SCOPRI IL 3D DIGITAL MOCKUP!
SCOPRI IL 3D DIGITAL MOCKUP!

Privacy policy

Information notice on the processing of personal data, pursuant to Article 13 of EU Regulation No. 2016/679 “GENERAL DATA PROTECTION REGULATION” (hereinafter “GDPR”), and of Legislative Decree 196/2003 as amended by Legislative Decree 101/2018

With this information notice, we wish to inform you of the ways in which our company, ALF S.R.L. (hereinafter the Company or ALF), processes personal data collected during your use of the website alfcreative.it. This notice is published on the website alfcreative.it, under the Privacy Policy section.

Unless otherwise specified, all legal references in this document refer to the GDPR.

1. Data Controller

The data controller is the company ALF S.R.L., with registered office in Via Luigi Einaudi, 7, in Alba (CN – 12051), VAT number 03915050045, reachable by phone at +39 0173 592970.

2. Appointment RDP – DPO

The Controller, not falling within the cases indicated by Article 37, nor within those indicated in the various interpretations of the Supervisory Authority, has deemed it unnecessary to appoint a Data Protection Officer.

3. Purpose of Processing
3.1 Browsing Data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to the user’s operating system and IT environment.

3.2 Data voluntarily provided by the user

The optional, explicit, and voluntary sending of emails to the addresses indicated on this site, or the sending of a message via WhatsApp chat, entails the subsequent acquisition of the sender’s address and/or phone number, necessary to respond to the requests, as well as any other personal data included in the message.
The processing of your personal information will be based on the principles of fairness, lawfulness, transparency, and the protection of confidentiality. It will be processed and stored using electronic tools for the time strictly necessary to achieve the purposes for which it was collected.
Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.

3.3 Cookies

Cookies are small text files that websites send to the user’s device, where they are stored and then sent back to the same websites upon subsequent visits.

The website uses:

  • Session cookies, which are not used to collect personally identifiable data. Their use is limited to the transmission of session identifiers in the form of numbers automatically generated by the server, with no possibility of personalization. These session cookies are not stored permanently on the user’s device and are automatically deleted when the browser is closed.
  • A technical cookie that allows the user to save their preferences during the vehicle search process on the website. This cookie remains local, is not transmitted in any way, and is used solely to improve the user’s browsing experience.
  • Third-party cookies for displaying the Google Maps map. The Data Controller does not have access to the data collected and processed independently by third parties. For more information about how data is processed by Google Maps, users are encouraged to read the privacy policies provided by the service providers.

Technical cookies are not used for user profiling activities. The website does not use any kind of profiling cookies.

Users can choose to enable or disable cookies by adjusting the settings of their browser, according to the instructions provided by the respective providers at the following links:

On the website alfcreative.it, there is a banner that allows users to enable or disable cookies individually at any time.

The site also incorporates plugins and/or buttons to allow easy sharing of content on your favorite social networks. When visiting a page of our website that contains a plugin, the browser connects directly to the servers of the social network from which the plugin is loaded. That server can track the visit to our website and, if applicable, associate it with the social account, especially if the user is logged in at the time of the visit or has recently browsed one of the websites containing social plugins. If you do not want the social network to record data related to the visit to our website, you must log out of your social account and probably delete the cookies that the social network has installed in your browser.

On this website, plugins with advanced user privacy protection functions are installed, which do not send cookies or access cookies present in the user’s browser upon page load but only after the plugin is clicked.

The collection and use of information by these third parties are governed by their respective privacy policies, to which reference is advised.

3.4 Newsletter

The website provides for subscription to the Data Controller’s newsletter through the appropriate form. The entered email address is stored in the Controller’s CRM and is used to send institutional and/or commercial communications.

4. Purpose of processing, legal basis, nature of provision..

The purpose of the processing referred to in point 3.1 is to obtain anonymous statistical information about the use of the website and to monitor its proper functioning. The data may be used to establish liability in the event of hypothetical cybercrimes against the site. The processing is lawful pursuant to Art. 6, paragraph 1, letters b) and f) of the GDPR. Providing the data is mandatory; failure to do so will result in the inability to properly manage contractual aspects.

The purpose of the processing referred to in point 3.2 is always connected and/or instrumental to the consultation of the website (therefore excluding any use different from and/or conflicting with those of the Data Subject). Specifically, the processing is limited to responding to the requests made by the Data Subject. This processing is lawful pursuant to Art. 6, paragraph 1, letter b) and does not require the explicit consent of the Data Subject. The provision of data is optional; however, refusal to provide the relevant personal data for the purpose of collection will make it impossible to obtain what is requested.

The purpose of the processing referred to in point 3.3 is to improve the user browsing experience and to collect aggregated information for statistical purposes. Providing data is optional, but cookie management depends on the functionalities of the web browsers.

The purpose of the processing referred to in point 3.4 is the sending of commercial and/or institutional communications. The processing is optional, lawful pursuant to Art. 6, paragraph 1, letter a), and requires your explicit consent.

5. Methods of processing, duration of processing

The processing of your personal data relating to point 3.1 is carried out by means of the operations indicated in Art. 4 no. 2) GDPR, specifically: collection, recording, organization, use, deletion. Your personal data are subject to electronic and/or automated processing and are deleted immediately after processing.
The processing of your personal data relating to point 3.2 is carried out by means of the operations indicated in Art. 4 no. 2) GDPR, specifically: collection, recording, organization, use, deletion. Your personal data are subject to electronic and/or automated processing and are deleted once the purpose for which they were provided has been fulfilled. Your personal data will in no case be subject to dissemination.
The processing of your personal data relating to point 3.3 takes place according to the rules and methods of the service providers, as indicated in the dedicated notices referred to in point 3.3. The expiration of cookies is defined by you, through the browsing tool. In any case, it does not exceed 6 months.
The processing of your personal data relating to point 3.4 is carried out exclusively by electronic means and involves collection, recording, organization, consultation, selection, use, and deletion. Your personal data are subject to electronic and/or automated processing, are retained until obsolescence or until you provide different instructions, and are not subject to dissemination.

6. Data Access

Your data may be made accessible for the purposes described in point 4) to employees and collaborators of the Data Controller, if authorized to process the data, and/or system administrators, or to third-party companies or other entities (for example, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, professional partners, etc.) that perform outsourcing activities on behalf of the Data Controller, in their capacity as external data processors.

7. Data Disclosure

Without the need for your explicit consent (pursuant to Art. 6 letters c) and f) of the GDPR), the Data Controller may disclose your data for the purposes indicated in point 4) to supervisory bodies, public entities (in particular healthcare institutions), judicial authorities, insurance companies for the provision of insurance services, as well as to those entities to whom disclosure is legally required for the fulfillment of the stated purposes. These entities will process the data as independent data controllers. Your data will not be disseminated.

8. Transfer of Data to Non-EU Countries

The personal data provided, as referred to in point 3), are stored electronically on servers located at the Data Controller’s premises or on servers of web service providers within the European Union. It is understood, however, that the Data Controller, if necessary, may transfer archives and servers to other countries within the EU or also outside the EU, for example in the case of using Cloud services. In such cases, the Data Controller hereby ensures that the transfer of data outside the EU will be carried out in compliance with the applicable legal provisions, following the execution of the standard contractual clauses established by the European Commission.

9. Rights of the Data Subject

ALF guarantees Your Company the exercise of the rights provided by law for data subjects and ensures cooperation in response to specific requests from data subjects. However, ALF does not guarantee (unless otherwise agreed with Your Company) the direct exercise of these rights by the data subjects themselves. In case of such requests, ALF will simply forward the request to Your Company.

Data subjects enjoy the rights referred to in Articles 15, 16, 17, 18, 19, 20, 21, and 22 of the GDPR. Specifically:

  1. Right of access
  2. Right to rectification
  3. Right to erasure (“right to be forgotten”)
  4. Right to restriction of processing
  5. Right to notification obligation in case of rectification, erasure, or restriction of processing
  6. Right to data portability
  7. Right to object
  8. Rights related to automated decision-making concerning natural persons, including profiling

10. Methods for Exercising the Data Subject’s Rights

Any data subject may exercise their rights at any time by sending:

  1. 1. A registered letter with return receipt addressed to the Data Controller, as indicated in point 1)
  2. An email to the address privacy@alfcreative.it

The privacy policy was last updated in 10/2024.