PRIVACY POLICY

WHY THIS NOTICE

This page describes how law firm PedersoliGattai processes the personal data of users visiting its website.

This information note is provided pursuant to articles 13 and 14 of the EU General Data Protection Regulation 2016/679 (hereinafter “GDPR”) to those who interact with the web services of PedersoliGattai, through electronic access to the address: https://pglex.it/, corresponding to the home page of the web site of PedersoliGattai.

This information note applies only to the web site “https://pglex.it/” and does not apply to other web sites possibly reached by users through the link.

 

THE DATA CONTROLLER

While visiting this site, data concerning identified or identifiable individuals can be processed.

The Data Controller is PedersoliGattai, Via Principe Amedeo 5, 20121 Milan, Italy (email: info.milano@pglex.it; Telephone: +39 02.303051; FC and VAT 13183470965), in person of its legal representative.

 

DATA PROTECTION OFFICER (DPO)

The DPO appoited by the Data Controller can be reached at pedersoligattai.dpo@avvera.it.

 

PLACE AND METHODS OF PROCESSING

Personal data are processed by personnel of PedersoliGattai who are duly authorized and act under the direct authority of the Data Controller.

 

In certain cases, external parties may have access to the data (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) acting on behalf of or in the name of Studio Legale PedersoliGattai. Such parties are duly appointed as data processors pursuant to Article 28 of the GDPR by the Data Controller. An updated list of data processors may be requested from the Data Controller at any time.

Personal data are processed through automated systems for the time that is strictly necessary to attain the purpose for which they were collected.

Specific security measures are adopted to prevent data loss, illegal or improper use and unauthorized access.

 

TYPE OF DATA PROCESSED

Web browsing data

The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. Such information is not collected in order to be associated with identified data subjects; however, by its very nature, it could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful outcome, error, etc.), and other parameters relating to the user’s operating system and IT environment. These data are used solely for the purpose of obtaining anonymous statistical information on the use of the website and to verify its correct functioning. The data may also be used to establish liability in the event of potential cyber offences committed against the website.

Data provided by the user voluntarily

The optional, express and voluntary sending of e-mail messages to the addresses contained in this site implies the subsequent acquisition of the sender’s address, required to reply to any request, as well as of other personal data contained in the message. Specific concise information documents will be indicated or displayed on the pages of the site dedicated to special services on request, if implemented. The user assumes responsibility for the personal data of third parties published or shared through this site and declares that he/she has the right to communicate or broadcast them, thus relieving the Data Controller of all responsibilities towards third parties. Users who intend to send to PedersoliGattai, through this site and/or by e-mail to the addresses displayed on this web site, their curriculum vitae, are invited to pay due attention to the contents of this document concerning the processing of the data contained in the curricula so transmitted, and not to include in such curricula any data that may be classified either as sensitive data (i.e. personal data revealing their racial or ethnic origin, religious and philosophical beliefs, political opinions, membership of political parties, unions, associations and organizations of religious, philosophical, political or trade union character, or personal data revealing their health state and sexual life) pursuant to article 9 of GDPR or as judicial data as per article 10 of GDPR.

 

PURPOSE OF DATA PROCESSING

Users’ personal data are collected to allow PedersoliGattai to provide its services, as well as for the purposes indicated below and using the following services:

• Contacting the user “Work with us” contract form The user, by filling out the “Careers” contract form with his/her personal data, agrees to the use of same to reply to the user’s requests for information, quotations, or of any other nature as indicated in the form.
  Personal data collected: last name, date of birth, e-mail address, first name and other various types of data.
• Interaction with social networks and external platforms: this kind of service allows interaction with social networks, or with other external platforms, directly from the pages of this site.
  The interactions and information acquired by this site are subject to the user’s privacy settings related to each social network. In case an interaction service with the social networks is installed, such service could collect traffic data related to the pages on which it is installed, even if the user does not use the service.
  • Button and social widgets of Linkedin (LinkedIn Corporation)
    The button and social widgets of Linkedin are interaction services with the Linkedin social network, provided by LinkedIn Corporation. Personal data collected: cookies and surfing data. Processing place: USA – Privacy Policy
• Statistics
  The services contained in this section permit the Data Controller to monitor and analyze the traffic data and are used to track the user’s behaviour.
  • Google Analytics (Google Inc.) Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the personal data collected to track and analyze the use of this site, to compile reports and share them with the other services developed by Google. Google might use your personal data to contextualize and customize the advertisements of its advertising network. The data provided to Google Analytics shall use the “IP anonymization” function provided by Google, so as to ensure anonymous surfing and prevent the tracing back of a specific user through his/her surfing activity.
    Personal data collected: cookies and surfing data.
    Processing place: USA – Privacy Policy– Opt Out

 

OPTIONAL DISCLOSURE OF DATA

Apart from what was specified for surfing data, the user is free to disclose the personal data indicated in the application forms of PedersoliGattai.

Failure to provide them may imply the impossibility to obtain the requested information.
For the reason of completeness, it is important to mention that in some cases (not within the ordinary management of this site) the Authorities may request information pursuant to article 58 of the GDPR, for the purpose of monitoring the processing of personal data. In such event, the reply to such request is obligatory; failure to do so shall result in an administrative sanction.

 

METHODS OF PROCESSING AND RETENTION PERIODS

Personal data are processed, including through the use of automated tools, for the period strictly necessary to achieve the purposes for which they were collected.

Specific security measures are implemented to prevent data loss, unlawful or improper use, and unauthorized access. The Data Controller has adopted all appropriate security measures to minimize risks relating to the confidentiality, availability, and integrity of the personal data collected and processed.

 

USERS’ RIGHTS

Pursuant to article 15 of GDPR, the individuals whom the personal data refer to are always entitled to get confirmation of undergoing data processing of their personal data and to access to the same, also through a copy provided by the Data Controller.

Furthermore, the interested individuals are entitled to access information concerning:

• the origin of personal data;
• the purposes and modalities of the data proceeding;
• the recipients or categories of recipients to whom the personal data has been or will be disclosed;
• where possible, the envisaged period during which the personal data will be stored, or, if not possible, the criteria used to determine the period;
• to the logic applied in case of electronic data processing;
• to the identification details of the Data Controller, of the processors and, if present, of the representative appointed according to article 27 of the GDPR.

According to articles 16, 17, 18, 20 and 21 of the GDPR, individuals are also entitled:

1. to obtain the updating, the correction and, in the presence of specific interests, the integration of their data;
2. to obtain the cancellation, the conversion into an anonymous form or the blocking of data processed in breach of the law, including those data whose storage is not necessary in relation to the scope of the processing, or of personal data processed under consent, in case of withdrawal of the same;
3. to obtain the certification that the operations referred to under points a) and b) have been brought to the attention, also with regards to their content, of those persons to whom the data were communicated of widespread, except where it is impossible or manifestly disproportionate in relation to the protected right;
4. to obtain the limitation of processing;
5. to obtain the portability of data;
6. to oppose, for reasons connected with their particular situation, to the processing of personal data pursuant to article 6, paragraph 1, letters e) or f) of the GDPR;
7. to oppose the processing of personal data for the purposes of direct marketing.

Should data subjects consider that the processing of their personal data is carried out in breach of Regulation (EU) 2016/679, they also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), in accordance with the procedures and requirements established by law.

All requests should be sent to PedersoliGattai, under the reference “User’s Privacy”:

– by e-mail, at the address: info.milano@pglex.it;

– or by post: Via Principe Amedeo 5, 20121 Milano.

To exercise the rights mentioned above, as well as to receive further information regarding the processing of your personal data, please contact the DPO at pedersoligattai.dpo@avvera.it.

 

UPDATES OF THE PRIVACY POLICY

Please note that this document, published at the address https://pglex.it/en/privacy-policy/ constitutes the “Privacy Policy” of this site and is subject to updating. The Data Controller reserves the right to modify this Privacy Policy at any time by giving communication to the users on this page. You are therefore kindly invited to consult this page having reference to the date of last modification at the page bottom. In case of non-acceptance of this Privacy Policy as amended, the user shall immediately cease the use of this site and is entitled to obtain from the Data Controller the removal of his/her personal data. Unless otherwise specified, the previous “Privacy Policy” shall continue to apply to personal data collected until that moment.

Milan, 4 December 2025