Privacy Policy

The Data Controller is Benches Law, located at Via Tomacelli 132, 00186 Rome, Italy. For any privacy-related matters, contact us at: [email protected]

We collect the following categories of data: • Contact information: name, surname, email address, phone number, company • Navigation data: IP address, browser type, pages visited, time spent • Cookies and similar technologies: as described in our Cookie Policy

We process your personal data based on: • Explicit consent (Art. 6(1)(a) GDPR): for marketing communications and non-essential cookies • Legitimate interest (Art. 6(1)(f) GDPR): to improve our services and website security • Contract performance (Art. 6(1)(b) GDPR): to respond to your requests and provide legal services Specific purposes: • Respond to contact requests • Provide legal advice • Improve user experience • Aggregate statistical analysis (only with consent for Google Analytics) • Marketing and advertising (only with consent for Google Ads)

With your explicit consent, we use: • Google Analytics (GA4): to analyze website usage. Data is anonymized and IP is masked. • Google Ads: to show relevant advertisements. Both services may involve data transfers to non-EU countries (United States). Google applies Standard Contractual Clauses approved by the European Commission to ensure adequate protection. You can withdraw consent at any time via cookie settings.

Your data may be shared with: • Service providers: hosting, email, analytics (Google) • Competent authorities: when required by law • Professional partners: only to provide requested legal services and with your consent We do not sell or transfer your personal data to third parties for marketing purposes.

Some of our service providers (e.g., Google) may be located in non-EU countries. In these cases, we adopt appropriate measures to ensure data protection, including Standard Contractual Clauses approved by the European Commission.

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected: • Contact data: until consent withdrawal or 2 years from last contact • Analytics data: in aggregated and anonymous form for 26 months (GA4) • Legal data: according to applicable limitation periods (generally 10 years)

Under GDPR, you have the right to: • Access: obtain confirmation of processing and a copy of your data • Rectification: correct inaccurate or incomplete data • Erasure: request deletion of your data ("right to be forgotten") • Restriction: limit processing in certain circumstances • Portability: receive your data in structured format • Object: object to processing for legitimate reasons • Withdraw consent: withdraw consent at any time • Complaint: file a complaint with the Data Protection Authority To exercise your rights, contact us at: [email protected]

We adopt appropriate technical and organizational measures to protect your data from unauthorized access, loss, destruction, or alteration, including: • SSL/TLS encryption • Limited data access on a "need-to-know" basis • Staff training on data protection • Regular backups

We may update this Privacy Policy periodically. The "Last updated" date at the top indicates when it was last modified. We encourage you to review this page regularly.

For any questions about this Privacy Policy or our data processing practices, contact us: Benches Law Via Tomacelli 132 00186 Rome, Italy Email: [email protected]