Your privacy, clear and GDPR-compliant.

1. Data controller

The data controller of personal data is ALAconnect, whose identification and contact details are as follows.

Name

ALAconnect

Registered office

Via Giuseppe di Vittorio, 6 – 28845 Domodossola (VB)

VAT number

02605350038

Telephone

0324 751507 · 0323 1990113

Email

info@alaconnect.it

For any request relating to the processing of personal data, you can write to info@alaconnect.it.

2. Types of data processed

Through the contact form we process exclusively the data that the user chooses to provide: full name, company, email address, telephone number (optional), type of request and content of the message, as well as confirmation of having read this notice.

During browsing, the hosting infrastructure may process technical data (for example IP address and security logs) necessary for the operation of the site and for protection against misuse of the form.

Special categories of data pursuant to Article 9 of the GDPR are neither requested nor intentionally processed: you are therefore asked not to enter such data in the message field.

3. Purposes and legal bases

• To manage and respond to the request sent via the contact form and to provide the requested information about the services or to assess a project. Legal basis: consent of the data subject (Article 6(1)(a)) given by ticking the specific box and/or the performance of pre-contractual measures taken at the request of the data subject (Article 6(1)(b)).
• To ensure the security and proper functioning of the site, including the prevention of misuse and automated form submissions. Legal basis: the legitimate interest of the Controller in protecting its own infrastructure (Article 6(1)(f)).
• To comply with legal obligations and to allow, where necessary, the establishment, exercise or defence of a legal claim in court. Legal basis: legal obligation and legitimate interest (Article 6(1)(c) and (f)).

The provision of data marked as mandatory is necessary in order to act on the request; failure to provide it prevents the request from being handled. The telephone number is optional.

4. Methods of processing

Processing is carried out using IT tools and with technical and organisational measures adequate to ensure the security, confidentiality and integrity of the data pursuant to Article 32 of the GDPR. The form applies field validation, size limits, protections against misuse and checks on the origin of the request. Until the email channel is active, the form displays an explicit notice and neither forwards nor stores the request.

5. Recipients and data processors

The data are processed by the Controller's authorised staff. When the email channel is active, requests sent via the form will be forwarded through a transactional email provider acting as a data processor pursuant to Article 28 of the GDPR, on the basis of a data processing agreement (DPA). In addition, the technical suppliers of hosting and site maintenance may process data within the limits of their respective purposes.

The data are neither disseminated nor transferred to third parties for commercial or marketing purposes.

6. Transfers outside the EEA

Some technical suppliers may process data outside the European Economic Area as well. In such cases the transfer takes place in compliance with the appropriate safeguards provided for by Articles 44-49 of the GDPR, such as an adequacy decision of the European Commission or the Standard Contractual Clauses.

7. Retention period

The data collected through the contact form are retained for the time necessary to handle the request and any subsequent contacts and, in any case, for a maximum of 24 months from the last contact, subject to legal obligations or the need to establish, exercise or defend a legal claim. Technical security logs are retained for the time strictly necessary for the related purposes.

8. Rights of the data subject

The data subject may exercise at any time the rights provided for by Articles 15-22 of the GDPR: access to their data, rectification, erasure, restriction of processing, objection to processing and data portability. Where processing is based on consent, the data subject may withdraw it at any time without prejudice to the lawfulness of the processing carried out before the withdrawal.

Requests may be sent to info@alaconnect.it. The Controller will respond within the terms provided for by law.

9. Complaint to the supervisory authority

Without prejudice to any other administrative or judicial remedy, a data subject who considers that the processing of their data infringes the applicable legislation has the right to lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority).

10. Cookies and tracking tools

The site does not use profiling cookies or advertising tracking tools. The only marketing communication is the newsletter, sent exclusively with prior consent (see the "Newsletter subscription" section). Details of any technical tools are available in the Cookie Policy.

11. Newsletter subscription

If you subscribe through the relevant form on the website, we process your email address solely to send you the ALAconnect newsletter, with updates on new technologies and the offers and promotions of the period. The legal basis is your consent (Art. 6(1)(a) GDPR), given by ticking the relevant box; you may withdraw it at any time via the unsubscribe link in every email or by writing to info@alaconnect.it, without affecting the lawfulness of processing carried out before withdrawal. In addition to the email address, we record the date, time and IP address of the subscription, as proof of consent and for security purposes. The data is retained until consent is withdrawn or you unsubscribe and is processed by the Controller's authorised personnel; if an email-marketing platform is adopted, it will act as a data processor under Article 28 GDPR. Data collected through the newsletter is not shared with third parties for commercial purposes.

12. Changes to this notice

This notice may be updated over time, including as a result of changes in legislation or in the processing carried out. Updated versions will be published on this page together with the relevant update date.

13. Regulatory references

This notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and of Italian Legislative Decree (D.lgs.) 196/2003 as amended by Legislative Decree (D.lgs.) 101/2018.