1. Data Controller
The Data Controller for personal data processing is Avv. Armando Simbari (for Simbari Avvocati Penalisti law firm), located at Via Durini 7 – 20122 Milan (MI), Italy.
Email: info@simbari.it / a.simbari@simbari.it
Telephone: +39 02 3913146
2. Categories of Data Processed
In connection with the consultation of this website and professional legal engagements, the following categories of data may be processed:
- Browsing data: Technical logs, anonymized IP addresses, request times, and browser/device metadata necessary for website operation.
- Data voluntarily provided: Name, contact details, email addresses, and any information provided voluntarily when sending messages or calling our offices.
- Professional engagement data (including judicial and special categories under Arts. 9 and 10 GDPR): In the event of legal representation or legal advice, identification data, tax information, as well as data relating to criminal convictions, offenses, or special categories of personal data necessary to establish, exercise, or defend legal claims.
3. Purpose and Legal Basis of Processing
Data is processed in compliance with Regulation (EU) 2016/679 (GDPR) for the following purposes:
- Website operation & security: Enabling smooth browsing and safeguarding IT security (Legal basis: Legitimate interest, Art. 6(1)(f) GDPR).
- Handling inquiries: Replying to requests for information or preliminary assessments (Legal basis: Contractual/pre-contractual measures, Art. 6(1)(b) GDPR).
- Performance of legal services & defense in court: Fulfilling professional engagements in criminal defense and legal counsel (Legal bases: Performance of a contract, Art. 6(1)(b); establishment, exercise, or defense of legal claims for special and criminal data, Arts. 9(2)(f) and 10 GDPR).
- Statutory and anti-money laundering compliance: Adhering to accounting, tax, and AML regulations pursuant to Italian Legislative Decree 231/2007 (Legal basis: Legal obligation, Art. 6(1)(c) GDPR).
4. Processing Methods and Retention Period
Data processing is conducted using digital and paper media equipped with technical and organizational security measures to protect data confidentiality under legal professional privilege.
Browsing data is erased at the end of each session. Data related to client representation and inquiries is retained for the duration of the mandate and for the statutory period required by civil, tax, and anti-money laundering regulations (typically 10 years following file closure).
5. Data Disclosure and Recipients
Personal data will not be disseminated for commercial purposes. Where strictly necessary, data may be communicated to:
- Legal associates, expert witnesses, and technical advisors involved in legal proceedings;
- Judicial Authorities, Police Authorities, counter-parties and their legal representatives;
- Public oversight bodies for legal and AML compliance (e.g., Financial Intelligence Unit - UIF);
- IT hosting and software providers appointed as Data Processors (Art. 28 GDPR).
All data is hosted within the European Union (EEA) and is not transferred outside the EU without adequate safeguards.
6. Data Subject Rights
Pursuant to Articles 15 to 22 of the GDPR, data subjects have the right to access, rectify, request erasure (where permissible under legal retention duties), restrict or object to processing, request data portability, and lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
Inquiries can be addressed to: info@simbari.it.