fiscalcode@italylawfirms.com 
Last updated: June, 22th, 2026
This Privacy Policy explains how personal data is collected, used, and protected when you use the website fiscalcodeitaly.it (the “Website”) and the related services for obtaining and managing an Italian tax code (codice fiscale), provided by ILF Law Firm.
This Policy is provided in accordance with Regulation (EU) 2016/679 (“GDPR”).
1. Owner and Data Controller
Italy Law Firms – Avv. Michele Ambrogio
Via G.Orsini, 104 – 50126 Florence, Italy
VAT no. (P.IVA): 06651960483
PEC: avv.michele.ambrogio@pec.it
Owner contact email: info@italylawfirms.com
2. What Data We Collect
Depending on how you interact with the Website, we may collect:
a) Data you provide to obtain your fiscal code or to use our services
Full name, date and place of birth, gender, citizenship, residential address, country of residence, passport or identity document details, email address, telephone number, and any other information you submit through our application or “Ask the Lawyer” forms.
b) Payment data
When you purchase a service, payment is processed by PayPal. We do not store your full card or PayPal account details on our servers; we receive only confirmation of payment and limited transaction data. PayPal processes your data under its own privacy policy.
c) Comment data
When you leave a comment, we collect the data shown in the comment form, your IP address, and your browser user-agent string to help spam detection. An anonymized string (hash) created from your email address may be sent to the Gravatar service to check whether you use it (Gravatar privacy policy: https://automattic.com/privacy/).
d) Technical, navigation, and tracking data
IP address, browser information, device information, approximate location (city, with latitude/longitude of the city), pages visited, session statistics, usage data, and data collected through cookies, trackers, and similar technologies (see Section 9 and the Cookie Policy).
3. Purposes and Legal Basis of Processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the requested service (obtaining/managing your fiscal code, legal assistance) | Performance of a contract – Art. 6(1)(b) |
| Processing payments via PayPal | Performance of a contract – Art. 6(1)(b) |
| Replying to inquiries via contact / “Ask the Lawyer” forms | Performance of a contract / pre-contractual measures – Art. 6(1)(b) |
| Legal, accounting, and tax obligations | Legal obligation – Art. 6(1)(c) |
| Spam and bot protection (Google reCAPTCHA) | Legitimate interest – Art. 6(1)(f) |
| Analytics | Consent – Art. 6(1)(a) |
| Advertising, remarketing, behavioral targeting, heat mapping, session recording, surveys | Consent – Art. 6(1)(a) |
Providing the data marked as mandatory in our forms is necessary to deliver the service; failure to provide it may make it impossible for us to fulfil your request.
4. Third-Party Services and Tools
This Website uses the following third-party services, which process personal data (mainly trackers and usage data) for the purposes indicated. Non-essential services are activated only after you give consent through the cookie banner.
Analytics
- Woo Commerce Stats
- Google Analytics (Universal Analytics) — Trackers; Usage Data
- Google Analytics 4 — browser information; city; device information; latitude/longitude (of city); number of users; session statistics; Trackers; Usage Data
- Google Search Console
Spam and Bot Protection
- Google reCAPTCHA — answers to questions; clicks; keypress events; motion sensor events; mouse movements; scroll position; touch events; Trackers; Usage Data
Displaying Content from External Platforms
- Google Fonts — Trackers; Usage Data
Tag Management
- Google Tag Manager — Usage Data
5. How We Share Your Data
Your data may be shared with:
- Professionals and staff of the Firm acting under authority and instruction;
- The Italian Revenue Agency (Agenzia delle Entrate) and other public authorities, where necessary to obtain or manage your fiscal code;
- Third-party service providers acting as data processors (PayPal, hosting and email providers, and the analytics, advertising, and security tools listed in Section 4), appointed under Art. 28 GDPR;
- Spam-detection services that may automatically check visitor comments.
We do not sell your personal data.
If you request a password reset (for registered users), your IP address will be included in the reset email.
6. International Data Transfers
Some of the services listed above (e.g. Google, Hotjar, LinkedIn, PayPal) may transfer data outside the European Economic Area. Such transfers are carried out on the basis of an adequacy decision or appropriate safeguards (e.g. Standard Contractual Clauses) under Chapter V of the GDPR.
7. Data Retention
- Service and contractual data: retained for the duration of the relationship and afterwards for the period required by applicable legal, tax, and accounting obligations (generally up to 10 years).
- Inquiry/contact data: retained for the time needed to handle your request and a reasonable period thereafter.
- Comments and related metadata: retained indefinitely so follow-up comments can be recognized and approved automatically.
- Registered-user profile data: retained until the account is deleted.
- Analytics, advertising, and tracking data: retained according to the retention periods set by each third-party service.
8. Your Rights
Under Articles 15–22 GDPR you have the right to:
- access your personal data and obtain a copy (data portability);
- request rectification of inaccurate data;
- request erasure (“right to be forgotten”);
- request restriction of, or object to, processing;
- withdraw consent at any time (without affecting prior lawful processing).
This does not include data we are required to keep for administrative, legal, or security purposes.
To exercise your rights, contact info@italylawfirms.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
9. Cookies and Opting Out of Interest-Based Advertising
The Website uses cookies and similar technologies. Technical cookies are necessary for the Website to function; analytics, advertising, remarketing, and session-recording cookies are installed only with your consent through the cookie banner, managed via Google Tag Manager.
You can manage or withdraw your preferences at any time through the cookie banner or your browser settings. In addition to the opt-out features offered by the individual services listed above, you can learn more about opting out of interest-based advertising in the dedicated section of the Cookie Policy.
10. Embedded Content from Other Websites
Articles on this Website may include embedded content (e.g. videos, images, articles). Embedded content from other websites behaves exactly as if you had visited that other website, and those sites may collect data about you, use cookies, embed third-party tracking, and monitor your interaction with that content.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The current version is always available on this page, with the “Last updated” date shown above.