COOKIE INFORMATION

Version of 10.06.2026

Notice on the use of cookies and similar technologies, given under art. 122 of Legislative Decree 196/2003 (Italian Privacy Code), Regulation (EU) 2016/679 (GDPR) and in accordance with the Italian Data Protection Authority's Decision of 10 June 2021 (“Guidelines on cookies and other tracking tools”).

1. What cookies are
Cookies are small text files that the websites you visit send to your device (computer, tablet, smartphone), where they are stored and then sent back to the site on your next visit. Similar technologies (e.g. local storage, pixel tags, web beacons, fingerprinting) perform equivalent functions and are subject to the same rules.

1.1 Classification by duration
– Session cookies: deleted automatically when the browser is closed;
– Persistent cookies: remain stored until they expire or are deleted manually.

1.2 Classification by party
– First-party cookies: set by the Controller;
– Third-party cookies: set by other parties through the site.

1.3 Classification by purpose
– Technical cookies: needed for the site to work (authentication, session, security, load balancing, saving preferences). They do not require consent, only information (art. 122(1), Italian Privacy Code);
– Analytics cookies: collect information about use of the site. They are treated as technical cookies and do not require consent only if: (i) they are used solely to produce aggregate statistics; (ii) the IP address is anonymised (masking at least the fourth octet); (iii) they are not combined with other processing or passed to third parties (Italian Data Protection Authority Guidelines of 10 June 2021, § 7.2). Otherwise, they are treated as profiling cookies;
– Profiling and marketing cookies: used to build profiles and send personalised advertising. They require the User's prior free, specific, informed and unambiguous consent.

2. Obtaining consent
On first access to legaless.it, a cookie banner is shown that allows the User to:
a) accept all cookies;
b) reject all non-technical cookies (as easily as accepting them, in line with § 8 of the 2021 Guidelines of the Italian Data Protection Authority);
c) customise their choices by category.
If no choice is made, no non-technical cookies are set. Scrolling the page, continuing to browse or interacting with elements of the site does not constitute consent.
Consent is recorded, can be demonstrated, can be withdrawn at any time and lasts a maximum of 6 months, after which the banner is shown again. The banner is also shown again if the processing conditions change significantly or new cookies are introduced.
The User can change their preferences at any time by clicking the “Manage cookie preferences” link at the bottom of every page of the site.

3. Cookies used on legaless.it
Up-to-date details of each cookie, with its name, purpose, duration and category, are available in the “Manage cookie preferences” panel on the site.
3.1 Technical cookies (no consent required)

Type	Purpose	Duration
Session and authentication (WordPress, Ultimate Member, 2FA)	Keep the User logged in and protect access	Session / until logout
Security (Wordfence, anti-CSRF)	Prevent attacks and unauthorised access	Session / persistent up to 12 months
Preferences	Remember language, area, interface choices	Up to 12 months
Cookie banner	Store the choices made on the banner	Up to 6 months
Cache and performance (LiteSpeed)	Improve the site's response times	Session

3.2 Analytics cookies treated as technical (no consent required)
Any analytics cookies used by the site are configured with anonymised IP addresses, solely for aggregate statistics, without being combined with other processing and without being passed to third parties.

3.3 Profiling and marketing cookies (consent required)
They are set only after consent is given through the banner. When enabled, they may include third-party cookies linked to social platforms, advertising networks and remarketing tools. The specific list is available in the preferences panel.

3.4 Third-party cookies
Embedded content (for example videos, maps, social widgets) may contain third-party cookies. For each provider, the panel shows the name, the purposes and the link to the third party's full privacy notice. The Controller has no access to or control over third-party cookies; to disable or manage them, refer to the notices and tools provided by the third party.

4. Managing cookies through the browser
Regardless of the banner, the User can always manage or disable cookies directly from their browser settings:
– Google Chrome: https://support.google.com/chrome/answer/95647
– Mozilla Firefox: https://support.mozilla.org/it/kb/Gestione%20dei%20cookie
– Apple Safari: https://support.apple.com/it-it/guide/safari/sfri11471/mac
– Microsoft Edge: https://support.microsoft.com/it-it/microsoft-edge
– Opera: https://help.opera.com/en/latest/web-preferences/
Disabling technical cookies may stop the site from working properly.

5. Data controller and User rights
The controller of data collected through cookies is Avv. Alessio D'Ascenzo (tax code DSCLSS94H05A345U), PEC legaless@pec.it, email supporto@legaless.it.
To exercise the rights under arts. 15-22 GDPR (access, rectification, erasure, restriction, portability, objection, withdrawal of consent) and to lodge a complaint with the Italian Data Protection Authority, please refer in full to the Privacy Policy available on legaless.it.

6. Updates
The Controller may update this Cookie Policy. The current version is always published on legaless.it. Significant changes will be notified through the cookie banner, which will ask for your choices again.

Data controller: Avv. Alessio D'Ascenzo	Tax code: DSCLSS94H05A345U
Registered office: Rome (RM), Italy	PEC: legaless@pec.it
Email: a.dascenzo@legaless.it

Party	Role	Scope of processing
Legaless® Controller	Independent controller	Operation of the Platform, Account management, hosting, security, invoicing, its own legal obligations; receiving, storing and transmitting Case data (requests, documents, chats) to prepare Quotes, assign engagements and enable communication between User and Lawyer
Assigned lawyer	Independent controller	Performance of the Professional Engagement, drafting of documents, legal defence, ethical and anti-money-laundering (AML) obligations under Legislative Decree 231/2007
Third-party Providers (Stripe, OpenAPI, Hostinger, etc.)	Processors or independent controllers (see § 9)	Technical operation of the related features

#	Purpose	Legal basis (art. 6 GDPR)	Legal basis for special categories (art. 9)
4.1	Creating and managing the Account	Performance of the contract (art. 6(1)(b))	—
4.2	Providing the Platform's features (requests, quotes, chat, signature, payments)	Performance of the contract (art. 6(1)(b))	Explicit consent where special categories of data are involved (art. 9(2)(a)); or the establishment, exercise or defence of legal claims (art. 9(2)(f))
4.3	Compliance with the Controller's legal obligations (tax, accounting, orders from authorities, DSA)	Legal obligation (art. 6(1)(c))	Art. 9(2)(g) (reasons of substantial public interest) where applicable
4.4	Platform security, fraud prevention, access logs	Legitimate interest (art. 6(1)(f))	—
4.5	Customer support and complaint handling	Performance of the contract / legitimate interest	—
4.6	Sending service communications (notifications, Case updates)	Performance of the contract (art. 6(1)(b))	—
4.7	Sending the Controller's newsletters / promotional communications	Consent (art. 6(1)(a)), which can be withdrawn at any time	—
4.8	Soft spam about similar Services already requested (art. 130(4), Legislative Decree 196/2003)	Legitimate interest, with the right to object	—
4.9	Defence of a right in court or out of court	Legitimate interest (art. 6(1)(f))	Art. 9(2)(f)
4.10	Aggregate statistics and service improvement	Legitimate interest (art. 6(1)(f))	—

Category	Retention period
Data of Accounts in use	For the duration of the relationship
Data relating to completed Cases (Platform side)	Documents and chats from completed Cases: 24 months from completion. Quotes, engagement letters and transaction data: 10 years from completion of the Case (in line with the limitation periods under art. 2946 of the Italian Civil Code and the record-keeping obligations under art. 2220 of the Italian Civil Code)
The Controller's tax and accounting records	10 years (art. 2220 of the Italian Civil Code and art. 22 of Presidential Decree 600/1973)
Technical and security logs	Up to 12 months, unless retention is needed for investigations
Marketing data (consent)	Until consent is withdrawn, and in any case no longer than 24 months after the last interaction
Inactive account	After 24 months of inactivity, the User is asked to confirm whether they wish to keep the Account; if there is no reply within 30 days of the message, the Account is closed and the data deleted or anonymised (subject to the retention obligations above)

Provider	Function	Location and transfers
Stripe Payments Europe Ltd.	Online payments	Based in the EU (Ireland). Any transfers to Stripe Inc. (USA) take place on the basis of the European Commission's Standard Contractual Clauses (Decision 2021/914) and, where applicable, the EU-US Data Privacy Framework.
Openapi S.p.A.	eIDAS electronic signature	Registered office in the EU (Italy).
Hostinger International Ltd.	Hosting and infrastructure	Based in the EU/EEA (European data centres).