Skip to main content


Privacy Policy

Privacy Policy on the processing of personal data in accordance with Article 13 of the EU Regulation 2016/679 ("Privacy Policy")

If you are reading this document ("Privacy Policy"), it is because you are visiting our website (, “Sito”). This Privacy Policy is prepared in accordance with Article 13 of the EU Regulation 679/2016 (hereinafter "GDPR") and provides you with information about how we process your Data. If you have any questions about this Privacy Policy or how we process your Data, please send your request to: or The information and Data provided by you or otherwise acquired will be processed in accordance with the provisions of the GDPR and the obligations of confidentiality that inspire the activities of the Owner. From this Site you can connect through special links to other third party sites. For such processing activities, we invite you to consult their respective privacy policies. The Owner disclaims any responsibility regarding the possible management of Data, if any, by such third party sites. Please also note that this Privacy Policy does not cover the processing carried out on the sites which redirects to the so-called Panel Platform, i.e., the so-called E-Learning Platform, nor to verify the NFTs issued by 4c (, for which we encourage you to consult their respective privacy policies.

1. About us 4c S.r.l. with registered office in Via Fontana n. 18, Milan, 20122 (hereinafter, '4c'; 'we' or 'us') is the Data Controller of your Data.
2. Data we collect and process We collect Data from our Site. The Data collected and the purposes for which we process it depend on the management of your Browser and Device settings. The purposes for collecting your Data are set out in the section "Why we collect and process your Data and legal basis". a) Browser and Device Data and Cookies When you use our Site we collect information about the Browser and Device you are using. This information includes your IP Address, date, time and requested URL, Unique Identifiers, and other information such as the type of Browser or Device. Browser or Device information may include your operating system, language, network settings, telephone or Internet provider, third-party applications installed, and plug-in lists. Some of this information is collected using Cookies and Other Tracking Technologies on your Browser or Device. More information about Cookies is available in our Cookie Policy. b) Data voluntarily provided by the user This Privacy Policy contains information about the processing of Data you voluntarily provide, for example, by filling out event registration forms or in general to register for the Site, download materials posted on the Site, comment on content posted on the section cd. Talks, contacting 4c through the optional, explicit and voluntary sending of e-mail messages to the addresses you find on the Site, requesting appointments and tutorials of any of our services (such as those offered in the cd. Tech section of the Site) or in case of requests for assistance. When you provide Data of other people, you pose as an autonomous Data Controller, assuming all legal obligations and responsibilities and conferring on the point the widest indemnity with respect to any dispute, claim, request for compensation for damages from processing, etc. that may be received by the Data Controller from third parties. c) Data collected to contact third parties through 4c By browsing the Site you will have the opportunity to meet and get in touch with the authors of our content published in the cd. Talks or with the influencers who are part of the cd. Influencer Hub by filling out the "Contact Author" or "Contact Influencer" section that you will find at the bottom of the content in the respective sections. In this case, 4c may collect your Data in order to put you in contact with the author or influencer and, for this purpose, will communicate to him/her your Data that he/she will process as an autonomous Data Controller. d) Data collected for participation in the Talent Academy In order to participate in the Talent "Academy" promoted by us, we will ask you to provide some of your Data as well as a video presentation-candidate, according to the modalities of participation indicated in the announcement and in the dedicated pages of the Site. We invite you not to provide Data or other information related to your health status, political opinions or religious faith (referred to in art. 9 GDPR) with respect to your person and with respect to third parties as well, and we specify that, in case you decide to provide these Data, we will not be able to process them in any way and therefore we will provide for their deletion. We may invite you to participate in the Talent "Academy" either through LinkedIn or by means of your e-mail address published on the Practitioner Association (Albo Praticanti). In the context of these processing activities, we specify that if you confer Data of third parties subjects to 4c you place yourself as autonomous Data Controller, assuming all the obligations and responsibilities of law. In this sense, you confer on this point the widest indemnity with respect to any dispute, claim, request for compensation for damages from processing, etc. that may be received by 4c from third parties whose Data have been processed within the scope of this project in violation of the applicable data protection regulations. e) Online payment data In the case of online payments aimed at purchasing our services on the Site, we will only process Data received from digital payment companies and credit card payment handling institutions that consists of return information on the status related to the payment (successful/rejected). Any additional account (e.g., PayPal), prepaid card, or credit card information is stored by the entities operating the relevant service, which are not authorized to use the Data received through the Site for any other purpose.
3. Why we collect and process your data and legal basis Your Data is used for the following purposes:

a. to enable you to navigate the Site and to provide the services you request from time to time from the Data Controller such as, for example, contact and/or information requests and more generally requests for assistance, to register for events, to download documentation on the Site, as well as to tutor you on our products and to enable your participation in the Talent "Academy" if you have spontaneously submitted your application through our Site or on 4c's other channels ("Provision of Services"). Processing for this purpose is based on fulfilling your request. It is not mandatory to provide Data to 4c for this purpose, but failing to do so will make it impossible to fulfill your request. With specific reference to the "Academy" Talent, we would like to clarify that, we may search for potential candidates on the Register of Practitioners website or contact you on Linkedin and/or 4c's Social Pages in order to propose you to participate in the Talent. In such cases we will send you an email and if you are not interested of course you can ignore it as well as object to such processing and we will not contact you again even for subsequent editions. Such processing is based on 4c's legitimate interest and your interest in participating in an initiative that might allow you to find employment in your legal field. In addition, also in the context of the Talent "Academy", after you submit your application and subject to your specific consent that you can express through the form that will be sent to you by email after your application (and that you can revoke at any time), we may publish your video presentation on the Site and on our communication channels, including the Social Pages of 4c to promote the Talent "Academy". b. to carry out marketing activities, such as processing surveys and market research including through online polls, sending you informational and promotional material and the newsletter of 4c or third parties pertaining to the legal ecosystem that have a partnership with 4c or are customers of 4c, by contacting you via e-mail, text message, 4c's Social Pages, paper mail and/or telephone with operator ("Marketing"). This processing is based on your consent, which you can revoke at any time by contacting us or clicking the unsubscribe button in the footer of our commercial emails, without affecting the lawfulness of the processing based on the consent given before revocation. You can also object to the use of only some of the contact means used (selective opt-out). c. to analyze your Data in order to show you content that may be of interest to you and to send you personalized informational and promotional material ("Personalize our Services"), including by using Cookies for targeted advertising and analyzing your interaction with 4c's Social Pages. In the latter case, the processing of your Data is carried out by 4c as a co-owner of the processing with the provider of the social network used (in accordance with EDPB (the European Data Protection Board) Guideline No. 8/2020 on the use of social networks); therefore, the privacy policies of these providers also apply, which we invite you to consult This processing is based on your consent, which you can revoke at any time by contacting us or in the manner indicated in the Site's Cookie Policy. d. to send you offers on products or services similar to those purchased and requested from 4c by e-mail, even in the absence of your specific consent ("Soft Opt-in"), unless you expressly refuse to receive such communications, which you may express at any time by contacting us, through the unsubscribe mechanism present in the footer of the e-mails you receive, or by expressly denying your consent for Marketing purposes. This processing is legitimate under Article 130, paragraph 4, of the Privacy Code. e. to contact you on Linkedin by means of a cognitive and interlocutory private message, where you are a follower of 4c's page or where you are a follower of 4c's employees, and only in case of your expression of interest will subsequent communications ("Contact") follow Such processing is based on the legitimate interest of 4c and more generally third parties to join the 4c network and is justified by the expression of interest you have shown in following the 4c page or in general the 4c team members. Of course, you can always object to such processing by writing to us via email ( or even directly in the dedicated chat of 4c's Social Pages. f. to disclose your Data to the Event Lecturer or Partner so that they may send you informational and promotional materials for independent direct marketing purposes ("Third Party Communication") if you register for a 4c event and give your specific consent to do so, which you may revoke at any time by writing to 4c or directly to the Partner or Lecturer. The identity of the Partner or lecturer will be indicated to you at each event Please also note that the list of participants in an event carried out in partnership with third parties may be provided to the Partner for the management of the event itself by virtue of the execution of the existing contract between 4c and the individual Partner. In this case, your Personal Data will only be disclosed for this purpose and cannot be processed by the Partner for autonomous marketing purposes unless you have given the above consent. g. to fulfill legal obligations and orders to which we are subject, which form the legal basis for processing your Data ("Fulfilling legal obligations"). h. to prevent fraud and abuse in the use of the Site and enable us to defend our rights and legitimate interests ("Abuse/Fraud"). This processing is done on the basis of the Owner's legitimate interest in preventing and detecting fraudulent or potentially unlawful activities and enabling us to defend ourselves in court. i. for statistical purposes, without being able to be traced back to your identity ("Statistics"). Please note that such processing is not performed on Data and therefore can be freely carried out by the Data Controller. Such processing is based on the legitimate interest of 4c.

4. How we use your dat (processing methods) Data collected for the above purposes are processed both manually and in an automated manner, i.e., through programs or algorithms that analyze Data inferred from user activity, information about your location, and Data collected from your Browser and Device.
5. How we can disclose your data We may disclose your Data to the following recipients and/or categories of recipients ("Recipients"):
  • Persons authorized by us to perform any of the Data-related activities described in this document, such as our employees and contractors who have assumed a duty of confidentiality and abide by specific rules for the processing of your Data;
  • Our Processors: external parties to whom we delegate certain processing activities. For example, security system providers, consultants, accountants, hosting providers, etc. We have agreements in place with each of our Processors to ensure that your Data is processed with adequate safeguards and only in accordance with our instructions;
  • System Administrators: our employees or those of Data Processors to whom we have delegated the management of our computer systems and who are therefore able to access, modify, suspend or restrict the processing of your Data. These individuals have been selected, properly trained, and their activities are tracked by systems that they cannot modify, as required by the regulations of our competent supervisory authority;
  • CNF or COA: when you request recognition of educational credits as a result of attending a 4c event, we will provide your name to the National Bar Council or the relevant territorial Bar Council in order to fulfill your request;
  • Police authority or any other authority whose provisions are binding on us: this is when we must comply with a judicial order or the law or defend ourselves in a legal proceeding;
  • Event lecturers/event partners: are indicated from time to time during event registration and your Data is disclosed to them for the purposes of "Communication to third parties" (see sect. 3.f) only in case of your consent or to enable you to attend the event;
  • Authors of the cd. Talks section of the Site or Influencers that can be contacted through the cd. Influencer Hub section of the Site: when you request to be put in touch with one of these individuals, we will follow up on your request by contacting them on your behalf and providing them with your Data.
6. Where your Data are located Your Data may be stored, accessed, used, processed, and disclosed outside your jurisdiction, including within the European Union, the United States of America, or any other country where our Processors and sub-Processors are located, or where their servers or cloud computing infrastructure may be hosted. We strive to ensure that our Recipients' processing of your Data complies with applicable data protection laws, including EU legislation to which we are subject. Where required by EU data protection law, transfers of your Data to Recipients outside the EU will be subject to appropriate safeguards (such as EU standard contractual clauses for data transfers between EU countries and third countries), and/or other legal bases in accordance with EU law. For more information about the safeguards we implement to protect Data transferred to third countries outside the EU, you can write to us at
7. How long we keep your data The Data processed for the purposes of:
  • Provision of Services (see sect. 3.a): they will be kept for the time strictly necessary to achieve those same purposes. Since these are processing operations carried out for the provision of services, the Data Controller may further retain your Data for as long as permitted by Italian law to protect its interests (Art. 2946 et seq. of the Civil Code);
  • Marketing (see sect. 3.b) and Personalizing our services (see sect. 3.c): will be retained, as a general rule, until your consent is revoked;
  • Soft Opt-in (see sect. 3.d): they will be processed until you object to such processing;
  • Contacts (see sect. 3.e): they will be processed until you object;
  • Comunicazione to third parties (cf. sect. 3.f): will be retained, as a general rule, until your consent is revoked, unless the communication is made in order to comply with a request of yours (e.g., for the recognition of educational credits) and in that case the retention criteria established for the Delivery of Services previously indicated will be followed;
  • Fulfilling legal obligation (see sect. 3.g): will be retained as long as required by the specific obligation or rule of law or regulation applicable;
  • Abuse/Fraud (cf. sect. 3.h): they will be retained for as long as necessary to achieve those same purposes and thus until such time as 4c is required to retain them in order to protect itself in court and communicate them to the competent authorities upon the occurrence of an Abuse/Fraud.

More information regarding the Data retention period and the criteria used to determine this period may be requested by writing to the Data Controller at Once the relevant retention period has expired, your Data will be deleted in accordance with our retention policy, unless 4c needs to further retain your Data to defend itself or its clients in court. You can request more information about our retention policy and criteria by writing to us here:

8. How to Control Your Data and Manage Your Choices At any time, you can ask to:
  • Access your Data (right of access): we will provide you with your Data, such as your name, age, IP Address, Unique Identifiers, email and expressed preferences, along with the Privacy Policy you received when you provided it;
  • Exercise your right to portability of your Data (right to Data portability): we will provide you with an interoperable file containing Data about you;
  • Correct your Data (right to rectification): for example, you can ask us to change your e-mail address or phone number if they are incorrect;
  • Restrict the processing of your Data (right to restrict processing): for example, when you believe that the processing of your Data is unlawful or that processing based on our legitimate interest is inappropriate; and;
  • Delete your Data (right to erasure): for example, when you do not want your Data to be stored;
  • Object to processing activities (right to object): you have the right to object to the processing of your Data by explaining to us the reasons for your objection. In this case, 4c reserves the right to evaluate your request, which may not be accepted if there are compelling legitimate grounds for processing that override your rights, interests and freedoms. You also have the right to object at any time and without justification to the conduct of profiling and marketing activities, including by registering with the Register of Objections pursuant to Presidential Decree No. 26 of January 27, 2022.
  • Withdraw your consents (right to withdraw consent). Please note that pursuant to Presidential Decree No. 26 of January 27, 2022, you may object to or revoke your consent to marketing activities by registering with the Register of Oppositions. If you have given your consent to marketing activities in the context of contractual relationships with us or the same have ceased no more than thirty days ago and therefore the Register of Oppositions does not apply, if you are no longer interested in receiving such communications you may revoke your consent at any time by writing to the address listed below

You may exercise the above rights or express any concerns or complaints about our use of your Data directly at:

At any time, you can also:

9. What this Privacy Policy does not cover This Privacy Policy explains and covers the processing we perform as the Data Controller within our Site. This Privacy Policy does not cover processing by parties other than us. In these cases, we are not responsible for any processing of your Data that is not covered by this Privacy Policy. Please also note that this Privacy Policy does not cover the processing carried out on the sites which redirects to the so-called Panel Platform, i.e. the so-called E-Learning Platform, as well as for the processing carried out on the platform show for which we invite you to consult the respective privacy policies.
10. Changes to the Privacy Policy We reserve the right to adapt and/or modify this Privacy Policy at any time. We encourage you to review this Privacy Policy periodically to check for changes, unless we are making material changes. In that case, we will notify you in the appropriate manner.
11. Licence Icons shown in this Privacy Policy are "Data Protection Icons" by Maastricht University, European Centre on Privacy and Cybersecurity (ECPC) CC BY 4.0 .
12. Definitions

Altre Tecnologie di Tracciamento: pixel tag (tracciatori utilizzati con i Cookie e incorporati nelle immagini delle pagine web per tracciare determinate attività) o identificatori univoci incorporati nei link alle comunicazioni commerciali che ci inviano informazioni quando vengono cliccati.

Other Tracking Technologies: pixel tags (trackers used with Cookies and embedded in web page images to track certain activities) or unique identifiers embedded in links to commercial communications that send us information when clicked.

Company or Legal Department: this refers to 4c customers who have concluded a contract with us for the use of the services provided on the Panel Platform by signing the contract on behalf of their company or public law body. Our services are often used in particular by the legal departments of companies, so we will also use this term within this Privacy Policy.

Browser: refers to the programmes used to access the Internet (e.g. Safari, Chrome, Firefox, etc.).

Cookie: is a small text sent to your Browser from our site (hosting the Panel Platform) by our Partners. It allows the site to store information such as the fact that you have visited the site, your language and other information. Cookies are used for various purposes, such as to record your preferences regarding the use of Cookies (Technical Cookies), to analyse and improve our services and to create new services and features or to personalise our services, including content that may be useful to you. The information transmitted by Cookies is subject to combination and/or cross-referencing with one of the Other Tracking Technologies, where applicable.

Personal Data: any information relating to an identified or identifiable natural person, directly or indirectly, as well as any information related or reasonably linkable to a particular individual or household. For example, an email address (if it relates to one or more aspects of an individual), IP Addresses and Unique Identifiers are considered Personal Data. Hereinafter, for convenience, the Personal Data referred to in this Privacy Policy will be referred to simply as "Data".

Device: refers to the electronic device (e.g. iPhone) through which you visit the Panel Platform.

Unique Identifiers: information that can uniquely identify the user through the Browser, the Device. In the Browser, the IP Address and Cookies are considered Unique Identifiers. On the Device, advertising identifiers provided by manufacturers, such as Apple's IDFA and Android's AAIG, that we use to analyse and improve our services and to create new services and features are considered Unique Identifiers. Please note that for these purposes and in line with the views of European regulators, we do not use other unique identifiers such as MAC addresses and IMEIs as they are not resettable by the user.

IP address: is a unique number used by the Browser, the Device to connect to the Internet. The Internet service provider provides this number to identify the provider and/or the approximate area where the user is located. Without this Data, you cannot connect to the Internet and use our services or content that may be useful to you.

Social Pages of 4c: indicates the social network pages used by 4c, and in particular those indicated at the following addresses: Instagram, Facebook, LinkedIn, Twitter.

Partner: this definition includes selected Partners with whom we may share your Data. Partners may belong to the following sectors: legal professionals; professors and other professionals who collaborate as speakers at 4c events and whose identity will be disclosed at individual events; companies, institutions and other entities that participate in the organisation of a 4c event and whose identity will be disclosed at individual events; information and communication services; professional and consulting activities; business support services; other third parties whose identity will be disclosed on a case-by-case basis.

Data Processor: refers to an entity appointed by us to process your Personal Data solely on behalf of 4c S.r.l. and in accordance with your written instructions.

Site: includes this Site ( where this Privacy Policy is located.

Data Controller or Controller: refers to the legal person, public authority, service or other entity that, individually or jointly, determines the purposes and means for the processing of your Personal Data. This definition typically refers to 4c S.r.l.. In other cases, it is preceded by the word "autonomous" (e.g., "autonomous data controller" or "autonomous data controller") to indicate that your Personal Data is processed by an entity other than 4c S.r.l.