In plain words: if a website collects information that makes it possible to identify a person, such as name, email or browsing data, that information must be processed according to a few general principles. These include transparency towards the user, use of data only for declared purposes, collection limited to what is needed and adequate protection. For companies in Como and Brianza the website is often the first point where this data enters the company. This page is for information only and is not legal advice.
What it means in practice for a website
From our studio in Cantù we turn the principles of the regulation into concrete technical choices on the website, in agreement with the client's legal advisor.



Doubts about how your website processes data?
For your specific case, check with your legal advisor or DPO: we work together with them on the technical side of the website. Write to us to find out how we work. Also read the page Privacy policy, GDPR, nLPD and cookies.
A company website processes personal data collected from contact forms, newsletters, private areas, job applications and statistics tools. For companies in Cantù and Como the exact list depends on the tools active on the site: we map them, while the legal assessment is up to your legal advisor or DPO.
The record of processing activities is an internal document describing what personal data a company processes, for what purposes and with which tools. For companies in Como and Milan the website is one of the items to consider. Whether and how to keep it is assessed by your legal advisor or DPO.
The data processor is the external party that processes data on the company's behalf, for example a hosting or newsletter provider. For company websites between Como and Milan we list the active services; when an appointment is needed is assessed by your legal advisor or DPO.
For the newsletter, consent is, in general, a voluntary and specific action by the user, accompanied by a clear notice about who is writing and how to unsubscribe. We develop sign-up forms for companies in Como and Brianza; your legal advisor or DPO assesses the specific case.
The GDPR requires security measures appropriate to the risk, proportionate to the data processed and the tools used. For a company website in Cantù or Brianza this means hosting, connection, access, updates and backups; what is appropriate in your case is assessed by your legal advisor or DPO.


