

In accordance with the provisions of the GDPR, you have the right to exercise the following rights:

  1. right of access – Obtain confirmation as to whether or not personal data concerning you are being processed and, in this case, receive information relating, in particular, to: purposes of the processing, categories of personal data processed and retention period, recipients to which these can be communicated (article 15, GDPR);
  2. right of rectification – obtain, without undue delay, the correction of inaccurate personal data concerning you and the integration of incomplete personal data (Article 16, GDPR);
  3. right to cancellation – obtain, without undue delay, the cancellation of personal data concerning you, in the cases provided for by the GDPR (article 17, GDPR);
  4. right of limitation – obtain from the Data Controller the limitation of the processing, in the cases provided for by the GDPR (article 18, GDPR);
  5. right to portability – receive, in a format of common use and readable by an automatic device, the personal data concerning you provided to the Data Controller, as well as obtain that the same are transmitted to another Data Controller without impediments, in the cases provided for by the GDPR (Article 20 , GDPR);
  6. right to object – oppose the processing of personal data concerning you, unless there are legitimate reasons for the Data Controller to continue processing (Article 21, GDPR);
  7. right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal;
  8. right to lodge a complaint with the supervisory authority – Propose a complaint to the Guarantor Authority for the protection of personal data, based in Piazza di Montecitorio no. 121, 00186, Rome.

You may at any time exercise your rights as indicated above by sending an e-mail to the address:


This Privacy Policy is effective from 25/05/2018. The Firm reserves the right to modify or update its content, in part or completely, also due to changes in the Applicable Law. The Firm therefore invites you to regularly visit this section of the Site to become aware of the most recent version of the Privacy Policy so that you are always updated on the data collected and their use.