Last updated: September 2026
Privacy and Cookie Notice
This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) to anyone visiting this website or sending an enquiry through the contact channels listed here.
This is a courtesy translation provided for the convenience of English-speaking readers. In the event of any discrepancy, the Italian version prevails.
Data controller
Avv. Gabriele Barone, admitted to the Bar of Termini Imerese, Italy.
Offices: Bagheria (PA), Corso Butera 287 – Palermo, Via Mariano Stabile 241.
Italian VAT number 07194480823.
Email: avvocatogabrielebarone@gmail.com – certified email (PEC): gabriele.barone@cert.avvocatitermini.it
No Data Protection Officer has been appointed, as the conditions under Article 37 GDPR do not apply. For any matter concerning your data you may contact the controller directly at the addresses above.
Data processed
- Data you provide voluntarily: name and surname, email address, telephone number and the content of the enquiry sent through the contact form, WhatsApp, email or certified email.
- Browsing data: IP address, browser and device type, pages visited, and data collected through cookies and similar technologies, according to the preferences you express in the consent banner.
- Data sent through WhatsApp: if you choose to contact the firm via WhatsApp, the content and metadata of the conversation travel through the infrastructure of WhatsApp Ireland Ltd. (Meta group), under that service’s own terms and privacy policy, over which the controller has no control. For documents or confidential information, email or certified email is recommended.
Please do not include in the contact form any special categories of data (Article 9 GDPR) or data relating to criminal convictions and offences (Article 10 GDPR). Where relevant, such information can be collected later, during the first consultation and on formal engagement.
Purposes and legal bases
- Responding to your enquiry and assessing whether the case can be taken on: Article 6(1)(b) GDPR (steps taken prior to entering into a contract). No consent is required for this purpose: the processing is necessary to act on your own request.
- Compliance with legal, tax, accounting and professional conduct obligations, including anti-money-laundering rules where applicable: Article 6(1)(c) GDPR.
- Establishing, exercising or defending legal claims: Article 6(1)(f) and Article 9(2)(f) GDPR.
- Non-technical cookies and measurement tools: Article 6(1)(a) GDPR (consent), which you may withdraw at any time through the consent management panel.
Recipients and processors
Data may be processed on behalf of the controller, as processors under Article 28 GDPR, by the technical and professional service providers the firm relies on. In particular:
- Automattic Inc. / Aut O’Mattic A8C Ireland Ltd. – the WordPress.com platform: website hosting, handling and storage of messages sent through the contact form, visit statistics and spam filtering.
- Google Ireland Ltd. – measurement and tag management services (Google Analytics, Google Tag Manager, Search Console), activated only with your consent, and the email service used for correspondence.
- WhatsApp Ireland Ltd. (Meta group) – messaging channel, limited to users who choose to use it.
- The firm’s accountant, local agents and collaborators, within the limits of their respective roles.
- Providers of software tools supporting professional activity, including artificial intelligence systems, used exclusively under agreements that exclude the use of data for training models.
An up-to-date list of processors is available on request from the controller. Data is neither disseminated nor sold to third parties for commercial purposes.
All processing takes place in compliance with professional secrecy and the confidentiality obligations set out in Article 13 of the Italian Code of Conduct for Lawyers and Article 622 of the Italian Criminal Code.
Transfers outside the EU
Some providers belong to groups based in the United States and may process data outside the European Economic Area. In those cases the transfer relies on the European Commission adequacy decision of 10 July 2023 concerning the EU-U.S. Data Privacy Framework, where the provider adheres to it, or on the standard contractual clauses under Article 46 GDPR, together with any supplementary measures required.
Retention periods
- Enquiries that do not lead to an engagement: up to 12 months from the last exchange.
- Client files: 10 years from the end of the engagement, unless longer periods are required by law or to defend legal claims.
- Browsing data and cookies: for the periods indicated in the cookie section below and in the consent management panel.
Artificial intelligence and automated decisions
Artificial intelligence systems are used in drafting the content of this website and in some supporting activities, as set out on the legal notices and transparency page. These tools are not used to take decisions producing legal effects or similarly significantly affecting individuals: no automated decision-making and no profiling within the meaning of Article 22 GDPR takes place, and every professional assessment is made directly by Avv. Gabriele Barone. The data of clients and of those who contact the firm is not used to train artificial intelligence models.
Your rights
You may at any time exercise your rights of access, rectification, erasure, restriction, portability and objection (Articles 15 to 22 GDPR) by writing to the controller at the addresses above. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of your country of residence.
Whether providing data is mandatory
Providing the data marked as required in the contact form is necessary in order to respond to your enquiry: without it, no reply can be given. Providing any other data is optional.
Cookies and tracking technologies
This website uses technical cookies, which are necessary for it to function and are installed without consent under Article 122 of Italian Legislative Decree 196/2003, together with preference, statistical and marketing cookies, which are installed only with your express consent through the banner. You can change or withdraw your preferences at any time from the «Manage consent» panel available on every page.
Categories of cookies used
- Necessary: keep the site working, protect browsing security and store the choices made in the banner. No consent required.
- Preferences: store display settings chosen by the user.
- Statistics: measure visits and browsing behaviour in aggregate form. Installed only with consent.
- Marketing: advertising profiling cookies, installed only with consent and only if activated and listed as such in the consent management panel.
Main cookies installed
| Cookie | Category | Purpose | Duration |
|---|---|---|---|
| cmplz_* | Necessary | Stores the consent preferences expressed in the banner | up to 365 days |
| wordpress_*, wp-settings-* | Necessary | Authentication and display preferences, only for users who log in to the admin area | session to 1 year |
| tk_* (Automattic) | Statistics | Visit measurement through the platform’s own statistics | session to 2 years |
| _ga, _ga_* | Statistics | Google Analytics: distinguishing users and measuring traffic | up to 2 years |
The complete and always current list of cookies actually installed, with their durations and respective providers, is available in the «Manage consent» panel, generated automatically by the consent management tool used on this site.
You can also manage or disable cookies directly from your browser settings. Disabling technical cookies may affect some features of the site.
Updates
This notice may be updated from time to time. The version in force is always available at this address.