Effective date: 1 May 2026 · Last updated: 1 May 2026
This Privacy Policy describes how Studio Legale Scatena ("we", "us", "our", "Firm"), with registered office at Via Rodolfo Berretta 156, 56023 Cascina (PI), Italy, VAT IT02547600508, processes personal data of individuals who interact with our websites and services. The Firm is a sole-practitioner law firm headed by Avv. Stab. Dario Scatena (Italian Bar — Foro di Massa, Albo n. 2025000015).
1. Data Controller
The data controller is Avv. Stab. Dario Scatena, contactable at:
Postal: Via Rodolfo Berretta 156, 56023 Cascina (PI), Italy
Phone: +39 050 990 0082
2. Categories of Personal Data Processed
A) Data you provide voluntarily
Contact information — name, email, phone, country of residence, when you submit a strategy session form or contact us by email
Case description — the situation you describe in the form (e.g., property purchase, citizenship, residence visa, business expansion)
Payment information — handled directly by Stripe (we do not store card numbers)
B) Data collected automatically
Analytics — Google Analytics 4 (G-YEM5TFEGCF): IP address (anonymized), pages visited, time on page, device type
Advertising — Google Ads remarketing tag (AW-18059852496) and LinkedIn Insight Tag (partner ID 10012713) for conversion measurement
Cookies — strictly necessary cookies (session, security) and analytical cookies (with your consent)
3. Purposes and Legal Basis (GDPR Art. 6)
Respond to your inquiry — Art. 6(1)(b): performance of pre-contractual measures at your request
Pre-engagement KYC/AML screening — Art. 6(1)(c): legal obligation under Italian D.Lgs. 231/2007 and EU AMLD
Analytics and service improvement — Art. 6(1)(f): legitimate interest
Marketing and remarketing — Art. 6(1)(a): your explicit consent (you can withdraw at any time)
Compliance with professional obligations — Art. 6(1)(c): Italian Bar disciplinary code (CDF) and Law 247/2012
4. Data Retention
Inquiry forms (no engagement): 24 months from last contact, then deletion
Engaged matters: 10 years from matter closure (Italian limitation periods + Italian Bar professional obligations)
Analytics data: 14 months (GA4 default retention)
Marketing/remarketing data: until consent withdrawal, max 13 months
5. Data Recipients
Personal data may be shared with:
Google Ireland Limited (Workspace, Analytics, Ads) — adequacy decision EU-US Data Privacy Framework
Stripe Payments Europe Ltd. (payment processing) — Ireland
Netlify Inc. (website hosting) — USA, EU-US Data Privacy Framework certified
Substack Inc. (newsletter, only if you subscribe) — USA, Standard Contractual Clauses
LinkedIn Ireland Unlimited Company (Insight Tag) — Ireland
Italian judicial authorities, public administration, opposing counsel — only when strictly necessary for legal representation and only with your explicit instruction
US/UK/Canadian co-counsel — only when you engage us for cross-border matters and only with your explicit written instruction
6. International Transfers
Where personal data is transferred outside the European Economic Area (e.g., to USA-based providers), we rely on EU-US Data Privacy Framework adequacy decision (where applicable) or Standard Contractual Clauses (SCC) approved by the European Commission.
7. Your Rights (GDPR Arts. 15-22)
You have the right to:
Access your personal data (Art. 15)
Rectification of inaccurate data (Art. 16)
Erasure ("right to be forgotten") subject to professional retention obligations (Art. 17)
Restriction of processing (Art. 18)
Data portability (Art. 20)
Object to processing based on legitimate interest or for direct marketing (Art. 21)
Withdraw consent at any time (Art. 7(3)) without affecting prior lawful processing
Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it)
We implement technical and organizational measures appropriate to the risk, including: encrypted email (TLS), HTTPS-only websites (Let's Encrypt SSL), access controls, periodic backups, incident response procedures, and Italian Bar professional secrecy obligations (Law 247/2012, Art. 6).
9. Cookies
This website uses:
Strictly necessary cookies — session and security (no consent required)
Analytics cookies — Google Analytics 4 (anonymized IP) — consent-based
Marketing cookies — Google Ads, LinkedIn Insight Tag — consent-based
You can manage your cookie preferences through your browser settings.
10. Changes to This Policy
We may update this Privacy Policy. The "Last updated" date at the top reflects the most recent revision. Material changes will be notified via the website homepage banner.
Data efficacia: 1 maggio 2026 · Ultimo aggiornamento: 1 maggio 2026
La presente Informativa descrive come lo Studio Legale Scatena ("noi", "Studio"), con sede legale in Via Rodolfo Berretta 156, 56023 Cascina (PI), P.IVA IT02547600508, tratta i dati personali degli utenti che interagiscono con i nostri siti web e servizi. Lo Studio è un'attività professionale individuale gestita da Avv. Stab. Dario Scatena (Foro di Massa, Albo n. 2025000015).
1. Titolare del Trattamento
Titolare del trattamento è Avv. Stab. Dario Scatena:
Analisi e miglioramento servizi — Art. 6(1)(f): legittimo interesse
Marketing e remarketing — Art. 6(1)(a): consenso esplicito (revocabile)
Obblighi deontologici — Art. 6(1)(c): Codice Deontologico Forense (CDF) e L. 247/2012
4. Conservazione dei Dati
Form di contatto (senza incarico): 24 mesi dall'ultimo contatto
Pratiche con incarico: 10 anni dalla chiusura (termini prescrizionali + obblighi deontologici)
Dati analytics: 14 mesi (default GA4)
Marketing/remarketing: fino a revoca consenso, max 13 mesi
5. Destinatari dei Dati
I dati possono essere comunicati a:
Google Ireland Limited (Workspace, Analytics, Ads) — EU-US Data Privacy Framework
Stripe Payments Europe Ltd. (pagamenti) — Irlanda
Netlify Inc. (hosting) — USA, EU-US Data Privacy Framework
Substack Inc. (newsletter, solo se iscritto) — USA, Clausole Contrattuali Standard
LinkedIn Ireland Unlimited Company (Insight Tag) — Irlanda
Autorità giudiziarie, pubblica amministrazione, controparti — solo se strettamente necessario per la tutela legale e su tua istruzione esplicita
Co-counsel USA/UK/Canada — solo per pratiche cross-border su tua istruzione scritta
6. Trasferimenti Internazionali
Per i trasferimenti extra-SEE (es. fornitori USA), ci basiamo su EU-US Data Privacy Framework (ove applicabile) o Clausole Contrattuali Standard (SCC) approvate dalla Commissione Europea.
7. I Tuoi Diritti (Artt. 15-22 GDPR)
Hai diritto a:
Accesso ai tuoi dati (Art. 15)
Rettifica dei dati inesatti (Art. 16)
Cancellazione ("oblio") subordinata agli obblighi di conservazione professionali (Art. 17)
Limitazione del trattamento (Art. 18)
Portabilità dei dati (Art. 20)
Opposizione al trattamento per legittimo interesse o marketing diretto (Art. 21)
Revoca del consenso in qualsiasi momento (Art. 7(3))
Adottiamo misure tecniche e organizzative adeguate al rischio: email cifrata (TLS), siti HTTPS-only (SSL Let's Encrypt), controllo accessi, backup periodici, procedure di incident response e obbligo di segreto professionale (L. 247/2012 art. 6).
9. Cookie
Il sito utilizza:
Cookie strettamente necessari — sessione e sicurezza (no consenso richiesto)
Cookie analitici — Google Analytics 4 (IP anonimizzato) — basati su consenso
Cookie di marketing — Google Ads, LinkedIn Insight Tag — basati su consenso
Puoi gestire le preferenze tramite il tuo browser.
10. Modifiche all'Informativa
Possiamo aggiornare questa Informativa. La data "Ultimo aggiornamento" in alto riflette la revisione più recente. Le modifiche sostanziali saranno notificate tramite banner sulla homepage.