Last updated: 21 October 2026
This Privacy Policy explains how personal data is collected and used when you visit milicialex.com (the “Website”) or contact us through it, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003, as amended.
1. Data controller
MILICIA LEX
VAT no. 02891520815
Email: info@milicialex.com – PEC: avv.priscillamilicia@pec.it
The professional responsible for data processing is Priscilla Milicia. No Data Protection Officer has been appointed, as it is not required.
2. Personal data we process
- Browsing data. IP address, browser type, device, pages visited, date and time of access. These data are collected automatically by the Website’s servers to run the Website and keep it secure.
- Data you send us. Name, email address, phone number and any information you include in the contact form, in an email or during a call.
- Cookies. See our Cookie Policy.
Please do not send sensitive information (for example, health data or information on criminal proceedings) through the contact form. If needed, we will ask for it later, through a secure channel and with a specific notice.
3. Purposes and legal bases
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering your request and providing pre-contractual information | Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) | Up to 24 months from the last contact, if no engagement follows |
| Operating the Website and ensuring its security | Legitimate interest (Art. 6(1)(f) GDPR) | Server logs: up to 12 months |
| Establishing, exercising or defending legal claims | Legitimate interest (Art. 6(1)(f) GDPR) | For the applicable limitation period |
If you become a client, section 5 below also applies.
Providing your contact details is necessary to reply to you. We do not use your data for automated decision-making or profiling, and we do not send newsletters or marketing.
4. Confidentiality
All information you share with us is treated as strictly confidential and is covered by professional secrecy. This duty does not apply where the law requires disclosure, for example under anti-money laundering rules, which in some cases also prohibit informing the client.
5. Clients
If you instruct us, we process the personal data needed to carry out the engagement and manage the client relationship, including invoicing. This may include documents and information about you, your family, your property and, where strictly necessary for the matter, data relating to health or to criminal proceedings.
- Performance of the engagement (Art. 6(1)(b) GDPR) and, for special categories of data, the establishment, exercise or defence of legal claims (Art. 9(2)(f) GDPR).
- Legal obligations (Art. 6(1)(c) GDPR), such as tax and accounting rules and anti-money laundering checks (Italian Legislative Decree 231/2007), which require identifying the client.
- Legitimate interest (Art. 6(1)(f) GDPR) in defending our rights in case of disputes.
Client files are kept for 10 years from the end of the engagement, the period required by Italian accounting, tax and anti-money laundering rules and by the general limitation period. Original documents are returned to the client at the end of the engagement.
Within the engagement, data may be shared with courts and public offices, notaries, counterparties and their lawyers, and other professionals involved in the matter (for example surveyors, accountants or foreign counsel). We communicate by email at the address you provide, unless you ask us to use a different channel.
6. Recipients
Your data may be processed by service providers acting as data processors under Art. 28 GDPR, only to the extent needed for their service:
- Hostinger International Ltd, website hosting provider;
- Calendly LLC (United States), to manage call bookings made through our booking page;
- email and IT service providers;
- with your prior agreement, other professionals involved in your matter (for example, notaries or foreign counsel).
We do not sell your data. Data may be disclosed to public authorities only when required by law.
7. Transfers outside the EEA
If a provider transfers data outside the European Economic Area, the transfer relies on an adequacy decision of the European Commission (including the EU–US Data Privacy Framework) or on the Standard Contractual Clauses approved by the European Commission.
8. Your rights
You have the right to:
- access your data and obtain a copy (Art. 15);
- rectify inaccurate data (Art. 16);
- have your data erased (Art. 17);
- restrict processing (Art. 18);
- receive your data in a portable format (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw any consent at any time, without affecting the lawfulness of prior processing.
To exercise your rights, write to info@milicialex.com. We will reply within one month.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work.
9. Changes
We may update this Privacy Policy. The current version is always published on this page, with its date.