Privacy and cookie notice

1. Data controller

The data controller is Angelo Russo, lawyer, registered with the Milan Bar Association under no. 25801, with offices at Via Arona 6, 20149 Milan, Italy (VAT no. 08644180963). The professional title of avvocato (lawyer) was obtained in Italy. The profession is governed by Law no. 247 of 31 December 2012 and by the Code of Conduct for Italian Lawyers (Codice deontologico forense), available on the website of the Italian National Bar Council (consiglionazionaleforense.it).

For any request concerning your personal data, you can call +39 02 87196100 or +39 333 4343671, or write to avvocatoangelorusso.com or, by PEC (certified email), to angelo.russomilano.pecavvocati.it.

2. Data processed

Browsing data. The systems that make this website available collect, during normal operation, certain technical data whose transmission is implicit in the use of Internet protocols, such as your IP address, the date and time of the request, the page visited and your browser and operating system. This data is not used to identify or profile visitors.

Data you provide. If you contact me by phone or email, I will process the data you choose to share (for example your name, contact details and the content of your enquiry) in order to reply.

Please avoid sharing health data, information about criminal proceedings or other particularly sensitive information in your first message unless strictly necessary. If you do, that data will be processed only to assess your enquiry, in accordance with Articles 9 and 10 GDPR and Article 2-octies of Italian Legislative Decree 196/2003.

3. Purposes and legal bases

Operation and security of the website: the controller’s legitimate interest (Article 6(1)(f) GDPR).

Replying to enquiries and pre-contractual steps, including the assessment of a possible engagement: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).

Compliance with legal obligations and, where necessary, the establishment, exercise or defence of legal claims (Article 6(1)(c) and (f); Article 9(2)(f) GDPR).

4. Provision of data

Providing your data is optional. Without the necessary data, however, I will not be able to reply to your enquiry.

5. Recipients

Data is processed by the controller in compliance with professional secrecy and is not disclosed to the public.

Technical service providers I rely on, such as the website hosting provider and the email provider, may access data to the extent strictly necessary, acting as processors under Article 28 GDPR.

6. Transfers outside the European Economic Area

Some service providers may process data outside the European Economic Area. In such cases, transfers are based on a European Commission adequacy decision, such as the one relating to the EU-U.S. Data Privacy Framework, or on other appropriate safeguards under Articles 45 and 46 GDPR, such as standard contractual clauses.

7. Retention

Browsing data is retained by the hosting provider only for as long as strictly necessary to ensure the operation and security of the website.

Data provided in an initial enquiry is kept for as long as necessary to handle it. If a professional engagement follows, it is kept for the duration of the engagement and thereafter for the period required by law, in particular in relation to limitation periods.

8. Cookies

This website does not set any cookies of its own and does not use profiling cookies, analytics or other tracking tools.

As no cookies are used, no consent is required, which is why no cookie banner is displayed.

Fonts are hosted directly on the website, without connections to external services. Clicking the office address opens Google Maps (Apple Maps on iPhone and iPad), services that process data under their own privacy policies. You can manage or delete cookies at any time through your browser settings.

9. Your rights

You may exercise at any time the rights set out in Articles 15 to 22 GDPR: access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interest.

You can do so using the contact details in section 1. I will reply without undue delay and in any event within one month of your request, subject to extension in the cases provided for by Article 12 GDPR.

If you believe that the processing infringes data protection law, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) under Article 77 GDPR.

10. Automated decision-making

No automated decision-making, including profiling, is applied to your data.

11. Legal framework and updates

This notice is drafted in accordance with Regulation (EU) 2016/679, Italian Legislative Decree 196/2003 (Personal Data Protection Code) as amended by Legislative Decree 101/2018, and the Italian Data Protection Authority’s Guidelines on cookies and other tracking tools of 10 June 2021.

This notice may be updated, including following changes in the law. Last updated: 27 October 2026.