Cookie Policy

Cookies are small text files that websites send to the user’s device, where they are stored and sent back on later visits. They can, for example, remember preferences or — only if authorised — help measure how the site is used.

Cookies do not give access to other information on your device and cannot install viruses or malware.

The controller for cookie-related processing on this site is Studio Legale LTC, Via Giovanni Amendola 168/5, 70126 Bari, Italy — segreteria@studiolegaleltc.it — 0804037045.

For personal data processing in general, please see the Privacy notice.

On the first visit a banner appears with a short notice. You can accept all cookies, reject non-essential ones, or customise preferences (analytics and marketing).

Your choice is stored in a first-party technical cookie named ltc_consent, so the banner is not shown on every visit. You can change or withdraw consent at any time via the cookie settings available on the site.

Analytics and marketing cookies are activated only after consent. Without consent, only necessary cookies remain active.

These cookies are required for the site to work and to remember consent preferences. They do not require additional consent beyond what applies to technical cookies.

In particular, the ltc_consent cookie stores the choice id, consent notice version, timestamp and category status (necessary always on; analytics and marketing according to your preference). Indicative lifetime: up to about 180 days.

The site provides optional analytics and marketing categories, managed by the banner. With consent to the analytics category, the site uses Google Analytics 4 (Google) to measure page use in aggregate form. The Google Analytics 4 script is loaded only after that consent and may then set measurement cookies (for example _ga). Any marketing tools are loaded only after consent to the marketing category.

If you do not consent to analytics, or you have not chosen yet, Google Analytics 4 is not loaded and no page views are sent. If you withdraw analytics consent in the cookie settings, further hits stop. We do not publish generic lists of advertising vendors that this version of the site does not use.

The Contacts page uses Cloudflare Turnstile, an anti-spam check that helps confirm a real user is submitting the form. Cloudflare may use cookies or similar technologies when the widget is shown, solely for form security.

Without completing the check, the form cannot be submitted.

Contact-form messages are delivered to the secretariat via Resend, a server-side email service. Resend does not set a browser cookie for this service: form data (name, email, phone, message) are sent to the firm’s server and then emailed.

Public notifications require a separate choice and browser permission, requested only after clicking «Enable notifications». Cookie-banner «Accept all» or «Reject non-essential» does not change that choice. Firebase Cloud Messaging uses a service worker without offline caching of pages or client data, a Push API subscription and technical browser storage, including IndexedDB. localStorage ltc:public-push-device contains the token and management credential; ltc:public-push-dismissed remembers closing the invitation for thirty days. These technologies provide an optional function requested by the user, not advertising profiling.

Unsubscribe using the bell in the header. If it is hidden because notifications are disabled site-wide, block browser permission or contact the firm to delete your registration. Deleting only local data does not necessarily remove the server registration. Staff registrations are separate, with a five-day HttpOnly ltc-session cookie (__Host-ltc-session in production); Firebase Authentication uses technical storage during Google sign-in.

If voluntarily provided, first and last names are also stored in ltc:public-push-device with the token and management credential to preserve the subscription during token renewal. They are not required to enable notifications and are not used for advertising profiling. Unsubscribing on the site deletes this local data and the server record; deleting only localStorage does not automatically delete the server record. Contact the firm to request correction or deletion.

For new subscriptions, verified email is also stored in ltc:public-push-device with the token, management credential and any names to preserve registration during token renewal. The code and verification proof are not stored in localStorage. Revocation removes local data and the server device record; existing subscriptions without email remain valid.

The website collects appointment requests and does not create direct bookings. After the secretariat checks and confirms a request, the confirmed time and details needed for the invitation are added to the firm's shared Google Calendar; Google sends the invitation. No Google Calendar is embedded on the page.

To document your choice, the firm may store an audit log (in Google Cloud Firestore) with consent id, preferences, action (accept all / reject non-essential / customise), locale, truncated user-agent and a hashed IP address. The raw IP is not stored.

You can reopen the cookie preferences panel from the site at any time.

You can also restrict or delete cookies in your browser settings. Disabling necessary cookies may affect some features (for example remembering your banner choice).

General cookie guidance: www.aboutcookies.org. For the Italian Data Protection Authority: www.garanteprivacy.it.

This Cookie Policy may be updated if services or the law change. The last update date is shown at the top of the page.

Cookie choices are recorded in Google Cloud Firestore with identifier, version, language, categories, action, date, truncated user-agent and an IP hash; the raw IP is not retained. Sanity is used for editorial content, not this register. Authorized staff may read and delete events with an operation audit, but cannot change consent. Deleting an event does not change browser preferences: use the website cookie settings to change your choices. Automatic deletion is not enabled; contact the firm to exercise your rights.