Privacy policy
This is a translation of the Italian text. In case of discrepancy, the Italian version prevails.
This notice explains how the office processes the personal data of website visitors, of people who contact it and of clients, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.
1. Data controller
Avv. Sandra Racchi, Studio Legale Racchi, Via Amilcare Ponchielli, 3, 34122 Trieste (TS). Email: sandra.racchi@gmail.com. Phone: +39 347 751 1247.
2. What data we process
Browsing data. Solely for the operation of the website, the servers record technical data such as IP address, date and time of the request, browser type and pages visited. They are not used to identify the user.
Data provided voluntarily. Name, phone number, email and message content sent through the contact form, by email, by phone or via WhatsApp.
Data relating to an engagement. If you instruct the office, it processes the data needed to carry out the engagement, which may include special categories of data (for example relating to health or family life) and judicial data, only to the extent strictly necessary.
3. Purposes and legal bases
- Replying to contact requests and arranging an appointment: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
- Carrying out the professional engagement of legal advice and assistance: performance of the contract (Art. 6(1)(b) GDPR); for special categories of data, the establishment, exercise or defence of legal claims (Art. 9(2)(f) GDPR); for judicial data, Art. 10 GDPR and Art. 2-octies of Legislative Decree 196/2003.
- Complying with legal, tax, accounting and professional obligations: Art. 6(1)(c) GDPR.
- Ensuring the security of the website: legitimate interest of the controller (Art. 6(1)(f) GDPR).
- Displaying third-party content, such as the Google Maps map: consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time.
4. Whether providing data is mandatory
Providing data is optional, but without contact details we cannot reply to your request, and without the data needed for an engagement we cannot carry it out.
5. How data is processed and professional secrecy
Data is processed on paper and electronically, with security measures suitable to prevent loss, unlawful use and unauthorised access. All information received from clients is also covered by the lawyer's professional secrecy.
6. How long we keep data
- Contact requests that do not lead to an engagement: the time needed to reply and in any case no longer than twelve months.
- Data relating to an engagement: ten years from its conclusion, unless the law provides for different periods or the data is needed for legal defence.
- Browsing data: for the technical period set by the hosting provider, unless needed to investigate computer crimes.
7. Who data may be disclosed to
Data is not disseminated or sold for commercial purposes. It may be disclosed, only where necessary, to hosting and email providers; to professionals who assist with the engagement, such as technical experts, local correspondent lawyers and the accountant; to courts, opposing parties and their lawyers within the limits of the mandate; to authorities, where required by law. Providers that process data on behalf of the office are appointed as data processors.
8. Transfers outside the European Union
Some service providers, such as the email service, WhatsApp and Google Maps, may also process data outside the European Union. In such cases the transfer is based on the safeguards provided by the GDPR, such as adequacy decisions of the European Commission or standard contractual clauses.
9. Your rights
You may at any time exercise the rights under Articles 15 to 22 GDPR: access, rectification, erasure, restriction of processing, portability, objection and withdrawal of consent, without affecting the lawfulness of processing carried out before withdrawal. To exercise them, write to sandra.racchi@gmail.com. Some rights may be limited when processing is necessary for the defence of a legal claim or to comply with legal obligations.
10. Complaints
If you believe the processing breaches the law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it, or with the supervisory authority of your country of residence.
11. Cookies
Information on cookies is available in the cookie policy. You can change your choices at any time with the button.
12. Changes
This notice may be updated. The version in force is always published on this page.
Last updated: 10/10/2026