This Privacy Notice set out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us and the purpose for our collection of it. Please read the following carefully to understand how we will treat your data.

Data protection

For the purpose of the Legislative Decree 196/2003 and the provisions of Regulation (EU) 2016/679 (the General Data Protection Regulation or GDPR) and in particular taking into account the recommendation of the Article 29 Working Party, Mora & Associati (in the person of Giuseppe Broccoli as Partner in charge) is the data controller of your data. 

This Notice explains how we may collect and process personal data about:

  • clients and prospective clients;
  • visitors to our Website and subscribers to our online services;
  • job applicants and current employees.


What personal information do we collect and why do we collect it?

We may collect and process the personal information about you including information those:

  • that you provide by filling in forms on our Website (name, surname and email address);
  • that you provide when you use our professional services as a client (name, surname, professional role, details of the company for which you work and other information strictly necessary to carry out our legal services);
  • images captured by our offices’ CCTV cameras (images will be recorded for security purposes and for the prevention of crime);
  • that you provide in correspondence that you send to us;
  • provided to us as part of a job application you make;
  • concerning your visits to our Website (including but not limited to traffic data) and the resources that you access.


How we use your personal data

The way we collect and process your personal data varies depending on our relationship with you. In each case the purposes for which we request the information will be clear from the context in which it is acquired. These include:

  • providing our legal services to you or an entity for which you work;
  • verifying your identity, including for Anti-Money Laundering purposes;
  • keeping a record of the services you have subscribed to and deliver services you may have requested;
  • administration, billing and record-keeping purposes;
  • communicating with you by telephone, email, fax or post
  • meeting our legal, regulatory and contractual obligations arising from any our relationship with you;
  • providing and improving customer service and support;
  • administering our Website, enhancing operational capabilities and for internal operations
  • to inform you of legal developments that may affect you or to send you informational and educational content or events which we think may be of interest to you (unless you have opted out of receiving such marketing communications).


Disclosure of your personal data

We will only disclose your personal information to another person or organisation where we:

  • need to share the information to provide a product or service you have requested;
  • need to send the information to persons or organisations that work on our behalf to provide a product or service to you;
  • are required to disclose the information in order to comply with the law or the requirements of a regulatory authority.


Our legal basis for using your personal data

Our use of your personal data as outlined above is subject to different legal bases for processing, including where necessary for:

  • the purposes of the performance legal services to you in the context of a contract we enter into with you or prior to entering into a contract with you;
  • our legitimate interests, for example in providing legal services to an entity you work for, managing and monitoring our website operation, preventing fraud and for our business compliance purposes;
  • compliance with our legal and regulatory responsibilities;
  • the purpose of providing you with informational and educational content that you have expressly consented to receive from us.

If you do not agree to provide your personal data to us we may not be able to provide you with legal services or process your application for other services or employment. Where our use of your data is not necessary for one of the purposes outlined above we may use it in a particular way with your consent (for example if you have registered to attend an event we are hosting or to receive legal updates). Where we ask for your consent you are free to refuse our use of your personal data for those purposes and you may withdraw your consent at any time by contacting us using the details set out below. This shall not affect the lawfulness of any processing that was based on your consent before you withdrew it.


Storage and transfer of your personal data

The personal information that we collect from you may be transferred to and stored at a destination outside the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us or one of our suppliers or where your instruction has international implications so that we need to share your personal data with foreign counsel. Before we transfer your personal data outside the EEA we will take all steps reasonably necessary to ensure that any such transfer is made securely and that there is adequate protection in place in order to protect your personal data, as required by the Act and Chapter V of the GDPR. Please contact us if you wish to obtain more information regarding relevant safeguards. By submitting your personal information you agree to this transfer, storing or processing outside the EEA.


Retention of your personal data

We will retain your personal information for a maximum of five years and in any event so long as is reasonably necessary for the purpose for which it was obtained and in accordance with our legal obligations and follow our data destruction policy and processes thereafter.


Links to other websites

This Notice refers only to our Website and does not extend to any website to which you may link by using the hypertext links within our Website.


Your rights

Your rights are protected by law and we are committed to respect your rights. Please contact us in writing, by email or telephone if you have any queries in relation to your rights. Please note these rights do not apply in all circumstances.

Right of access – you have the right of access to your personal data that we hold.

Right to rectify your personal information – if you discover that the information we hold about you is inaccurate or incomplete, you have the right to have this information rectified.

Right to be forgotten – you may ask us to delete permanently information we hold about you in certain circumstances. This right is not absolute and it may not be possible for us to delete the information we hold about you, for example, if we have an ongoing contractual relationship or are required to retain information to comply with our legal obligations.

Right to restriction of processing – in some cases you may have the right to have the processing of your personal information restricted. For example, where you contest the accuracy of your personal information, its use may be restricted until the accuracy is verified.

Right to object to processing – you may object to the processing of your personal information (including profiling) when it is based upon our legitimate interests. You may also object to the processing of your personal information for the purposes of direct marketing and for the purposes of statistical analysis.

Right to data portability – you have the right to receive, move, copy or transfer your personal information to another controller when we are processing your personal information based on consent or on a contract and the processing is carried out by automated means.



Please refer to our Cookies Policy to understand what cookies we use. 



Mora & Associati put all the necessary efforts to ensure the security of our Website and your personal information and we use the services of third parties only if they guarantees the security of our website and of your data . Only authorised personnel and contractors have access to your information.  We will keep your information secure by taking appropriate technical and organisational measures against unauthorised or unlawful processing, accidental loss, destruction and damage. 

The Blog of Mora & Associati makes use of the HubSpot platform, Inc.; 25 First St, 2nd Floor, Cambridge, MA 02141, USA. HubSpot relies on the EU-U.S. Privacy Shield Framework. Further details can be found here.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information we cannot guarantee the security of your personal information transmitted to our Website; any transmission is at your own risk.  


Contact us

If you have any questions about how we treat your personal data and protect your privacy, or if you have any comments or wish to seek to exercise any of your rights, please contact Giuseppe Broccoli at Mora & Associati, Milan, Via Sant'Orsola 3 - 20123 at