Privacy Policy – October 2025

USEFUL INFORMATION FOR BROWSING AND TECHNICAL DEFINITIONS

Index

• General Information on Privacy
• Definition of Personal Data and Data Processing
• Identification of the Data Controller, Processor, and Authorized Persons
• List of Main Data Processing Activities
• User Rights under EU REG. 2016/679 (GDPR)
• Cookies

For any clarification, information, or to exercise the rights listed in this policy, please contact:

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
Address for registered mail: Via Sant'Alessandro, 55 — 24122 Bergamo (BG)
Tel: 035 244960

General Information on Privacy

With this notice, Studio Rota Sperti, represented by Dr. Barbara Rota Sperti, based in Via Sant'Alessandro, 55 — 24122 Bergamo, VAT No. 01980160160 (hereinafter referred to as the "Controller"), wishes to inform you about the processing of personal data carried out during browsing of the website www.studiorotasperti.eu.

Legislative Decree 196/2003 (Privacy Code) and EU Regulation 2016/679 (GDPR) establish rules to protect and safeguard natural persons regarding the processing of their personal data. This Privacy Policy has been drafted in compliance with these regulations.

The legal basis for processing personal data depends, as applicable, on the provisions of the GDPR (e.g., Art. 6 GDPR — performance of contractual obligations, consent, legitimate interest). This notice may be subject to changes due to new regulations or technical updates; therefore, you are invited to visit this section periodically.

This Privacy Policy applies exclusively to the website www.studiorotasperti.eu; Studio Rota Sperti is not responsible for how third-party websites, accessible via links on this site, manage personal data. The Studio processes personal data according to the principles of fairness, lawfulness, transparency, and confidentiality.

If the data subject is under 14 years of age, consent is valid only if given or authorized by the person exercising parental responsibility.

Definition of Personal Data and Data Processing

Personal data means any information that identifies or makes a natural person identifiable, either directly (e.g., name, surname, telephone number) or indirectly (e.g., non-aggregated technical cookies, identifiers).

Processing means any operation or set of operations performed, even automatically, on personal data, such as collection, recording, organization, storage, consultation, use, disclosure, erasure, etc.

Identification of the Data Controller, Processor, and Authorized Persons

Data Controller: Dr. Barbara Rota Sperti — Studio Rota Sperti (VAT No. 01980160160).
For matters relating to data processing: This email address is being protected from spambots. You need JavaScript enabled to view it. — studiorotasperti.eu

Data Processor: any external subjects appointed for specific services (e.g., hosting providers, IT or legal consultants).
Authorized Persons: individuals authorized by the Controller in accordance with internal procedures.

List of Main Data Processing Activities

• Data collected during browsing:
  Simple browsing does not involve the collection of directly identifying data; however, the system automatically acquires technical information through communication protocols (log files) and uses technical cookies necessary for website operation. Such information is processed for technical and security purposes and is not used to identify the user without further processing.
• Data voluntarily provided by the user:
  By sending an e-mail or filling in contact forms, the user provides their data (e.g., name, surname, e-mail, phone number). Providing such data is optional but necessary to handle the request; failure to provide it will make it impossible to respond.
• Reserved Area / protected services:
  Access to the Reserved Area (if available) may occur using credentials provided by the Controller or through an external service; access data are processed to authorize access and provide the requested services.
  (The website includes a reference to a reserved area/external services.) studiorotasperti.eu

Data may be communicated, limited to the required purposes, to external parties (e.g., consultants, technical service providers) and, if necessary, to competent authorities for legal obligations. Data will not be publicly disclosed or transferred outside the European Union unless otherwise stated.

The Studio adopts adequate technical and organizational security measures to protect personal data; however, absolute protection against unlawful access by third parties cannot be guaranteed.

Processing is carried out using electronic tools and, where necessary, paper media; data will be stored for as long as strictly necessary for the purposes of processing or within the terms required by law.

User Rights under EU REG. 2016/679

Pursuant to Articles 15–22 of the GDPR, the data subject has the right to:

• Obtain confirmation of whether personal data concerning them are being processed and access such data (Art. 15);
• Request rectification of inaccurate data (Art. 16);
• Obtain erasure of data where provided by law (Art. 17);
• Obtain restriction of processing (Art. 18);
• Object to processing on legitimate grounds (Art. 21);
• Obtain data portability (Art. 20), where applicable;
• Withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal;
• Lodge a complaint with the Italian Data Protection Authority.

Requests may be sent without formalities to This email address is being protected from spambots. You need JavaScript enabled to view it. or by registered mail to the address indicated above. studiorotasperti.eu

Cookies

The website uses only technical cookies necessary for the proper functioning of web pages and session management. For these cookies, prior consent is not required. Technical cookies serve, for example, to maintain active sessions, ensure security and correct page display, and remember technical preferences (e.g., language, login). Session cookies are deleted at the end of the visit.

The Studio declares that it does not use profiling, marketing, or third-party cookies for advertising purposes.
For more details on cookie types and management, users may contact the Controller at the above addresses.

Social Buttons

Social buttons are specific “buttons” on the site that display icons of social networks (e.g., Facebook, Twitter) and allow users to interact directly with social networks via a simple “click.”

The LinkedIn social button used in the website footer, in the section dedicated to company information, is a link that redirects to the Controller’s account on the corresponding social network. Therefore, no third-party cookies are installed by using this button.

By clicking “OK” on the banner shown upon first access to the site or by continuing to browse, the visitor expressly consents to the use of cookies and similar technologies, in particular to the storage of such cookies on their device for the purposes described above, or to the access of information through cookies on their device.

Last update: October 2025