Privacy Policy
General information
This notice describes the processing of personal data carried out through the website https://www.comolegale.it/ pursuant to Regulation (EU) 2016/679 (GDPR). It does not apply to external websites that may be reached through links contained on this website.
Data Controller
The Data Controller is Studio Legale Ferrari, with registered office at Via P. Paoli 49 | 22100 Como.
Email: info@comolegale.it
Telephone: +39 031 4310662
Data processed through the website
Browsing data
The IT systems used to operate this website automatically collect certain technical data, such as IP address, device and browser information, date and time of the request, requested resource and technical connection data. These data are processed to ensure the operation and security of the website and, where applicable, to produce aggregate statistics on its use.
The legal basis is the need to provide the service requested by the user and, for website security and proper technical management, the legitimate interest of the Data Controller. Technical data are retained for the time necessary for these purposes, unless longer retention is required for security reasons or to investigate unlawful activity.
Data provided voluntarily
Sending emails or requests through any contact forms involves the processing of the data voluntarily provided by the user solely in order to reply to the request. Any data collected through the website are forwarded to the Data Controller and are not used by the website for marketing or profiling purposes unless a specific notice is provided and separate consent is obtained.
The legal basis is the performance of measures requested by the data subject or, where applicable, the legitimate interest of the Data Controller in replying to communications received. Data are retained for the time necessary to handle the request, without prejudice to any subsequent contractual relationship, legal obligations or the Data Controller’s internal procedures.
Provision of data
Providing data by email or through contact forms is optional. Any fields marked as required are necessary only to allow the Data Controller to receive and handle the request; failure to provide them may make it impossible to reply.
Services used by the website
The following sections are shown only when the relevant service is actually used. Non-essential services are activated in accordance with the preferences expressed by the user through the consent management system.
For non-essential services, the legal basis is the user’s consent. Services strictly connected with website security and abuse prevention may be used on the basis of the Data Controller’s legitimate interest in protecting the website, without prejudice to any consent required for non-technical cookies or similar tools. Cookie storage periods are shown in the dedicated table.
WPML
WPML is a WordPress plugin for multilingual website management. It can store the current language, browser-language redirection preferences and other information required to display the correct language version of the website.
Google reCAPTCHA
Google reCAPTCHA is a security and spam protection service provided by Google, used to protect forms and other website functions from spam, automated submissions and abuse. To distinguish legitimate interactions from automated activity it may analyse technical device and connection information, IP address and the way the user interacts with the page.
Provider: Google. Privacy Policy
Recipients and international transfers
Data may be processed by technical providers acting on behalf of the Data Controller or, for the external services identified in this notice, by the relevant providers according to their respective roles and terms. Where a service involves transfers of data outside the European Economic Area, such transfers are carried out using the safeguards provided for by the GDPR, such as adequacy decisions, the Data Privacy Framework where applicable, or Standard Contractual Clauses. Information on the applicable safeguards and, where provided for, how to obtain a copy may be requested from the Data Controller or found in the provider privacy notices linked from this page.
Data subject rights
Where provided for by the GDPR, data subjects may exercise their rights of access, rectification, erasure, restriction, portability and objection, and may withdraw any consent previously given without affecting the lawfulness of processing carried out before withdrawal.
Requests relating to the exercise of data protection rights may be sent to info@comolegale.it. A complaint may also be lodged with the competent supervisory authority.
The website does not carry out decisions based solely on automated processing that produce legal effects or similarly significantly affect the data subject, unless this is expressly stated in a specific privacy notice.
Cookie Policy
Cookies and tracking tools
Cookies are small text files that a website may store on a user’s device. They may be used to ensure the correct operation and security of the website, remember preferences, obtain statistics or, subject to consent, measure advertising activity and perform profiling or remarketing. Cookies may be first-party, when they are managed directly by the website being visited, or originate from third-party services integrated into website pages, and they may last only for the browsing session or remain stored for a defined period. Technical and necessary cookies are those required for the operation of the website or to provide functions requested by the user and do not require prior consent. Analytics cookies are used to measure website traffic and usage: they may be treated as equivalent to technical cookies only where the conditions established by applicable law and the competent supervisory authority are met; otherwise they are used only with the user’s consent. Profiling and marketing cookies and other tools used for remarketing, advertising measurement or personalised advertising are activated exclusively after consent. Some functions may also use third-party services: being a “third party” does not by itself determine the purpose of a cookie or other tool, which instead depends on the specific service used and on its category. Information about the cookies actually present, their purposes and storage periods is provided in the dedicated table and in the descriptions of the services used by the website.
Consent management
Where cookies or other tracking tools require consent, users may give, refuse or withdraw that consent at any time through the preference panel or privacy widget available on the website. Withdrawal does not affect the lawfulness of processing carried out before preferences were changed.
For tools managed by third parties, users may also use any opt-out mechanism provided by the relevant provider, follow the instructions in that provider’s privacy policy, or contact the provider directly.
First-party and third-party tools
The website may use tools managed directly by the Data Controller and tools connected to services supplied by third parties. Third-party providers may receive the technical data required to operate their services according to their own privacy notices. The presence of an external service does not automatically imply profiling: purpose, legal basis and consent requirements depend on the specific service used.
Duration of tracking tools
The duration of cookies and similar tools may vary. Some expire at the end of the browsing session, while others remain stored for a period defined by the Data Controller or the relevant provider. Where available, the specific duration is shown in the cookie table or in the provider’s documentation.
How to control or delete cookies and similar technologies through browser or device settings
Users may use browser or device settings to see which cookies or similar technologies are stored, block them, or delete them. These controls operate at a technical level and generally do not provide the same category-based control as the website’s consent panel.
More information is available in the help pages of the main browsers:
On mobile devices, some tracking preferences may also be managed through the operating system’s privacy, advertising or tracking settings.
How to limit interest-based advertising
In addition to the controls provided by the website and individual providers, users may consult advertising preference services such as YourOnlineChoices for the EU and UK, the Network Advertising Initiative and Digital Advertising Alliance in the United States, DAAC in Canada, and DDAI in Japan.
The Digital Advertising Alliance also provides AppChoices, a tool for managing behavioural advertising preferences in mobile applications.
Consequences of refusing optional tools
Refusing non-essential tools does not prevent access to the website’s essential functions. Optional features that depend on external services, such as videos, maps, embedded content or personalisation functions, may however remain unavailable until the relevant consent is given.
Cookies used by the website
The following table lists the cookies detected and classified by category, together with their purposes and storage periods on the user’s device:
Necessary
Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.
| Cookie | Duration | Description |
|---|---|---|
| wt_consent | 1 year | Stores the visitor consent choices recorded by the WebToffee GDPR Cookie Consent plugin. |
| wpml_browser_redirect_test | session | Checks whether cookies are available for WPML browser-language redirection. |
| _GRECAPTCHA | 6 months | Google reCAPTCHA uses this cookie to help distinguish legitimate users from automated abuse and protect forms from spam and malicious bot activity. |
| rc::a | never | Google reCAPTCHA stores this browser identifier to help distinguish legitimate users from automated abuse and spam. |
| rc::b | session | Google reCAPTCHA stores temporary browser data used to distinguish legitimate users from automated abuse and spam. |
| rc::c | session | Google reCAPTCHA stores temporary browser data used to distinguish legitimate users from automated abuse and spam. |
| rc::f | never | Google reCAPTCHA stores this browser identifier to help distinguish legitimate users from automated abuse and spam. |
Functional
Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.
| Cookie | Duration | Description |
|---|---|---|
| _icl_visitor_lang_js | 1 day | Stores the language selected by WPML browser-language redirection. |
| wp-wpml_current_language | session | Stores the current language used by WPML for AJAX language filtering. |
Services associated with cookies and tracking tools
The following services are actually used by the website and may involve cookies, identifiers or connections to external providers. The actual presence of cookies may vary depending on the pages visited, the preferences expressed and the functions used.
WPML
WPML is a WordPress plugin for multilingual website management. It can store the current language, browser-language redirection preferences and other information required to display the correct language version of the website.
Google reCAPTCHA
Google reCAPTCHA is a security and spam protection service that protects forms and website functions from spam and automated use by analysing technical data and interaction with the page. Privacy Policy
Last updated
This Privacy and Cookie Policy may be updated over time, for example following changes to the services used by the website, processing methods or applicable law. The version published on this page is the version currently in force; users are therefore encouraged to review it periodically for any changes. Last updated: 06/10/2026.