1. Data controller
The data controller is AIR-LEX — Avvocati di Impresa Riuniti, with offices in Roma, Viale Bruno Buozzi 19 (00197) e Brescia, Via Settembrini 8 (25128).
To exercise your rights or request information: info@air-lex.it — tel. +39 06 56546814.
2. Data Protection Officer (DPO)
The firm is not subject to the obligation to appoint a Data Protection Officer under Article 37 GDPR, as it does not carry out large-scale processing nor systematic monitoring of data subjects: as of the last update of this notice, no DPO has therefore been designated.
Any request concerning data protection is handled directly by the Controller, which has appointed an internal privacy contact reachable at info@air-lex.it. Should a DPO be designated in the future, the relevant contact details will be published in this section.
3. Data processed
Through the contact form we collect: first and last name, email address, telephone number (optional), subject and content of the request, preferred office location. The website also records technical browsing data necessary for the operation and security of the pages.
Please refrain from entering special categories of data (Article 9 GDPR) or judicial data in the form: any confidential information may be shared later during the initial meeting.
4. Purposes and legal bases of each processing activity
Each processing activity is based on a specific legal basis, indicated below together with the related retention period.
| Processing activity | Legal basis | Retention |
|---|---|---|
| Responding to requests submitted through the contact form | Data subject’s consent — Art. 6(1)(a) GDPR (revocable) | Max. 24 months from last contact |
| Assessment and conferral of the professional engagement | Pre-contractual measures and performance of the contract — Art. 6(1)(b) GDPR | Duration of the professional relationship |
| Professional ethics, anti-money laundering, tax and accounting obligations | Legal obligation — Art. 6(1)(c) GDPR | 10 years (statutory record-keeping terms) |
| Protection of the firm’s rights in the event of disputes | Legitimate interest — Art. 6(1)(f) GDPR | Until expiry of the applicable limitation periods |
| Security, integrity and proper functioning of the website (technical logs, anti-spam) | Legitimate interest — Art. 6(1)(f) GDPR | Max. 12 months |
| Any special categories of data or judicial data necessary for defence purposes | Establishment, exercise or defence of legal claims — Arts. 9(2)(f) and 10 GDPR | Duration of the engagement and subsequent statutory terms |
5. Nature of the provision of data
Providing the data marked as mandatory and granting consent are necessary to submit the request: without them it is not possible to proceed with the contact. Consent may be withdrawn at any time, without prejudice to the lawfulness of processing carried out before withdrawal.
6. Recipients
Data is processed by authorised lawyers and staff of the firm and may be disclosed to technical service providers (hosting, cloud infrastructure, email) appointed as data processors pursuant to Article 28 GDPR, as well as to authorities and supervisory bodies in the cases provided by law. Data is not disseminated nor used for automated profiling purposes.
7. Transfers outside the EU
Data is hosted on infrastructure located within the European Economic Area. Should a provider involve a transfer to third countries, this takes place on the basis of an adequacy decision or standard contractual clauses approved by the European Commission, together with appropriate supplementary measures.
8. Retention
Contact requests that do not lead to an engagement are retained for a maximum of 24 months. Where an engagement is conferred, data is retained for the duration of the relationship and thereafter for the applicable limitation periods and statutory record-keeping obligations (typically 10 years).
9. Data subject’s rights
The data subject may exercise at any time the rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent (Articles 15-22 GDPR) by writing to info@air-lex.it or calling +39 06 56546814. It is also possible to lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it).
10. Cookies
The website uses necessary technical cookies (legal basis: legitimate interest, Art. 6(1)(f) GDPR and Art. 122 of Legislative Decree 196/2003) and, only upon express consent given through the banner (Art. 6(1)(a) GDPR), statistical analytics and marketing cookies, retained for a maximum of 12 months. Preferences are recorded to demonstrate consent (Articles 6(1)(c) and 7(1) GDPR) and remain revocable at any time via the “Cookie preferences” link in the footer.
The itemised list of cookies, with provider, duration and purpose, is set out in the Cookie Policy, aligned with the legal bases and retention periods of this notice.
Last updated: August 2026.