PERSONAL DATA PROCESSING POLICY
1. Data Controller
The data controller for personal data processed through this website is: Iuliia Medvedeva, Via Dei Calchi Taeggi, 27, Milano, MI, 20152, Italy VAT number (P.IVA): 10641890966 Email: contact@emigrantista.com
No Data Protection Officer has been appointed, as the processing carried out does not meet the criteria for mandatory appointment under Article 37 GDPR.
2. What Data Is Processed
Depending on how you interact with this website, we may process: your name, email address, phone number, the content of your inquiry or request, payment details (if you order paid services), your social media handle, and case materials (only where you have given separate consent for promotional use).
3. Purposes and Legal Basis for Processing
Performance of the service agreement (responding to your request, providing consultations) — legal basis: Article 6(1)(b) GDPR.
Responding to inquiries prior to entering into an agreement — Article 6(1)(b) GDPR.
Sending informational and promotional materials — Article 6(1)(a) GDPR (separate consent). This consent is not a condition for entering into the main service agreement and may be withdrawn at any time without affecting services already provided.
Using testimonials, your social media handle, or case materials for promotional purposes — Article 6(1)(a) GDPR (separate consent), given voluntarily and independently of accepting the service agreement.
4. Source of Data
Personal data is provided directly by you when filling out forms on this website or corresponding by email or messaging apps.
5. Recipients of Data
Data may be shared with the following categories of recipients, strictly to the extent necessary to provide services: video-communication providers (Zoom), messaging apps (Telegram, WhatsApp), our email and office provider (Google Workspace), and, where relevant to your specific case, an accountant or co-counsel.
6. International Data Transfers
Zoom, Telegram, WhatsApp (Meta), and Google Workspace are providers based outside the European Economic Area, and your data may accordingly be processed outside the EEA. Where applicable, these providers rely on their own safeguards for such transfers (such as Standard Contractual Clauses and/or participation in the EU-U.S. Data Privacy Framework). We recommend reviewing each provider's own privacy policy for the specific safeguards that apply to your data.
7. Data Retention Period
Data is retained for the duration of the service agreement and for 10 years thereafter, in accordance with Italian civil and tax law record-keeping requirements.
8. Your Rights as a Data Subject
Under Articles 15–22 GDPR, you have the right to:
Access your personal data (Art. 15) Request rectification of inaccurate data (Art. 16) Request erasure of your data ("right to be forgotten") (Art. 17) Request restriction of processing (Art. 18) Object to processing, including for direct marketing purposes (Art. 21) Request data portability (Art. 20) Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3))
To exercise any of these rights, contact us at contact@emigrantista.com.
9. Right to Lodge a Complaint
You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), www.garanteprivacy.it, or with the supervisory authority of your habitual residence, place of work, or place of the alleged infringement, in accordance with Article 77 GDPR.
10. Is Providing Your Data Mandatory?
Providing your name, email, and phone number is necessary to respond to your inquiry and provide services. If you do not provide this data, we will not be able to process your request or perform the service agreement. Providing data for marketing purposes or promotional use of your case is entirely voluntary and has no effect on your ability to receive services.
11. Automated Decision-Making
No automated decision-making or profiling, within the meaning of Article 22 GDPR, is carried out on the basis of your personal data.
12. Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration.
13. Changes to This Policy
This policy may be updated from time to time. The current version is always available at emigrantista.com/en/privacy-policy.
Last updated: July 22, 2026