Privacy Policy

Last updated: 8 August 2026

This Privacy Policy explains how De Matteis Law collects and uses personal data through this website and when you contact us or apply for a position with the firm.

1. Who is the data controller?

The data controller is De Matteis Law, whose principal office is at Via dei Monti Parioli 12, 00197 Rome, Italy. We also operate from Avenue des Courses 18, 1050 Brussels, Belgium.

For privacy enquiries, please contact contact@dematteis.law. Recruitment enquiries and applications may be sent to careers@dematteis.law.

2. Personal data we collect

We may process the following categories of personal data:

  • Technical data: IP address, browser and device information, requested pages, date and time of access, and security or error logs generated by our hosting and security providers.
  • Communications: your name, contact details, organisation, role and the contents of messages or documents you send to us.
  • Recruitment data: your CV, cover letter, writing sample, professional qualifications, employment history and any other information you choose to provide in connection with an application.

Please do not send us confidential information concerning a client or third party unless you are authorised to do so.

3. Why we process personal data

We process personal data to:

  • operate, protect and maintain the website;
  • respond to enquiries and communicate with clients, prospective clients and professional contacts;
  • provide legal services and administer our professional relationships;
  • assess applications and manage recruitment; and
  • comply with legal, regulatory and professional obligations and establish, exercise or defend legal claims.

Depending on the circumstances, our legal bases are the steps taken at your request before entering into a contract, performance of a contract, compliance with legal obligations and our legitimate interests in operating and protecting our practice, responding to professional enquiries and recruiting suitable candidates.

4. Cookies and tracking technologies

This website does not use analytics, advertising or profiling cookies, and it does not use comparable technologies to track visitors for those purposes.

Strictly necessary technical cookies may be used only where required for website security, administration or to provide a function requested by the user. They are not used to analyse browsing behaviour or create user profiles. Because the public-facing website does not use non-essential cookies or tracking technologies, no cookie-consent banner is displayed.

5. Service providers and recipients

Personal data may be processed on our behalf by providers of website hosting, security, email, document storage and other technical services. Certain resources, such as web fonts, may be delivered by external technical providers, which may receive an IP address and standard connection information required to deliver those resources.

We may also disclose personal data to professional advisers, public authorities or courts where necessary and legally permitted. We do not sell personal data.

6. International transfers

Some service providers may process personal data outside the European Economic Area. Where required, we rely on an adequacy decision, standard contractual clauses or another lawful transfer mechanism and apply appropriate safeguards.

7. How long we retain personal data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with legal and professional obligations. Technical and security logs are kept for the period necessary for security and troubleshooting, subject to the settings of our providers. Professional correspondence and matter-related information may be retained for the applicable limitation periods and in accordance with our professional obligations.

Recruitment materials are generally retained for no longer than 12 months after the conclusion of the relevant recruitment process, unless a longer period is required by law or agreed with the candidate.

8. Your rights

Subject to the conditions set out in applicable law, you may request access to, rectification or erasure of your personal data, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of earlier processing.

To exercise your rights, please contact contact@dematteis.law. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

9. Security

We use appropriate technical and organisational measures designed to protect personal data. No online service can, however, guarantee absolute security.

10. Third-party websites

This website may contain links to third-party websites. Their processing of personal data is governed by their own privacy policies.

11. Changes to this Policy

We may update this Privacy Policy when our services, technologies or legal obligations change. The date of the latest revision appears at the top of the page.