Areas of practice
.avif)
Data protection law and data strategy
We help companies build personal data management models that comply with regulations, focusing on the implementation of the GDPR, risk analysis and the preparation of policies and procedures. We offer ongoing assistance in privacy governance and intervene strategically in litigation and inspections. Our mission is to transform compliance into a competitive advantage for companies.
Categories:
International Data Transfers
- Evaluation and management of data transfers to third countries.
- Drafting of standard contractual clauses and transfer agreements.
- Assistance in complying with the European Commission's appropriateness decisions.
Data protection in specific areas
- Advice on the processing of special categories of data (e.g. health, biometric, genetic data).
- Support in data management in the work, healthcare, school and public sectors
- Compliance assistance for marketing activities, profiling and the use of cookies
Appointment and support of the Data Protection Officer (DPO)
- Assumption of the position of external DPO for companies and public bodies
- Support for the internal DPO in carrying out his functions.
- Monitoring compliance with the GDPR and interfacing with supervisory authorities
Strategic Consulting and Privacy Governance
- Support in defining roles and responsibilities (owner, manager, DPO).
- Drafting of privacy policies, consent forms and internal policies.
- Implementation of privacy principles by design and by default.
- Management of appointments and agreements with external managers and sub-managers.
GDPR Compliance and Audit
- Analysis of treatments and mapping of personal data flows.
- Drafting and updating of records of processing activities (art. 30 GDPR).
- Data Protection Impact Assessments (DPIA).
- Verification of technical and organizational security measures (art. 32 GDPR).
- Internal Audits and Inspection Simulations
Assistance in Proceedings and Litigation
- Defense and representation in proceedings before the Guarantor for the protection of personal data.
- Assistance in judicial litigation related to violations of privacy legislation.
- Management of data breach communications and notification to the competent authorities.
- Support in internal investigations and collection of evidence
Case studies
Support to a hospital group for the legal and technical validation of an AI system for predictive analysis of clinical risks.
Assistance to a European consortium in complying with an LLM according to AI Act and FRIA preparation
Due diligence and legal audit for automated credit scoring systems in the fintech field
Case studies
Launch of an international e-commerce platform: End-to-end legal assistance for a fashion-tech startup in the creation of a multilingual e-commerce portal, with integrated marketplace and third-party sellers. The firm drafted the terms and conditions of sale, the privacy policy and contracts with logistics and technological suppliers, also taking care of aspects related to digital payments and liability clauses.
Prior review of an advertising campaign conducted via social media by a food & beverage brand, with particular attention to the transparency of the promotional message and the correct qualification of influencers. Subsequent support in managing a reputational crisis linked to user-generated content and defamatory comments online.
Privacy audit on profiled marketing activities: Consultancy to a tech company specialized in lead generation for a complete audit of data collection and processing activities for profiling and retargeting purposes. The study prepared cookie policy, consent banners, checklists for the use of analytics tools and accompanied the customer in adopting an accountability model in compliance with the GDPR.
Prize competition for consumer brands: Design and legal validation of a national prize competition launched by a well-known retail brand, with the sending of receipts through the app and the assignment of instant prizes. The firm managed the drafting of the regulations, the filing with the notary, compliance with Italian regulations and the drafting of contracts with technical suppliers and creative agencies.
Legal due diligence of a digital platform with a view to investment: Legal due diligence on a SaaS platform in the field of e-learning with a focus on T&C, management of user personal data, intellectual property, software licenses and commercial contracts. The work was aimed at supporting the client (VC fund) in an investment decision and in the definition of contractual guarantees.
Case studies
International IP portfolio: assistance to an industrial client in the purchase and restructuring of a portfolio of brands, domain names, models and designs registered in multiple jurisdictions.
Software & Licenses: support to a software house in the SIAE registration and in the preparation of software license and distribution agreements.
AI & Copyrights: advice to a European consortium in the legal and technical evaluation of a Large Language Model (LLM) with particular reference to the protection of the copyright of the contents used for training and the contents generated by the system.
Digital & UGC: assistance to a multinational company for the implementation of a platform for the collection of user-generated content, with reference to data protection, intellectual property and contractual aspects.
Influencer Marketing: advice to companies and agencies in drafting contracts for the exploitation of the image of testimonials and influencers, even on a transnational scale.
Acknowledgments
We are proud of the many awards and awards we have received, which testify to our commitment and confirm our dedication to providing the best legal support.
They say about us
“CRCLEX has made even the most complex legal issues simple, allowing us to focus on what we do best: our work.”
The CRCLEX team is not only extremely knowledgeable, accurate and reliable. The plus of their advice is the ability to go beyond specialist advice, contextualizing it with respect to business needs.”
"With CRCLEX we have found not only high-level legal expertise, but also a strategic partner who truly understands the dynamics of our sector and guides us towards practical and effective solutions"
"The difference with CRCLEX is clear: they transform regulatory complexity into concrete opportunities, always offering us a clear and proactive vision that allows us to make informed decisions with serenity"
"Relying on CRCLEX means having legal support that doesn't just answer questions, but anticipates the needs of our business, ensuring rapid and tailor-made solutions that allow us to grow with confidence."
Strategy and vision for your protection. Find out how we can support you.
