Privacy Notice
Pursuant to Regulation (EU) 2016/679 (“GDPR”) and the applicable national legislation on the protection of personal data, this notice describes how the personal data of users who visit the website of Studio Ruga • Dottori Commercialisti and contact the Firm through the contact details or tools available on the website are processed.
Data Controller
The Data Controller is Massimo Ruga, Chartered Accountant, owner of Studio Ruga • Dottori Commercialisti.
Professional offices: Via Brigata Liguria 3/7, 16121 Genoa (GE), Italy · Via Cerva 1, 20122 Milan (MI), Italy
Italian Tax Code: RGUMSM85A23D969V
VAT number: 03047810993
Genoa Tel.: +39 010 3755745
Milan Tel.: +39 02 8717 8415
Mob.: +39 347 8185684
E-mail: info@studioruga.com
Certified e-mail (PEC): massimo.ruga@pec.it
Types of Personal Data Processed
During normal browsing, the IT systems and software procedures used to operate the website may collect certain data whose transmission is inherent in the use of Internet communication protocols, such as IP addresses, information relating to the device and browser used, the date and time of the request and other technical data necessary for the operation and security of the website.
The website may also process personal data voluntarily provided by users through any contact forms, e-mail communications or other tools made available on the website, such as name, contact details, the content of the request and any additional information necessary to handle it.
Purposes and Legal Bases of Processing
Personal data may be processed in order to ensure the proper operation and security of the website, respond to users’ requests, manage communications and appointments, comply with legal obligations and, where consent is required, carry out statistical analysis regarding the use of the website.
Depending on the circumstances, the legal bases for the processing are the performance of pre-contractual measures taken at the request of the data subject, compliance with legal obligations, the legitimate interest of the Data Controller in ensuring the proper operation and security of the website, and the consent of the data subject for processing activities that require it.
Provision of Personal Data
The provision of personal data requested through contact forms is necessary in order to allow the Firm to handle the relevant request. Failure to provide such data may make it impossible to respond to or process the request.
Consent to the use of cookies or statistical tools that are not strictly necessary is optional and may be refused or withdrawn without preventing access to the website content.
Cookies and Analytics Tools
The website uses technical cookies that are necessary for its operation and may use cookies and other analytics tools, including Google Analytics, in order to obtain statistical information regarding the use of the website.
Cookies and tools that are not strictly necessary are used only where permitted by applicable law and in accordance with the preferences expressed by the user through the Complianz consent management system.
For detailed information regarding the cookies used, their purposes and duration, and to change your preferences, please refer to the Cookie Policy available on the website.
Processing Methods and Security
Personal data are processed using IT and electronic tools, with appropriate technical and organisational measures designed to protect them against unauthorised access, loss, disclosure, alteration or destruction.
Recipients and Service Providers
Personal data may be processed by parties providing the Data Controller with technical and organisational services necessary for the management of the website and communications, duly authorised or appointed as data processors where required.
The website is hosted and managed through WordPress.com/Automattic services and uses Jetpack. Google Analytics may be used for statistical measurement in accordance with the preferences expressed by the user.
Personal data are not disseminated, except where required by law.
Transfers of Personal Data Outside the EEA
The use of certain technology service providers may involve the processing or transfer of personal data outside the European Economic Area. In such cases, processing is carried out in accordance with the requirements of the GDPR and through the applicable transfer mechanisms, including, where relevant, adequacy decisions and contractual safeguards provided for by applicable law.
Data Retention
Personal data are retained for the period necessary to achieve the purposes for which they were collected and, thereafter, for any additional period required by applicable law or necessary for the protection of the Data Controller’s rights.
Personal data relating to contact requests are retained for the time necessary to manage the request and any resulting relationship. Retention periods relating to cookies and analytics tools are specified in the Cookie Policy.
Rights of the Data Subject
Where provided for by the GDPR, data subjects may exercise the rights of access to their personal data, rectification, erasure, restriction of processing, data portability and objection to processing.
Where processing is based on consent, the data subject may withdraw such consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Requests relating to the exercise of data protection rights may be sent to info@studioruga.com or by certified e-mail (PEC) to massimo.ruga@pec.it.
Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), in accordance with the procedures provided for by applicable law.
Changes to this Privacy Notice
This Privacy Policy may be updated as a result of changes in legislation, changes to the services used by the website or changes in the way personal data are processed. The version published on this page is the version in force from time to time.
Last updated: September 2026.
