Privacy
Privacy and cookies
How the firm processes the personal data of website visitors and of those who contact it. Notice under Art. 13 of Regulation (EU) 2016/679 (GDPR).
Last updated October 2026.
In short
The essentials in five points. The full text follows.
- Who
- The controller is Avv. Francesco Chiarappa, Studio Legale Chiarappa, Bari.
- Why
- To reply to those who contact the firm and to run the website.
- No profiling
- No profiling or analytics. Google Ads measurement only on the guide and contact pages, and only with your consent.
- Where
- Hosting and email with Aruba S.p.A. Google, if you consent to measurement, may transfer data to the United States under the Data Privacy Framework.
- Rights
- Exercised by writing to info@studiolegalechiarappa.it. A complaint may be lodged with the Garante.
Data controller
Who decides why and how data are processed, and whom to contact for any request.
Controller
Avv. Francesco Chiarappa, Studio Legale Chiarappa, Viale Salandra 31, 70124 Bari, Italy. VAT no. 09081141005.
Contact
info@studiolegalechiarappa.it
Certified email (PEC) chiarappa.francesco@avvocatibari.legalmail.it
Data, purposes and legal bases
The firm processes only the data needed to reply to those who contact it and to run the website.
Requests by form, email or phone
Name, contact details, company if any and the content of the request, used to reply and arrange a first meeting. Legal basis: pre-contractual measures taken at the request of the data subject, Art. 6(1)(b) of Regulation (EU) 2016/679 (GDPR). Providing data is optional, but without the requested data the firm cannot reply. Requests sent through the form reach the firm's mailbox by email and are not stored on the website.
Browsing data
Technical data such as IP address, browser type and time of access, processed by the server for the operation and security of the website. Legal basis: legitimate interest of the controller, Art. 6(1)(f) GDPR.
Interactive guides and tools
Answers given in the guides' self-tests and in the assessment tools are processed only by the user's browser. They are neither sent to the firm nor stored on the website, and are lost when the page is closed or reloaded. Printing and saving as PDF also take place through the browser's own functions. The guides ask for no personal data: anyone wishing to go further writes to the firm, and the rules on requests apply.
Newsletter
Those who subscribe to the weekly news by email provide their address, used only for the weekly mailing, with double opt-in and no tracking tools. Legal basis: consent, Art. 6(1)(a) GDPR and Art. 130 of Legislative Decree 196/2003. A specific notice, in Italian, applies.
Google Ads measurement
Only on the property-buying guide pages and on the contact page, and only if you consent, a Google code records whether, after clicking one of the firm's ads, you tap the buttons to call or write, or send the request form. It tells the firm which ads work. The firm does not use these data to profile you and has switched off ad personalisation; Google receives them as an independent controller and uses them as described on its page “How Google uses information from sites or apps that use our services”. Legal basis: consent, Art. 6(1)(a) GDPR and Art. 122 of Legislative Decree 196/2003.
Consent log
A random identifier, the choice made, date and page, without IP address. It serves to demonstrate consent, as required by Art. 7(1) GDPR. Legal basis: legal obligation, Art. 6(1)(c) GDPR.
Google as independent controller
For the data it receives through ad measurement, Google acts as an independent controller, not on behalf of the firm.
Who Google is
For users in the European Union, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Its role as independent controller follows from the Google Ads Controller-Controller Data Protection Terms.
How Google uses the data
See the Google privacy policy.
Transfers outside the European Union
Data may be transferred to Google LLC in the United States. Google LLC participates in the EU-U.S. Data Privacy Framework, found adequate by Commission Implementing Decision (EU) 2023/1795.
Retention and recipients
How long data are kept and who may process them on behalf of the firm.
Retention
Requests that do not lead to an engagement: up to 12 months from receipt, then deleted. If an engagement follows, for the duration of the professional relationship and for the subsequent periods required by law. Browsing data: for the period set by the hosting provider for security purposes, then deleted. Consent log: 24 months from the choice, then deleted automatically. Cookies: for the periods shown in the table.
Recipients
Aruba S.p.A., which provides the website hosting and the firm's email, and any other IT service providers, acting as processors under Art. 28 GDPR. Google, within the limits described above. Data are not disclosed to the public.
Transfers outside the European Economic Area
The firm itself does not transfer data outside the European Economic Area; for Google, see above. Should a provider process data outside the European Economic Area in the future, the transfer will take place only on the basis of a European Commission adequacy decision or standard contractual clauses, Arts. 45 and 46 GDPR, and this notice will be updated.
Data subject rights
They may be exercised at any time by writing to the firm, without formalities.
Which rights
Access, rectification, erasure, restriction and portability of data, under Arts. 15–20 GDPR.
Withdrawing consent
You may withdraw consent to cookies at any time from the “Cookie settings” link at the bottom of the pages concerned, without affecting the lawfulness of processing already carried out, Art. 7(3) GDPR.
Right to object
Where processing is based on legitimate interest, such as browsing data, the data subject may object at any time on grounds relating to his or her particular situation, under Art. 21 GDPR.
Automated decisions
The firm takes no decisions based solely on automated processing, including profiling.
Complaint
You may lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali, under Art. 77 GDPR.
Cookies
Consent is requested through a banner on the first visit to the pages concerned. Closing the banner means refusing non-essential cookies.
Technical cookies
All pages of the website use only technical cookies, needed for operation and security, which do not require consent. Fonts and images are served by the website's own server.
Guide and contact pages in English
The property-buying guide pages and the contact page use Google Ads cookies only with your consent. No other page in English uses them.
Links to external websites
The guides and tools link to the official texts published on EUR-Lex and Normattiva. Links open only on click, and the firm's pages load no content from those websites. The privacy notices of their operators apply on external websites.
Pages for businesses
The pages at studiolegalechiarappa.it/imprese/, linked to the firm's Google ads, use measurement tools only with the visitor's consent. A specific notice, in Italian, applies to those pages.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| sc_cc | The firm | Remembers your cookie choice. Technical, no consent needed. | 6 months |
| _gcl_au and others with prefix _gcl_ | Count calls, emails and requests coming from the ads. Only with consent. | 90 days | |
| Google cookies on its own domains (e.g. IDE) | Used by Google for conversion measurement. Only with consent. | IDE: 13 months in the European Economic Area; others: as set by Google |
Durations as stated by Google on its page “How Google uses cookies”.