The law firm Barbone & Tassone Intellectual Property, with the lawyers Marco Barbone and Bruno Tassone, is the firm that has dealt with the legal advice that is at the base of the Foodrights project (“Project”), thanks to the experience developed in the field of copyright and industrial right by its professionals and is, moreover, lead office of the whole Project.
The website (hereinafter the “Website” or “Site”) is, instead, owned by the Lawyers Marco Barbone and Bruno Tassone who are the “Data Controllers” of personal data collected there, with offices owned by Marco Barbone and Buno Tassone in Via Michele Mattei, 17, 82100, Benevento and Via Cola Di Rienzo, 297, 00192 Roma.
All material contained on the Website, electronic communications and navigation data are stored and managed on the servers of Supernova S.r.l., allocated at: please see all details at this web site
This privacy policy, addressed to anyone who enjoys Website services (Hereinafter “Client/s” or “User/s”) intends to satisfy the requirements provided for by art. 13 of Legislative Decree no. 196/2003 (Personal Data Protection Code), and the requirements indicated in EU Regulation no. 2016/679 (GDPR), with particular reference to articles 13-14, in relation to the personal data of which the lawyers Marco Barbone and Bruno Tassone will come into possession with the Client’s requests through the Site and/or by means of specific conferment/professional mandate.

Definition of “personal data”

Personal data – ex art. 4, lett. b), D. Lgs. n. 196/2003 – shall mean any information relating to natural or legal persons, bodies or associations that are or can be identified, even indirectly, by reference to any other information including a personal identification number.

Personal data – ex art.4, paragraph 1, Regulation n.679 of 27/04/2016: “means any information concerning an identified or identifiable natural person; an identifiable natural person can be identified, either directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online ID or one or more characteristic elements of his physical identity, physiological, genetic, psychological, economic, cultural or social”.

This privacy policy is applied only to personal data collected through the Website or by any other means explicitly mentioned herewith and/or through the e-mail addresses indicated on the Website and does not apply to other websites owned by third parties, which can be accessed through a link on the Website.

Data supplied by users on a voluntary basis

The optional, explicit and voluntary sending of e-mails to the addresses specified on the Website, requires the acquisition of sender’s address in order to give feedback on his requests, and implies also the acquisition of other personal data present in the message, with this giving the User consent to the processing of his/her personal data by automated means.

Type of data processing, purposes and methods of treatment.

Data necessary for the operation of the Site

Data necessary for the operation of the Site:
Electronic systems and software set to run the Website collect some personal data implicit with the use of Internet communication protocols.
Although collected information is not associated to identifiable users, by its own nature may allow for user’s identification if processed and associated with third parties data.

This category of data includes: IP addresses or domain names of computers accessing the Website, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method for submitting the request to the server, the answer’s file size, the numerical code showing the status of the answer supplied by the server (ok, error, etc.) and other parameters relative to operative system and user’s computer environment.

Those data are used only for anonymous statistical information on Website’s use and to check for Website correct functioning and once processed are immediately deleted. In case of crimes against the Website all collected data could be used to investigate for responsibilities: in all other cases, data on web contacts are not stored permanently, unless users request to (i.e. information by e-mail or by filling out the form listed under “contacts”).

Beyond the above data necessary for the Website to function

The personal data provided by the User to the aforementioned professionals are treated with automated tools for the time strictly necessary to achieve the purposes for which they were collected and in compliance with the current law as defined below.

For example, the data provides via the form on the Site and/or through the e-mail indicated in it – owned by the lawyers Marco Barbone and Bruno Tassone – will be treated only for the following purposes: professional obligation of means in order to advise and/or protect the Client and/or defense the same on the basis of specific mandate given by the Client to professionals (Data Controllers).

Therefore, the treatment will be adequate, relevant and necessary for the professional purpose for which the Client is directed to the professionals through the Website and/or through the e-mail addresses indicated therein, as from time to time indicated by the Client (through the Site and/or via e-mail addresses indicated in it) and/or on the basis of a specific mandate.

Therefore, the User’s personal data may be disclosed on the basis of a specific mandate – even for cross-border flows – to:

    • consultants and accountants or other lawyers who provide functional services for the purposes indicated above;
    • banking and insurance institutions that provide functional services for the purposes indicated above;
    • subjects who process data in execution of specific legal obligations;
    • Judicial or administrative authorities, for the fulfillment of legal obligations.

The User is informed that the data contained in the digital and/or paper file, for example, can not be consulted by persons who are not authorized and expressly instructed and authorized to access them due to their specific tasks, whether they are internal organization of the law firm (clerks, practitioners, colleagues) or external (co-defenders, technical consultants, accountants, etc.), if this is not explicitly foreseen in the mandate given to professionals and/or through communications sent to the e-mail addresses indicated on the Website.

Duration of treatment

The processing of Client data will not continue beyond the time necessary to carry out the tasks, i.e. beyond the necessary time depending on the mandate and purpose of the processing and, thereafter, for the time when the professionals are subject to obligations of conservation, for fiscal purposes or for other purposes, provided for by law or regulation.

Technologies: cookies or user’s tracing/monitoring systems

With this regard, no user’s personal data is acquired by the Website.

The Website doesn’t use cookies for the transmission of personal information or persistent cookies for permanent users tracing.

The use of the so called session cookies (which are not permanently stored in user’s computers and disappear when the browser is closed) is strictly limited to the transmission of session identification data (consisting of random numbers generated by the server) necessary for a safe and efficient navigation of the Website.

Session cookies protect from user’s identification while collecting personal data, and are used instead of other electronic techniques potentially harmful to the user’s navigation privacy.

Nature of data supplying

Apart from what has been mentioned above, Users are always free to provide personal data when requesting for services such as information, or to confer professional mandate. The data of the Clients are therefore provided at the discretion of the same, thereby giving consent to the processing of his personal data – also with automated means – to receive information and/or to allow professionals to perform the assigned appointment. If Users refuse to provide certain data, in some cases, it will not be possible to process their requests.


This privacy policy could be emended in order to comply with national and/or European law, as well as to keep up with technology innovations. The User is invited to read this privacy policy and to check periodically in order to be aware of any amendments or revisions.

Rights granted to the Client

The rights granted to the Client include those of:

  • asking professionals to access their personal data and information about them; the correction of inaccurate data or the integration of incomplete data; the cancellation of Clients personal data (upon the occurrence of one of the conditions indicated in Article 17, paragraph 1 of the aforementioned GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article); the limitation of the processing of Clients personal data (on the use of one of the hypotheses indicated in Article 18, paragraph 1 of the GDPR);
  • requesting and obtaining from professionals – in cases where the legal basis of the treatment is the contract or consent, and the same is done by automated means – Clients personal data in a structured and readable format by automatic device, also in order to communicate such data to another data controller (so-called right to the portability of personal data);
  • opposing at any time the processing of personal data to the occurrence of particular situations that affect the Client;
  • revoking the consent at any time, limited to the cases in which the processing is based on Clients consent for one or more specific purposes and concerns common personal data (for example date and place of birth or place of residence), or particular categories of data (e.g. data revealing its racial origin, its political opinions, its religious convictions, health status or sexual life). The treatment based on consent and carried out prior to the revocation of the same preserves, however, its lawfulness;
  • proposing a complaint to a supervisory authority (Authority for the protection of personal data –

Requests should be sent to the Data Controllers, without formalities, by sending a communication to the e-mail address: and and