Data protection notice
Privacy Policy
Notice under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) for the website of Saida Raffaelli Law Firm.
Last updated: 13 October 2026
1. Data controller
The data controller is Attorney Saida Raffaelli, with office at Via Circonvallazione Nord n. 39/b, 58014 Manciano (GR), Tuscan Maremma, Italy.
Contact: saida.raffaelli.2@gmail.com · certified email saidaraffaelli@pec.ordineavvocatigrosseto.com · phone +39 349 241 1685.
VAT no. 01792070532 · Tax code RFFSDA92B62G716U · Grosseto Bar registration no. 841.
2. Data processed
The website may process information that a visitor chooses to provide when contacting the Firm, including name, contact details, email address, phone number, area of assistance and message content.
The quote form does not submit data to a website database. It prepares a message in the visitor’s email application addressed to the Firm. Please do not include particularly sensitive information or unnecessary details in an initial enquiry.
3. Purposes and legal bases
Data are processed to answer enquiries, assess whether assistance can be provided and prepare a possible quote. The legal basis is the performance of pre-contractual measures requested by the data subject under Article 6(1)(b) GDPR.
Processing may also be necessary to comply with legal obligations and to protect the security of the website and communications, under Article 6(1)(c) or (f) GDPR, as applicable.
4. Methods, retention and recipients
Processing is carried out electronically using reasonable security, confidentiality and data-minimisation measures. Data are retained for as long as needed to handle the enquiry and, where a professional relationship begins, for periods required by civil, tax, professional and legal obligations.
Data may be accessed by the Controller, authorised collaborators and technical providers necessary for website and email operations, subject to applicable obligations. The website hosting provider is Aruba S.p.A. (aruba.it). The services used include an MSSQL Server database, its included backup service and Aruba’s Statistics service. These services may involve technical processing necessary for website management, security, retention and measurement of website operation.
The Manus platform was used to prepare and manage the project. For any processing carried out by Manus itself, Manus’s Privacy Policy and Terms of Use also apply. Those documents do not replace this notice for processing carried out by the Firm.
Where providers operate outside the European Economic Area, transfers will be made in accordance with GDPR safeguards and the information provided by those providers in their own policies.
5. Your rights
Subject to the conditions provided by Articles 15–22 GDPR, you may request access, correction, erasure, restriction, objection and data portability. You may also withdraw consent where processing is based on consent, without affecting the lawfulness of prior processing.
Requests may be sent to saida.raffaelli.2@gmail.com or the certified email address above. You also have the right to lodge a complaint with the competent data protection authority, including the Italian Data Protection Authority where applicable.
6. Third-party links
The website contains a link to Google Maps to display the Firm’s address. It does not embed maps or Google tracking tools in the page. When the external service is opened, its provider’s notices and settings apply.
This notice describes the website in its current configuration and may be updated if new features, providers or tracking tools are introduced.