This Privacy Notice was last updated on 2 September 2025 and applies to users of the website https://www.27law.com (hereinafter, the “Website”).
1. Data Controller
The data controller is:
Danilo Giorgio Grattoni, Lawyer
Via M. Camperio 9 – 20123 Milan (MI), Italy
Email: info@27law.com
2. Categories of Data Collected
Through the Website, the following data may be collected:
- Browsing data collected through server logs and technical cookies.
- Data voluntarily provided by the user through contact forms, newsletter subscriptions or communications sent to the contact details available on the Website (first name, surname, email address, telephone number, and any other information provided by the user).
The provision of data is voluntary, but necessary in order to respond to requests submitted by the user.
3. Purposes of Processing
The data collected are processed for the following purposes:
- To enable the proper functioning of the Website.
- To respond to requests for contact or information.
- To comply with legal obligations and manage any disputes.
No profiling or marketing activities are carried out without the user’s explicit consent.
4. Legal Basis for Processing
- Performance of pre-contractual measures taken at the request of the data subject (Article 6(1)(b) GDPR).
- Compliance with legal obligations (Article 6(1)(c) GDPR).
- The data controller’s legitimate interests in ensuring the security of the Website and managing communications (Article 6(1)(f) GDPR).
5. Data Retention
The data are retained for the period necessary to provide the requested service and to comply with legal obligations, after which they are deleted or anonymised.
6. Data Sharing
Personal data are not disclosed to third parties. They may, however, be processed by providers of technical services (such as hosting providers and email service providers) appointed as data processors.
7. Data Subject Rights
Under the GDPR, the user may exercise the following rights at any time:
- Access to their personal data.
- Rectification or updating of their personal data.
- Erasure (“right to be forgotten”).
- Restriction of processing.
- Data portability.
- Objection to processing on legitimate grounds.
- Withdrawal of consent, where consent has been given.
To exercise these rights, you may contact the Data Controller at info@27law.com.
8. Data Security
The Website implements appropriate technical and organisational measures to protect personal data against loss, misuse, or unauthorised access.
9. Supervisory Authority
The user has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it) if they consider that the processing of their personal data infringes the applicable data protection legislation.
