This is a courtesy translation. In case of discrepancy, the Italian version prevails.

Privacy Policy

Last updated: 2 November 2026

1. Data Controller

Controller of Personal Data Processing:

ALIS SRLS
Registered office: Via Pier Carlo Cadoppi 8, 42124 Reggio Emilia (RE), Italy
VAT number IT03009120357
Tax code (Codice Fiscale): 03009120357
Email: clienti@alis.srl
Certified email (PEC): alis@pecaruba.it
Phone: +39 347 830 5930

2. Types of Data Collected

The Controller collects the following types of personal data:

2.1 Browsing data

The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category includes:

• IP addresses
• Domain names of the computers used by users who connect to the site
• URI (Uniform Resource Identifier) addresses of the requested resources
• Time of the request
• Method used to submit the request to the server
• Size of the file obtained in response
• Numerical code indicating the status of the response from the server (successful, error, etc.)
• Other parameters relating to the user's operating system and computer environment

2.2 Data voluntarily provided by the user

The optional, explicit and voluntary sending of messages to the Controller's contact addresses entails the acquisition of the user's data, including:

• First name and surname
• Email address
• Telephone number
• Any other personal data entered by the user in the message or in the contact forms

2.3 Cookies and usage data

The site uses cookies and similar technologies. For more information, please see the Cookie Policy.

3. Purposes and Legal Basis of the Processing

Personal data are processed for the following purposes:

4. Methods of Processing

Personal data are processed by the following means:

• Paper media
• Electronic and telematic tools
• Organisational methods strictly related to the stated purposes

Personal data are processed lawfully and fairly, with the adoption of appropriate security measures designed to prevent unauthorised access, disclosure, modification or destruction of personal data.

5. Data Retention Period

Personal data are kept for the time necessary to fulfil the purposes for which they were collected:

• Browsing data: kept for the time strictly necessary to ensure the security and operation of the site (generally no longer than 7 days)
• Data provided with requests for information: kept for the time necessary to handle the request and for a subsequent period not exceeding 24 months
• Data processed for legal obligations: kept for the period required by the applicable laws

6. Recipients of Personal Data

Personal data may be disclosed to:

• Data processors: parties appointed by the Controller to process the data (the hosting provider OVH and the contact form delivery service Web3Forms)
• Authorised persons: employees and collaborators of the Controller specifically authorised to carry out the processing
• Public authorities: when required by law or for the establishment or defence of a right in court

6.1 Transfer of data outside the EU

Some of the service providers used by the Controller may transfer data outside the European Economic Area. In that case, the Controller ensures that the transfer takes place in compliance with the applicable legal provisions, through the adoption of standard contractual clauses approved by the European Commission or other adequate mechanisms.

7. Rights of the Data Subject

In accordance with Articles 15 to 22 of the GDPR, the user has the right to:

1. Right of access (Article 15 GDPR): obtain confirmation as to whether or not personal data concerning them are being processed and, where that is the case, obtain access to the data and to information about the processing
2. Right to rectification (Article 16 GDPR): obtain the rectification of inaccurate personal data and the completion of incomplete data
3. Right to erasure (Article 17 GDPR): obtain the erasure of personal data ("right to be forgotten")
4. Right to restriction (Article 18 GDPR): obtain the restriction of the processing of personal data
5. Right to data portability (Article 20 GDPR): receive personal data in a structured, commonly used and machine readable format and transmit them to another controller
6. Right to object (Article 21 GDPR): object at any time to the processing of personal data
7. Right to withdraw consent (Article 7 GDPR): withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal
8. Right to lodge a complaint (Article 77 GDPR): lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali)

7.1 How to exercise these rights

To exercise the rights listed above, the user may contact the Data Controller:

Email: clienti@alis.srl
Certified email (PEC): alis@pecaruba.it
Postal address: Via Pier Carlo Cadoppi 8, 42124 Reggio Emilia (RE), Italy

7.2 Complaint to the Supervisory Authority

If data protection law is infringed, the user has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali):

Garante per la protezione dei dati personali
Piazza Venezia 11, 00187 Roma, Italy
Switchboard: (+39) 06.696771
Fax: (+39) 06.69677.3785
Email: garante@gpdp.it
Certified email (PEC): protocollo@pec.gpdp.it
Website: www.garanteprivacy.it

8. Data Security

The Controller adopts appropriate technical and organisational security measures to protect personal data against destruction, loss, alteration, unauthorised disclosure or accidental or unlawful access.

The security measures include, among others:

• Encryption of communications through the HTTPS/TLS protocol
• Access control to computer systems
• Pseudonymisation and anonymisation of data where possible
• Regular data backups
• Training of the staff authorised to process data
• Procedures for regularly testing, verifying and evaluating the effectiveness of the security measures

9. Minors

The site is not intended for minors under 16 years of age and the Controller does not knowingly collect personal data relating to minors. Should it be ascertained that personal data of minors have been collected, the Controller will erase them immediately.

Parents or legal guardians who believe that a minor has provided personal data to the Controller are invited to contact the Controller using the contact details given above.

10. Changes to this Privacy Policy

This Privacy Policy may be amended over time, including as a result of changes in the law. The Controller invites users to consult this page periodically in order to be aware of the most recent version.

Substantial changes will be communicated to users through specific notices on the site or, where possible, by messages sent to the email address provided.

Continued use of the site after the publication of the changes constitutes acceptance of the new Privacy Policy.

11. Links to Third Party Websites

This site may contain links to third party websites. The Controller has no control over the content and privacy practices of such sites and declines all responsibility in this regard.

We recommend reading the privacy policies of the third party sites you visit.

12. Legal References

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR)
• Italian Legislative Decree No. 196 of 30 June 2003, Personal Data Protection Code (as subsequently amended)
• Decisions and guidelines of the Italian Data Protection Authority (Garante per la protezione dei dati personali)

13. Contact

For any information about this Privacy Policy or to exercise the rights provided for by the applicable law, you can contact the Controller:

ALIS SRLS
Email: clienti@alis.srl
Certified email (PEC): alis@pecaruba.it
Phone: +39 347 830 5930
Address: Via Pier Carlo Cadoppi 8, 42124 Reggio Emilia (RE), Italy

Useful Links

• Cookie Policy
• Back to home
• Garante per la protezione dei dati personali (Italian Data Protection Authority)
• Full text of the GDPR