Last updated 7 October 2026
LexFocus is an information portal covering topics of general interest, with no commercial purpose. This notice applies to visitors to lexfocus.com and anyone who contacts the editorial team, under Regulation (EU) 2016/679 (GDPR) and the Italian Data Protection Code.
1 Data controller
The data controller is Amedeo Santaniello, an Italian registered journalist (giornalista pubblicista). For information about the processing of personal data and to exercise your rights, contact info@lexfocus.com.
2 Data processed and purposes
Browsing and statistics. The website’s systems process IP addresses, access dates and times, requested pages and browser information, as necessary for browsing and security. Aruba, the hosting provider, processes browsing data to produce statistics and makes visit reports available to the controller to understand how the content is used.
Contacting us. If you write to the editorial team, your name, email address and the content of your request are processed to handle it and reply. Providing this information is voluntary; without contact details and the necessary information, we cannot reply. Do not send health data, information about criminal convictions or offences, or other unnecessary personal information.
The legal basis is the legitimate interest in operating and securing the website, producing usage statistics and managing communications (Article 6(1)(f) GDPR). LexFocus does not use personal data for personalised advertising, commercial profiling or automated decisions producing legal or similarly significant effects.
3 Data retention
Statistics. Aruba’s Statistics service provides access to reports covering the last 365 days.
Browsing data are retained for as long as necessary to operate and secure the website. The retention period is determined according to the need to identify and resolve malfunctions, abuse or security incidents, subject to specific legal obligations.
Backups. For the Hosting WordPress Gestito Smart plan, Aruba provides daily backups covering the last 7 days. Copies made for restoration during updates are retained for 60 days from the start of the operations, under the service terms. Any copies created at the controller’s request are deleted when no longer needed for restoration.
Communications with the editorial team are retained for 12 months after the request has been concluded. At the end of that period, personal data are deleted or anonymised, except where needed to meet specific legal obligations or handle a dispute, in which case they are retained for the necessary period.
4 Recipients and data location
Personal data are processed by the controller, authorised persons and Aruba S.p.A., acting as processor for hosting and statistics carried out on the controller’s behalf, under Article 28 GDPR. Aruba may use companies within its group and providers entrusted with support, maintenance, additional services, networks and electronic communications, bound by the contractual data protection obligations. Email providers and technical support providers may also be involved, according to their respective roles. Browsing and contact data are not made publicly available; they may be disclosed to authorities where required by law.
Aruba states that its hosting and email services are managed exclusively in its Italian data centres, within the European Union. Where Aruba processes data as an independent controller, its own privacy notice applies: it provides for storage within the European Union and possible transfers outside the EU based on adequacy decisions or other safeguards under the GDPR. Information about recipient countries and copies of the safeguards may be requested from Aruba at privacy@staff.aruba.it.
5 Cookies and external links
The website uses the first-party technical cookie pll_language, which remembers the language preference and lasts for one year. It does not require consent (Article 122 of the Italian Data Protection Code). You can delete or block it in your browser settings; your language preference may then not be remembered.
Statistics are produced by Aruba as part of the hosting service. The website does not use profiling cookies or load embedded YouTube players. External links, including links to social platforms such as YouTube and Facebook, open independent services governed by their respective privacy notices. A simple link does not embed the service in this website.
6 Your rights
Where provided by the GDPR, you may request access, rectification, erasure, restriction and, where applicable, data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation.
To exercise your rights, write to info@lexfocus.com. We reply within one month, subject to a justified extension in the cases provided for by Article 12 GDPR. You may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it), under Article 77 GDPR.