This page explains which personal data the website of Studio Notarile Cristina Puligheddu collects, why, and for how long it is kept. It covers the website only: the processing of data within notarial activity is governed by a separate notice, handed out at the office. In case of doubt, the Italian version of this notice prevails.
Last updated: September 2026
The data controller is Studio Notarile Cristina Puligheddu, with its main office at Viale Principe Umberto 11, 07026 Olbia (SS) and its secondary office at Galleria Emanuela Loi 9, 08100 Nuoro (NU) — VAT no. 01206200915.
For any matter concerning personal data you can write to olbia@notaiopuligheddu.it or call +39 0789 27493.
The website collects data only when you fill in one of the two forms. There is no implicit collection, no profiling and no data bought from third parties.
The data in the forms is used solely to follow up on your request: to set the appointment and be able to contact you in case of changes, or to check the copy request and reply to you. It is not used for advertising or newsletters.
For the same purposes the website sends you a few service emails: the booking confirmation, with the link to cancel it, a reminder the day before the appointment, and the acknowledgement of a deed-copy request.
The legal basis is the performance of pre-contractual measures taken at your request (art. 6(1)(b) of Regulation (EU) 2016/679). Providing the data marked as mandatory is necessary: without it, the request cannot be processed.
Booking data stays in the firm's appointment register for twenty-four months from the date of the appointment, as a record of the contacts received. Deed-copy requests are kept for the same period from the moment they are dealt with.
If the request then leads to a professional relationship, the data becomes part of the file and follows the retention periods set by notarial law and anti-money-laundering legislation, as set out in the notice handed out at the office.
Once these periods have passed, deletion is automatic. To protect the forms from automated submissions, the website also records, at each submission, an encrypted fingerprint (hash) of the IP address, never the address itself: it is used only to count submissions made close together and is deleted within a day.
The data can be viewed by the Notary and the firm's staff, through a password-protected private area. It is not disclosed to third parties or made public.
For the technical operation of the website we rely on two providers, which act as data processors and store the data on servers in the European Union: Vercel Inc. for hosting the website (Frankfurt region) and Neon Inc. for the database (central EU region).
Service emails are sent through Resend (Plus Five Five, Inc.), also a data processor, which receives only the data needed to deliver the message: email address, name and content of the email. Resend is based in the United States; any transfer takes place on the basis of the safeguards provided by the Regulation (arts. 45 and 46), such as the European Commission's standard contractual clauses.
Apart from this, no transfer of data outside the European Economic Area is envisaged; the only other possible exception is the Google map, described below and activated only by you.
In the Contact section, a Google Maps map is available for each office. The map is not loaded when the page opens: it appears only if you press "Show the map". Until you do, no data is sent to Google.
If you load it, the service is provided by Google (Google Ireland Limited, which may use Google LLC in the United States): Google may receive your IP address and information about your device and set its own cookies, according to its own notice (policies.google.com/privacy). The legal basis is your consent, given by pressing the button (art. 6(1)(a) of the Regulation). Alternatively, the "Open in Google Maps" link opens the service in a new tab, without embedding it in the website.
The website does not use profiling cookies, does not host statistics or traffic-analysis tools and does not embed social network buttons or content. For this reason you will not find a consent banner when you open the website: the only content that can set third-party cookies, the Google map, is activated only when you press the relevant button.
The only cookie set is the session cookie of the private area reserved for the firm's staff: it is a technical cookie, needed to keep the work session open, it expires after eight hours and is never set for visitors of the public website.
You can ask at any time to access your data, to have it corrected or deleted, to restrict its processing or to receive it in a machine-readable format, and to object to the processing in the cases provided for (arts. 15-22 of the Regulation). To do so, write to the addresses given above: you will receive a reply within one month.
If you believe that the processing of your data violates the Regulation, you can contact the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
