Last updated: 10 November 2025

1) Privacy Notice

Data Controller: Studio Maffeis – Prof. Avv. Daniele Maffeis

Address: Piazza del Duomo, 16, 20122 Milano – P.IVA 11513940152

Contact email: segreteria@studiomaffeis.eu

1.1) Categories of data processed

• Browsing data (technical logs, IP addresses, user‑agent): used for security, site operation and aggregated statistics.

• Cookies and similar technologies: see the Cookie Policy.

No contact forms: the site has no forms; contacts occur via public contact details.

1.2) Purposes and legal bases

• Legitimate interests of the Controller: security, abuse prevention, technical maintenance (necessary/technical cookies, server logs, IndexNow protocol).

• User consent: activation of “Analytics/experience” tools and cookies (Google Analytics 4, Microsoft Clarity).

1.3) International data transfers

Google LLC and Microsoft Corporation may process data in non‑EU countries. Transfers rely on Standard Contractual Clauses (SCCs) and the vendors’ supplementary measures. See their privacy notices for details.

1.4) Retention

• Technical logs: up to 7–30 days unless required longer for security.

• Cookies: according to vendor settings – see the Cookie table.

• Aggregated analytics data: according to GA4 settings (typically 2–14 months, configurable).

1.5) Data subject rights

Data subjects may exercise their rights under the GDPR (access, rectification, cancellation, restriction, opposition, portability and withdrawal of consent) by writing to segreteria@studiomaffeis.eu. You may also lodge a complaint with the relevant supervisory authority.

2) Cookie Policy

2.1) What cookies are

Cookies are small files saved on your device. They can be:

• Technical/necessary: essential for website operation; do not require consent.

• Analytics/experience: require prior consent and can be disabled via the banner.

2.2) Tools used on this site

A) Technical cookies (necessary) – no consent required

• Consent-preference cookies (banner): remember your choice.

• IndexNow: a server‑side protocol notifying search engines when pages change. It does not set cookies on your device; listed here for transparency.

B) Analytics / experience – consent required

• Google Analytics 4 (Google LLC) — Measurement ID: G‑NX4EGGX2Z1 — Purpose: traffic and performance measurement. Data: online identifiers (e.g., client ID), device/site‑usage info; IP anonymized. Legal basis: consent. Possible non‑EU transfers (SCCs).

• Microsoft Clarity (Microsoft Corporation) — Project ID: qwr4yl42h4 — Purpose: user‑experience analytics (heatmaps, session replay). Data: on‑site interactions, device info; we do not collect form fields (no forms present). Legal basis: consent. Possible non‑EU transfers (SCCs).

Note: GA4 and Clarity are loaded only after your consent. You can review your choices at any time via the “Cookie settings” link in the footer.

2.3) Durations (indicative)

• Consent/banner cookies: 6–12 months.

• GA4 data retention: 2–14 months (configurable).

• Clarity: cookies/sessions per Microsoft documentation (variable).

2.4) Managing cookies

You can change your preferences from our banner or via the “Cookie settings” link. Alternatively, you can block/limit cookies from your browser settings.

3) Compliance notes (for site owner)

• Banner categories: “Necessary” (default ON) and “Analytics/experience” (opt‑in).

• Prior blocking: GA4/Clarity load only after consent (implemented with CookieYes FREE + snippet).

• Consent log and “Review consent” link in footer.

• IndexNow: no cookies; no consent required.

4) Contact

For any questions about privacy and cookies: segreteria@studiomaffeis.eu

Studio Maffeis – Prof. Avv. Daniele Maffeis