In compliance with the provisions of EU Regulation 2016/679 (European Regulation for the protection of personal data), we provide you with the information required regarding the processing of the personal data provided. This notice is not to be considered valid for other websites that may be accessed via links present on the websites belonging to the controller's domain, who shall not be held responsible in any way for third-party websites.
This is a notice given pursuant to art. 13 of EU Regulation 2016/679 (European Regulation for the protection of personal data) and is also inspired by the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, on Cookies, as well as by the Measure of the Garante for the Protection of Personal Data of 08.05.2014 on cookies.
The data controller is Alba Srl, Via San Colombano, 30 - 26813 Graffignana (LO), Tax Code and VAT No. 09317260967, who can be contacted at the email address [email protected].
The processing operations connected with the web services of this website take place at the aforementioned registered office of Alba Srl and are handled solely by technical staff in charge of the processing, or by any staff in charge of occasional maintenance operations.
The data collected are not subject to transfer abroad, nor will they be disclosed to third parties.
The personal data provided will be processed in compliance with the lawfulness conditions pursuant to art. 6 of EU Regulation 2016/679, for the following purposes:
The Controller processes Personal Data relating to the User where one of the following conditions exists:
It is always possible to ask the Controller to clarify the actual legal basis of each processing operation and, in particular, to specify whether the processing is based on law, provided for by a contract or necessary to conclude a contract.
The personal data provided by you will be processed in compliance with the aforementioned legislation and the confidentiality obligations that inspire the Controller's activity. The data will be processed using both IT tools and paper media as well as any other suitable medium, in compliance with adequate security measures pursuant to art. 5 par. 1 letter f) of the GDPR.
Within the limits relevant to the processing purposes indicated, your data may be communicated to partners, consultancy firms, private companies, appointed as Processors by the Data Controller, or for legal obligations or to fulfil your specific requests. Your data will in no way be disclosed, except to the Processors and Persons in Charge of processing currently appointed, who are precisely identified in the Privacy Document, updated periodically.
Data collected automatically - The computer systems and software procedures used to operate this website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols, and which may be associated with identifiable users. This data includes the IP addresses and domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system, browser and computer environment used by the user. This data is processed, for the time strictly necessary, solely for the purpose of obtaining statistical information on the use of the site and for checking that it is functioning correctly. The provision of such data is mandatory as it is directly connected to the web browsing experience.
Data provided voluntarily by the user - The voluntary and explicit sending of email to the addresses indicated in the various access channels of this website does not require a request for consent, and the completion of specifically prepared forms entails the subsequent acquisition of the sender's/user's address and data, necessary to respond to the requests made and/or to provide the requested service. The voluntary sending, by you, of emails to our email addresses does not require further notices or requests for consent. On the contrary, specific summary notices will be reported or displayed on the pages of the site set up for particular services on request (forms). The user must therefore explicitly consent to the use of the data provided in these forms in order to send the request.
Cookies - The site uses third-party technical/profiling cookies which may collect users' browsing data, the provision of which is optional and takes place through the expression of free and informed consent. Cookies operate in order to analyse the effectiveness of the site and make it easier and more intuitive over time. The data collected through cookies serves to make the browsing experience more pleasant and more efficient in future, seeking to assess users' behaviour and to modify the content offering proposition according to their behaviour. Further information is available in a dedicated cookie policy.
This website uses ANONYMISED Google Analytics: analytics cookies are considered technical if used solely for optimisation purposes and if users' IP addresses are kept anonymous. We inform the user that this site uses the free Google Analytics service. We remind you that the data is used only to obtain data on the most visited pages, the number of visitors, aggregated data on visits by operating system, by browser, etc.
The data collected will be retained for a period of time not exceeding that necessary to achieve the purposes for which it is processed ("storage limitation principle", art. 5, GDPR) or in accordance with the deadlines provided for by law. Verification of the obsolescence of the data stored in relation to the purposes for which it was collected is carried out periodically.
When processing is based on the User's consent, the Controller may retain Personal Data for longer until such consent is withdrawn. Furthermore, the Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiry of this term, the right of access, erasure, rectification and the right to data portability may no longer be exercised.
Users may exercise certain rights with regard to the Data processed by the Controller.
In particular, the User has the right to:
When Personal Data is processed in the public interest, in the exercise of official authority vested in the Controller, or for the purposes of the legitimate interests pursued by the Controller, Users have the right to object to the processing for reasons connected with their particular situation. Users are informed that, should their Data be processed for direct marketing purposes, they may object to the processing without providing any justification. To find out whether the Controller processes data for direct marketing purposes, Users may refer to the relevant sections of this document.
To exercise the User's rights, Users may address a request to the Controller's contact details indicated in this document. Requests are lodged free of charge and dealt with by the Controller as soon as possible, in any case within one month.
Last updated: 2 January 2024