Privacy policy
Information under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
This notice explains how personal data are processed when you visit fontanamaggiore.com or contact the firm using the details given on the site. It does not cover processing carried out as part of a professional engagement; clients receive a separate notice when they instruct the firm. This English version is provided for convenience; in case of discrepancy, the Italian version prevails.
1. Data controller
The data controller is Avv. Francesco Luciani, principal of Fontana Maggiore — Law Firm & Consulting, Piazza IV Novembre, 36, 06122 Perugia (PG), Italy.
Phone: +39 075 8500942 — Email: luciani.francesco@
The firm has not appointed a Data Protection Officer (DPO), as the conditions of Article 37 GDPR do not apply.
2. Data we process
Browsing data
The systems that run this site automatically collect certain data whose transmission is inherent in the use of internet protocols, such as your IP address, browser and operating system, the date and time of the request, the page requested and the server response code. These data are stored in server logs and are used to keep the site running and secure.
Data you give us
If you contact the firm by phone, email or PEC, you provide the data we need to reply (for example your name, contact details and the content of your request). Please do not send unnecessary information in a first contact, especially special categories of data (Article 9 GDPR) or data relating to criminal convictions and offenses (Article 10 GDPR).
Cookies and similar technologies
The site uses strictly necessary technologies and, only with your consent, analytics tools. Details are in the cookie policy.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Running the site and keeping it secure | Legitimate interest of the controller (Art. 6(1)(f)) |
| Answering requests for information or appointments | Steps taken at your request before entering into a contract (Art. 6(1)(b)) |
| Complying with legal obligations and, where necessary, establishing, exercising or defending legal claims | Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)) |
| Aggregate statistics on site use, if enabled | Consent (Art. 6(1)(a)), which you can withdraw at any time |
4. How data are processed
Data are processed electronically and, where necessary, on paper, by authorized people bound by confidentiality and professional secrecy, with appropriate technical and organizational security measures. The site uses an encrypted connection (HTTPS). No automated decision-making or profiling takes place.
5. Recipients
Data may be processed on the firm’s behalf by service providers acting as processors under Article 28 GDPR, in particular:
- the site’s hosting provider: Vercel Inc.;
- the firm’s email and PEC provider;
- if you consent to analytics cookies: Google Ireland Limited, for Google Analytics 4 (via Google Tag Manager).
Data may also be disclosed to the competent authorities where required by law. They are never published or sold to third parties for marketing purposes.
6. Transfers outside the European Union
The site is hosted by Vercel Inc., based in the United States, so browsing data may be processed outside the European Economic Area under the safeguards of Chapter V GDPR (the EU-U.S. Data Privacy Framework and/or the standard contractual clauses in the provider’s data processing agreement). If you consent to analytics cookies, Google may transfer some data to the United States; Google LLC participates in the EU-U.S. Data Privacy Framework, covered by the European Commission’s adequacy decision of July 10, 2023.
7. How long we keep data
- Browsing data: for as long as needed to keep the site running and secure, according to the hosting provider’s settings, unless needed to investigate unlawful activity.
- Contact requests: for as long as needed to handle the request. If an engagement follows, the data are kept as set out in the engagement notice.
- Statistics: according to the retention period set in the analytics tool, and in any case no longer than 14 months.
8. Whether you have to provide data
Browsing data are needed to use the site. Providing data to contact the firm is optional, but we cannot reply without them. Consent to analytics cookies is optional, and refusing it does not limit your use of the site.
9. Your rights
You may exercise your rights under Articles 15 to 22 GDPR at any time: access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interest. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Requests can be sent to luciani.francesco@
You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
10. Changes
This notice may be updated. The current version is always published on this page.
Last updated: October 9, 2026.