Privacy and cookie notice

The controller is Avv. Marco Perilli, Viale delle Milizie 34, Rome, Italy. For information and data rights requests: marco@perilaw.com.

This notice covers the Perilaw website at perilaw.com and www.perilaw.com, in Italian and English, and the technical resources needed to display its pages. The Contact form and the restricted area with the guide have dedicated notices. External websites reached through links are governed by their respective notices.

When you browse, the server receives your IP address, date and time, requested resource address, HTTP method and technical information sent by your browser, including browser and device information where present. It also handles the response status code and data needed to send the response. This information is processed to deliver pages, check their operation and prevent abuse; receiving it does not mean it is all retained in a visitor log.

The legal basis is the controller’s legitimate interest in website availability and security (Article 6(1)(f) GDPR), limited to necessary processing. Technical data essential to communication are required to deliver the pages; you do not have to accept this notice to browse.

Access logs for the website are disabled. Critical errors and necessary technical logs are subject to deletion and rotation with an ordinary limit of 15 days. Any retention for incidents or disputes is limited to necessary data, justified and reviewed. Application logs do not record form message content.

Only with consent (Article 6(1)(a) GDPR), we collect aggregate counts of public page views, including Peri News, to improve content and navigation. Separate dimensions are page, language, device category and broad internal, external or unspecified source. We store no individual events, IP addresses, full referrer URLs, URL parameters, form data, visitor identifiers or journeys. Accounts and restricted content are excluded. HTTP transport still involves technical receipt of IP addresses and headers, without saving them in the counters.

On the first visit the panel offers acceptance and refusal with equal ease. Closing with × or Escape means refusal, not acceptance. The site works without consent. Privacy preferences is always available in the menu and page footer to change your choice or withdraw consent; withdrawal does not affect the lawfulness of prior processing.

Aggregate counters are retained for twelve months and automatically deleted. The dashboard is restricted to the controller through the administration panel and the Android app authorized by the controller, with access limited to aggregate counts. Counts below five are hidden and the others rounded down to multiples of five, including exports. They cover only the consenting sample, not all visitors or unique visitors. An individual view cannot be extracted from the sum and removed after withdrawal. We use no third-party analytics, behavioural advertising or fingerprinting.

The technical perilaw_language cookie remembers your chosen language for six months; otherwise browser language is used, not geographical location. sessionStorage remembers within the individual tab that the opening animation has already been seen, without retaining page history. These tools support operation and user-requested preferences, not advertising.

Your choice is remembered for six months with perilaw_choice and a signed technical receipt, perilaw_receipt, which is HttpOnly, Secure and scoped to this website’s APIs. Evidence of the choice, including time, action, language, purposes, notice version and hash, is retained separately for twelve months to demonstrate consent (Article 7(1) GDPR). It contains no IP, browser or page history. Withdrawal stops new counts. Encrypted backups are kept for at most thirty days; after restoration all previous choices are invalidated before collection resumes. Restricted-area authentication cookies follow its separate notice.

Hetzner Online GmbH provides hosting on a server in Finland and acts as a processor for that service under an Article 28 GDPR agreement. Authorised persons access data only as necessary for management and security. Lawful requests from authorities are handled within the limits of the law.

Microsoft 365 provides the firm’s operational email when you write to the firm or use the operational form, under the Microsoft Products and Services Data Protection Addendum. Merely visiting this website does not send browsing data to Microsoft 365. Processing of messages and accounts is described in the notices for those services.

The Exchange Online admin center lists European Union/EFTA for data at rest. This does not exclude access or transfers outside the EEA under Microsoft terms, with applicable safeguards including standard contractual clauses. You may request information and copies of the safeguards from the controller. The DPA is available at microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA.

Browsing sends no content to external AI model providers. The Contact form’s advisory message filter runs on the website server.

Where provided by the GDPR, you may request access, rectification, erasure and restriction, and portability where applicable, by writing to marco@perilaw.com. You may object on grounds relating to your particular situation to processing based on legitimate interests.

You may lodge a complaint with the Italian Data Protection Authority (Garante) and seek a judicial remedy. Browsing data are not used for decisions based solely on automated processing that produce legal or similarly significant effects.

Aggregate statistics are optional and start only after your consent.

Contact form and its notice · Private area and guide privacy notice

Garante: guidelines on cookies and other tracking tools

GDPR · Rights and complaints