This Privacy Policy May 2018 sets out information privacy practices and your rights. We may amend this Privacy Policy at any time and for any reason.

Who we are and how to contact us

Studio Caruso is a legal practice comprised of individual self-employed lawyers and other non-lawyer administrative and support personnel. Each lawyer is a data controller for their clients and respective enquiries. A list of lawyers can be found on the ‘about us’ page.

The controller for the processing of personal data under this privacy notice is:

Avvocato Nicoletta Caruso
Piazza Re di Roma 3
Rome 00183.

If you have any questions about this Privacy Notice or about our personal data processing practices, or you wish to exercise any of your rights as a data subject, you may contact Nicoletta Caruso at

How we collect your personal data

We collect personal data from the following:

  • When you send an enquiry through the website including your name and contact details.
  • You provide us information via email, telephone, face to face meeting or social media.
  • From third parties where it is required for execution of the services requested, such as from municipalities, Notaries, courts, police, consulates etc.
  • Submitting a client enquiry through the website on the ‘Contact us’ page
  • Our monitoring of visits to the website through the lawful use recording of IP addresses

Types of personal data we collect

To engage and serve you as a client, we will need to collect personal data about you, including your name, date and place of birth, residential address, contact details and any other personal information relevant to the situation to be actioned or advised upon. We may also be required to take a copy of your passport, identity card or Codice Fiscale.

Generally, we will obtain this personal data directly from you, however, we may also obtain personal data about you from third parties or public sources.

In providing professional legal services it may be necessary to procure and process the data of individuals or entities involved or connected with the matter.

Our reasons and basis for using your personal data

  • We will process your personal data for the purpose of providing our legal services to you and for other purposes associated with that purpose.
  • It is in our legitimate interest that we use your personal information in such a way as to provide you with a high quality of legal service.
  • In certain situations, we rely on your consent to process your personal data. In such cases we will seek your consent at the time of provision.
  • We may also use and process your personal information to comply with any applicable law or court order or legal procedures, including as required by anti-money laundering legislation

Sharing your personal data

In carrying out our services, we may need to disclose your personal data to third parties who provide services that assist us with your matter and to third parties who are involved in the matter. Examples are, but not limited to, municipalities, courts, police, notaries, lawyers, other parties involved in the matter as would be required in the litigation process.

In exceptional circumstances, we may be required or permitted by law to disclose personal data, for example to law enforcement authorities or to prevent a serious threat to public safety.

We will only transfer your personal data overseas if the particulars of the matter necessitate so.

Storage and retention period

Data is stored on computer hard drives or external hard drives.

Your personal data will be stored or as long as it has a legitimate purpose to do so. We will need to retain personal data for commercial and legal purposes. How long it will need to retain personal data for these purposes will depend on the specific personal data.

Client files are retained for at 10 years after the end of the matter, in case a dispute arises in relation to the matter. We may retain some client matter files for longer than this if the situation necessitates (for example, property or inheritance related matters).

We may be required to retain certain client and case information for a specified period by corporate and tax laws, legal regulations and our insurance providers.

Once we have no legal or commercial reasons to retain personal data, it will be securely deleted or destroyed.

Requirement to provide personal data

As a client, it is mandatory to provide basic personal data such as your name and contact details. If you do not provide this data, we will not be able to act for you. It is optional to provide most other personal data. However, in many cases, if you do not provide that data, the advice and services we can provide to you may be limited or may not properly take into account your particular circumstances.

Your rights

If you are located in the EU or the UK, you have certain rights in relation to your personal data as follows:

  • Access: You have the right to obtain access to and a copy of any personal data we hold about you. You also have the right to find out whether your personal data has been transferred outside the EU and any safeguards relating to this transfer.
  • Rectification: If you consider that any personal data we hold about you is incorrect or incomplete, you have the right to ask us to correct or complete that personal data.
  • Erasure: In certain circumstances, you have the right to ask us to erase any personal data we hold about you.
  • Restriction of processing: In certain circumstances, you have the right to ask us not to process your personal data for certain purposes.
  • Objection to processing: In certain circumstances, you have the right to object to us processing your personal data for certain purposes.
  • Data portability: In certain circumstances, you have the right to request a copy of your personal data in a structured, commonly used and machine-readable format.
  • Withdrawing consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time.

To make a request pursuant to these rights, contact Avv. Nicoletta Caruso at