Request a consultation APE
Policy

Privacy policy

Information on the processing of personal data pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). This English version is provided for convenience; in case of discrepancy, the Italian version prevails. Last updated: 12 October 2026.

1. Data controller

The data controller is Francesco Battista, Architect (Studio di Architettura), with offices at Via Padre Alessandro Di Meo 2, 83100 Avellino, Italy, VAT no. IT02472040647.

For any request concerning the processing of personal data you may write to architetto@francescobattista.it or, for communications with legal value, to the certified email address (PEC) info@pec.francescobattista.it.

2. Data processed

Data provided voluntarily by the user

By completing the contact form, the user provides their name and surname, email address, telephone number, the service of interest and the content of the message. The same data may be provided by writing directly to the practice’s email addresses. Users are asked not to include in their message any special categories of data (for example health data) unless strictly necessary for the request.

Browsing data

During normal operation, the computer systems that run the website acquire certain data whose transmission is implicit in the use of Internet communication protocols: IP address, browser type and operating system, date and time of the request, pages visited. These data are used solely to ensure the correct functioning and security of the site and are not associated with identified users.

Cookies

The site uses technical cookies only. For details, please refer to the Cookie policy.

Visit statistics

Visit statistics are collected with the Independent Analytics plugin, installed on the site’s server, without cookies and without disclosing data to third parties. The IP address is used only to determine the country of connection and, together with the browser type, to generate an irreversible code renewed every 24 hours; the data are processed exclusively in aggregate form.

3. Purposes and legal bases

  • Responding to requests sent by the user and, where requested, preparing a quote or a proposal for an engagement. Legal basis: pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR).
  • Managing any resulting professional engagement and fulfilling the related tax, accounting and professional obligations. Legal basis: performance of the contract and compliance with legal obligations (Art. 6(1)(b) and (c) GDPR).
  • Producing aggregate, anonymous statistics on the use of the site, in order to improve its content. Legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR).
  • Ensuring the security and functioning of the site and, where necessary, establishing liability in the event of computer crimes. Legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR).

The data are not used for marketing purposes, are not used for profiling and are not subject to automated decision-making.

4. Nature of the provision of data

Providing the data requested in the contact form is optional but necessary to receive a reply: without them the practice cannot follow up on the request.

5. Processing methods

The data are processed using electronic and, where necessary, paper-based tools, with technical and organisational measures appropriate to ensure their confidentiality, integrity and availability and to prevent unauthorised access, loss or unlawful use.

6. Recipients of the data

The data are processed by the controller and are not disseminated. They may be disclosed, to the extent strictly necessary, to parties providing services to the practice and acting as data processors pursuant to Art. 28 GDPR, such as the website hosting provider (Aruba S.p.A., based in Ponte San Pietro (BG), Italy) and the email service provider. In the case of an engagement, the data may be disclosed to public authorities, professionals and consultants (for example the tax adviser) where this is necessary to perform the service or required by law.

7. Transfer of data outside the European Union

The data are stored on servers located in the European Union. Should a provider process data outside the European Economic Area, the transfer will take place in compliance with Articles 44 et seq. GDPR, on the basis of an adequacy decision of the European Commission or standard contractual clauses.

8. Retention period

  • Data sent via the contact form or by email are kept for as long as necessary to handle the request and, if no engagement follows, for no longer than 12 months from the last contact.
  • In the case of an engagement, the data are kept for the duration of the professional relationship and thereafter for 10 years, in accordance with the statutory retention obligations (Art. 2220 of the Italian Civil Code) and limitation periods.
  • Visit statistics are kept in aggregate form on the site’s server for no longer than 24 months.
  • Browsing data are kept for the time strictly necessary for the security of the site and in any case for no longer than 12 months from collection, in accordance with the storage limitation principle (Art. 5(1)(e) GDPR), unless longer retention is necessary to establish liability in the event of computer crimes or at the request of the judicial authorities.

9. Rights of the data subject

The user may at any time exercise the rights provided for by Articles 15–22 GDPR: access to their data, rectification, erasure, restriction of processing, portability and objection to processing based on legitimate interest. Requests should be sent to the contact details given in section 1; the practice will reply within one month of receipt.

The user also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it.

10. Changes to this notice

This notice may be updated, including as a result of changes in legislation. The version in force is always the one published on this page, with the date of the last update.