Cookie Policy
Extended notice on cookies and tracking technologies under the ePrivacy Directive, the GDPR and the Italian Data Protection Authority guidelines of 10 June 2021. Last updated: 2026-09-02.
1. What cookies are
Cookies are small text files stored on your device by websites. Equivalent technologies — pixels, web beacons, local storage, SDKs and fingerprinting — are treated identically for consent purposes.
This site uses three categories: strictly necessary cookies, measurement cookies and marketing/advertising cookies.
2. Strictly necessary cookies (no consent required)
These are indispensable to deliver the service you request and cannot be switched off. Legal basis: Article 5(3) ePrivacy Directive exemption and legitimate interest (Art. 6(1)(f) GDPR).
- sla-cookie-consent — stores the choice you make in the cookie banner — first party — duration: 12 months.
- Hosting platform session cookies — load balancing, security and abuse prevention — duration: session.
- Language preference — keeps the selected language (IT/EN/FR) — first party — duration: session or 12 months.
3. Measurement cookies (consent only)
These help us understand, in aggregate form, how the site is used. They are only set after explicit consent through the banner and remain inactive if you reject or ignore it.
- _ga, _ga_* — Google Analytics 4 (Google Ireland Ltd.) — aggregated traffic statistics — up to 24 months — basis: consent.
- Internal performance metrics — load times and errors — first party — session — basis: consent.
4. Marketing and advertising cookies (consent only)
Used to measure advertising performance and to show relevant ads on third-party platforms. They are activated only after consent and may involve sharing online identifiers with the providers listed below.
- _fbp, fbclid — Meta Pixel (Meta Platforms Ireland Ltd.) — conversion measurement, custom audiences and remarketing on Facebook and Instagram — up to 3 months (derived identifiers up to 13 months) — basis: consent.
- _gcl_au — Google Ads / Google Marketing Platform (Google Ireland Ltd.) — conversion attribution — up to 90 days — basis: consent.
- IDE, test_cookie — DoubleClick (Google) — remarketing and frequency capping — up to 13 months — basis: consent.
5. Meta Pixel and Conversions API
Where you consent to the marketing category, the site may load the Meta Pixel and, server-side, the Conversions API. The information sent covers browsing events (page view, form submission) and technical identifiers; any contact details used for advanced matching are hashed (SHA-256) before transmission.
For data collected through the Pixel, the firm and Meta Platforms Ireland Ltd. act as joint controllers limited to the collection and transmission stage, under Meta's published Controller Addendum. Subsequent processing is carried out by Meta as an independent controller under its own privacy policy.
You can manage advertising preferences directly on Meta (Account settings → Ad preferences) and Google (adssettings.google.com), in addition to withdrawing consent on this site.
6. Giving, changing or withdrawing consent
On your first visit a banner lets you accept all cookies, reject non-essential ones or choose category by category. Rejecting does not restrict access to any content.
You can change your choice at any time through the "Cookie preferences" link in the footer of every page, or by deleting cookies in your browser. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.
Consent is requested again after 12 months and whenever the tools we use change materially.
7. Browser controls and opt-outs
- Chrome, Firefox, Safari and Edge all allow you to block or delete third-party cookies.
- "Do Not Track" and Global Privacy Control signals are honoured as a rejection of non-essential categories.
- Meta ad preferences: facebook.com/adpreferences — Google: adssettings.google.com — industry opt-out: youronlinechoices.eu.
8. Transfers outside the EU
The third-party providers listed above may transfer data to third countries, in particular the United States. Such transfers rely on the EU–US Data Privacy Framework adequacy decision where applicable, or on the European Commission's Standard Contractual Clauses with supplementary measures.
9. Contact and complaints
For any cookie-related request write to info@avvocatoaiello.com. You may also lodge a complaint with the Italian Garante per la protezione dei dati personali (garanteprivacy.it), with the CNIL if you are in France, or with the Office of the Privacy Commissioner of Canada if you are in Canada.
Need legal advice?
Book a first appointment with the firm, in person or online.