art. 12 et seq. Regulation (EU) n. 679/2016
Legislative decree no. 196 of 30 June 2003
Legislative decree no. 101 of 10 August 2018


BONAFÉ GRIFONI E ASSOCIATI, as Controller, would like to inform you on how your data will be used. Your personal data will be processed based on the principles of fairness, lawfulness, transparency and the protection of your privacy and your rights, with regard to the website

Origin and Type of data.

The data processed are those you have provided us with by browsing our website www. Specifically, they are:

Browsing data: the computer systems and software used for running our website collect, as part of normal operations, some personal data whose transmission is implicit in the use of internet communication protocols. These include, for example, IP addresses, URL addresses of requests, time of requests and other data relating to the operating system and the user;

Data provided by the user: information provided by the user when they contact the addresses shown on our website. Specifically, first name, last name, company, telephone number, and email address.

Purposes of the processing.

Your data will be used to reply to requests for information / contact, to collect anonymous statistical information on the use of the Website and to check the correct operation (browsing data).

These operations will be carried out by personnel who have received adequate training on the importance of protecting personal data, using secure tools. Under no circumstances will your data be transferred to third parties.

Methods of processing.

Your data will be processed using digital electronic instruments, with logics related to the purpose for which they were collected.

In any case, the methods and tools used guarantee the security and confidentiality of such data, through the adoption of suitable measures to prevent alteration, erasure, destruction, disclosure or unauthorised access or processing that is not permitted or is not in accordance with the purposes for which the data were collected.

Legal basis for processing and withdrawal.

The processing of browsing data is necessary in order to ensure the functioning of our website. BONAFÉ GRIFONI E ASSOCIATI will process your data to respond to your requests for assistance and/or for any contact or dealings of any nature, even if prior to entering into a contract. The provision of data for the above purposes is mandatory. If you do not provide these data, we will not be able to receive and fulfil your requests for assistance or inquiries.

Retention period for personal data.

Browsing data will be kept for 6 months. Data related to requests sent will be kept for as long as necessary to respond to you, provided there are no overriding legitimate grounds for the processing, including: (i) establishing a business relationship (ii) disputes concerning the processing of data.

Recipients of data

Your data will not be disseminated, sold or exchanged with third parties without an appropriate legal basis. They may be disclosed to subjects who:

  • have been authorised by the Controller to process data for the purposes indicated above;
  • are autonomous Controllers of the processing, when it serves to fulfil a legal obligation (e.g. government agencies, to carry out their official duties; practicing lawyers, for legal assistance in disputes);
  • are external Data Processors, i.e. authorised parties, based on contracts, acting in the name and on behalf of the Controller, engaged in the correct and proper pursuit of the purposes described (e.g. companies providing website maintenance services for the Controller).

In any case, the disclosure of data outside of the territory of the European Union is not envisaged.

Data Controller.

The data controller is BONAFÉ GRIFONI E ASSOCIATI STUDIO LEGALE TRIBUTARIO with registered office in FORO BONAPARTE 71, Milan, VAT no. 10013050157, which can be contacted at the following addresses:


Tel. 0286997999.

Rights of data subjects

The Data Controller represents and warrants your rights referred to in art. 15 et seq. of Regulation (EU) 679/2016 and therefore the rights to information and access, rectification, updating, integration, erasure, object, restriction and portability.

To exercise the above rights, including the refusal of a service and the withdrawal of consent, and request any information, please contact us by email at the following address: 

Lodging a complaint with the Data Protection Authority

If you believe your data protection rights have been infringed, you may lodge a complaint with the competent Data Protection Authority in accordance with art. 77 of Regulation (EU) 679/2016.