Privacy notice
1. Who is responsible for your data
The controller is Avv. Francesco Boschetti, a lawyer admitted to the Rome Bar Association, practising individually, VAT number 09160721008, tax code BSCFNC77R21H501A, with professional address at Via dei Gracchi 151, 00192 Rome, Italy.
Certified email: francescoboschetti@ordineavvocatiroma.org
No data protection officer has been appointed, since none of the conditions in Article 37 of the Regulation applies to this practice.
2. What data is collected, and how
a. Data you give us through the enquiry form
Your full name, your email address and, if you choose to give it, your telephone number. Together with these, the answers you give about your case: the state or territory where you live, which member of your family was born in Italy, whether that ancestor was naturalised elsewhere, whether you have tried to book a consular appointment, whether you filed an application or held a confirmed appointment before 27 March 2025, whether your line passes through a woman whose child was born before 1948, and anything you write in the free text field.
Please do not include in the free text field any information about health, religious or philosophical beliefs, political opinions, trade union membership, sexual life or criminal proceedings. That information is not needed in order to assess a claim to citizenship by descent, and we ask you not to send it.
b. Data recorded when you choose about cookies
When you accept, refuse or customise measurement cookies, we record the choice itself: a randomly generated identifier, the date and time, the categories you accepted or refused, the version of this notice in force, and your public network address with the final part removed, so that it can no longer identify a single connection. This record exists solely so that we can demonstrate that a valid choice was made, as Article 7(1) of the Regulation requires.
c. Data collected by measurement cookies
Only if you consent. See the cookie notice below for what is stored and for how long.
3. Why the data is used, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry, assessing whether your claim is arguable, and if it is, discussing an engagement | Steps taken at your request before entering into a contract, Article 6(1)(b) |
| Measuring how the page is found and whether it works, and measuring whether an advertisement led to your visit | Your consent, Article 6(1)(a), together with Article 122 of Italian Legislative Decree 196/2003 |
| Keeping proof of the choice you made about cookies | Legal obligation and accountability, Articles 6(1)(c), 5(2) and 7(1) |
| Defending a right in legal proceedings, should that ever become necessary | Legitimate interest, Article 6(1)(f) |
Giving your name, your email address and the answers marked as required is necessary in order for us to assess your case: without them we cannot reply usefully. Everything else is optional, and refusing it has no consequence other than a less complete first assessment.
4. Who else has access
Your data is handled by the controller and by the collaborators of the practice, each bound by professional secrecy. The following providers act as processors under Article 28 of the Regulation:
- Cloudflare, Inc., which serves this page and runs the two functions that receive the form and the record of your cookie choice.
- Google Ireland Ltd, for the spreadsheet in which enquiries are recorded, for the mailbox that receives the notification, and, subject to your consent, for Google Analytics and Google Tag Manager.
Your data is not sold, and is not passed to anyone else for their own purposes.
5. Transfers outside the European Economic Area
Both providers named above are established in, or belong to groups established in, the United States. Transfers take place on the basis of the adequacy decision of the European Commission of 10 July 2023 concerning the EU and US Data Privacy Framework, and, in addition, on the basis of the standard contractual clauses adopted by the Commission. You may ask us for a copy of the safeguards in place.
6. How long the data is kept
- Enquiries that do not lead to an engagement: twenty four months from the last exchange, after which they are deleted. The period allows for enquiries that come back after a change in the law, which in this field is frequent.
- Enquiries that lead to an engagement: for the duration of the mandate and afterwards for the period required by professional, tax and anti money laundering rules.
- Record of your cookie choice: twenty four months, or until you withdraw or change the choice.
- Data collected by measurement cookies: as set out in the table in the cookie notice.
7. Your rights
You may ask for access to your data, for its correction or erasure, for the restriction of its processing, and for a copy in a portable format. You may object to processing based on legitimate interest. Where processing rests on your consent, you may withdraw that consent at any time, and the withdrawal does not affect what was done lawfully beforehand.
To exercise any of these rights, write to francescoboschetti@ordineavvocatiroma.org. Requests are answered without undue delay and in any event within one month. If you believe your data has been handled unlawfully you may complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, or bring the matter before a court.
8. Automated decisions
No decision concerning you is taken by automated means, and no profiling is carried out. Every enquiry is read and assessed by a lawyer.
9. Changes to this notice
If this notice changes, the version date above changes with it, and anyone who has expressed a choice about cookies under an earlier version is asked to express it again.
Cookie notice
What is stored, and when
Nothing is stored on your device before you choose. Until you accept, this page writes only the record of your own choice, and only once you have made one. Refusing has no effect on how the page works: every part of it remains available.
This page loads no fonts, no maps, no videos and no social buttons from third party addresses. The typefaces are served from this same address, so that no request leaves your browser before you have decided.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| blf-consent | This page | Stores the choice you made in the banner, so that you are not asked again. Written whatever you choose, including refusal. | Until you clear this site's storage |
| _ga | Google Analytics | Tells one visitor from another. Written only after you accept measurement. | 24 months |
| _ga_J70C1JWWHY | Google Analytics | Keeps the state of the current visit. Written only after you accept measurement. | 24 months |
| _gcl_au | Google Ads | Attributes a visit, and any enquiry that follows, to an advertisement. Written only after you accept advertising. | 90 days |
How to change your mind
Clearing this site's storage in your browser removes the record of your choice and brings the banner back at your next visit. You can also block or delete cookies from your browser settings, and you can install the Google Analytics opt out add on, available from Google.
Consent signals
This page uses the consent mode published by Google. Before you choose, every category other than strictly necessary storage is set to denied, advertising identifiers are redacted, and nothing is written. Your choice is transmitted as a signal at the moment you make it.