Data controller and data protection contact
The data controller is Riccardo Lenzetti, whose office is at Piazza Aranci 31, 54100 Massa, Italy. You can contact him on 0585 40754 or at avvlenzetti@studiolegalelenzetti.it, including to exercise your rights concerning your personal data.
Browsing and available services
This website presents the Studio’s work and provides information. It has no active form for submitting enquiries or documents. To make the pages available, the hosting systems receive technical data transmitted by your browser, such as your IP address and the information needed to handle the request.
The operation and security of the website require the processing of technical data. For processing carried out by the Studio to protect the website’s security, the legal basis is the controller’s legitimate interest under Article 6(1)(f) of Regulation (EU) 2016/679, with due regard for data subjects’ rights. The following sections describe the hosting service’s technical logs and statistics.
Hosting technical logs
The website uses Aruba’s Hosting Easy Linux service. In its response of 23 September 2026, the provider stated that the service generates technical HTTP access and error logs containing, for example, IP addresses, dates and times, requested resources and technical information about the connection. These logs are used for technical, security, diagnostic and service management purposes.
According to Aruba’s response, HTTP and error logs are retained for no more than 6 months, with deletion or rotation in accordance with the provider’s ordinary technical procedures. Logs necessary for the operation and security of the service cannot be disabled by the customer.
The six-month limit applies only to these logs. It does not apply to messages, documents, backups or other categories of data. Preliminary enquiries are subject to the retention criterion set out in the relevant section below.
Hosting service statistics
The Hosting Easy Linux plan associated with this website includes Aruba’s Statistics service. For the data used for statistics, Aruba’s response of 23 September 2026 stated that data is retained in memory for a maximum of one year, and that the last digit of the IP address is set to “1”. This describes only the partial modification of the IP address reported by the provider. It does not establish complete anonymisation or an exemption from consent.
The retention period for statistical data is separate from that for HTTP and error logs. The absence of active forms and of data collection by the assistant does not mean that the server has no logs or statistics. For information or requests concerning your data, you can contact the controller using the details above.
Direct contact
If you choose to telephone or email the Studio, the contact details and essential information you provide are used to reply and assess the subject of your enquiry. If you request preliminary steps towards a possible engagement on your own behalf, the legal basis is Article 6(1)(b) of the Regulation. For contact with representatives of organisations or other professional contacts, correspondence is handled on the basis of the legitimate interest in dealing with the enquiry under Article 6(1)(f), taking account of its nature and the rights of the people involved.
Contacting the Studio is optional. Without usable contact details and an essential description, it may not be possible to reply. Do not send documents, health data, information relating to judicial matters or confidential details before receiving the Studio’s instructions and completion of the preliminary conflict-of-interest check. An enquiry does not mean that an engagement has been accepted or that responsibility has been assumed for any time limits or deadlines.
Providers and recipients
The Studio’s website and email use Aruba services. Hosting and email delivery require technical processing of data by the provider. Aruba states that its hosting and email services are operated in Italian data centres.
For data processed on the Studio’s behalf in providing hosting, Aruba S.p.A. acts as a processor under Article 28 GDPR, within the scope of the appointment provided for in the Terms and Conditions for the Supply of Hosting and Domain Services. This role is distinct from the role relating to any processing carried out by the provider for its own purposes. It is not extended indiscriminately to every processing activity involving logs or statistics.
Aruba’s privacy notice concerns the data of its customers and the other persons identified in that document. It does not replace this notice for visitors to this website.
Data provided through direct contact is not published on the website. Any access for technical support or correspondence management must be restricted to authorised persons and their respective duties. Information may be disclosed to an authority where required by law.
Retention of preliminary enquiries
Preliminary enquiries are retained while they are being handled. When an enquiry is closed, data that is not needed for an engagement, an applicable obligation or a specific need for legal protection is deleted. Any further retention is limited to the data needed for that particular purpose and ends when the need ceases. If an engagement is entered into, the rules relating to the matter are communicated separately.
Guided assistant
The assistant uses multiple-choice questions to suggest routes and resources. It does not ask for names, contact details, descriptions of a case or documents. It does not provide legal opinions or decide whether to accept an engagement. Selections remain in the page’s memory: they are not sent to the Studio or a chat service, and they do not create a history saved in the browser. Reloading the page restarts the process. Opening a resource takes you to the relevant page on the website.
Your rights
In the circumstances provided for by Articles 15–22 GDPR, you may request access, rectification, erasure, restriction and portability, or object to processing based on legitimate interests on grounds relating to your particular situation. You may use the contact details above and lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, under Article 77.
Legal reference: Regulation (EU) 2016/679, text published by the Garante.
Hosting information updated on 23 September 2026 on the basis of the provider’s response.