Privacy Policy

In compliance with the obligations derived from the national (Legislative Decree No. 196 of June 30, 2003, Code on the Protection of Personal Data, as updated by Legislative Decree 101/2018) and EU (European Regulation 2016/679, GDPR) regulations and subsequent amendments, this site respects and protects the privacy of visitors and users, making every possible and proportionate effort not to infringe the rights of users. This privacy policy applies only to the online activities of this site and is valid for visitors/users of the site.The purpose of the privacy policy is to provide maximum transparency regarding the information the site collects and how it uses it.

Data collected

This site collects and processes Personal Data, as defined by the GDPR, either independently or through third parties, or provided voluntarily by the user, including:

• Internet protocol (IP) address; Browser type and parameters of the device used to connect to the site; Name of the internet service provider (ISP); Date and time of the visit; Visitor's origin (referral) and exit web page; Possibly the number of clicks. Cookies and Usage Data, collected by automated processes;

The above information is processed in automated form and collected in an aggregated and pseudonymized form only in order to verify the proper functioning of the site and for security reasons; this information will be processed according to the legitimate interests of the owner.

For security purposes (spam filters, firewalls, virus detection), automatically recorded data may possibly also include personal data such as IP address, which could be used, in accordance with relevant laws, in order to block attempts to damage the site itself or to harm other users, or otherwise harmful or criminal activities. Such data is never used for user identification or profiling, but only for the purpose of protecting the site and its users; such information is processed according to the legitimate interests of the owner.

• Personal, personal data (section “contacts”) - the latter released voluntarily by the user and not determining the operation of the Site.

Any use of Cookies - or other tracking tools - by this Site or the owners of third party services used by this Application, unless otherwise specified, has the purpose of providing the Service requested by the User, in addition to the additional purposes described in this document and in the Cookie Policy, to which reference is made.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application and warrants that he/she has the right to communicate or disseminate it, releasing the Owner from any liability towards third parties.

Methods of processing

The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The processing is carried out by means of computer and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes. In addition to the Data Controller, in some cases, other internal involved parties or external parties (such as third party technical service providers, hosting providers, IT companies, communication agencies) appointed as Data Processors by the Data Controller may have access to the Data.

Place of processing

The data collected by the site are processed by the Data Controller and are handled only by technical staff authorized to process or appointed as External Data Processor in accordance with Art. 28 EU Reg. 2016/679. The server hosting the site is located in Italy.

This site may share some of the data collected with services located outside the area of the European Union, always in compliance with the rights and guarantees provided by the regulations in force, pursuant to Articles 44 et seq. of EU Reg. 2016/679.

Retention period

The Data are processed and kept for the time required by the purposes for which they were collected.Personal Data collected for purposes related to the performance of the service requested by the User will be kept until the performance of that service is completed. With respect to any Personal Data collected for purposes based on the User's consent, the Data Controller may retain the Personal Data longer until such consent is revoked.

In addition, the Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, the Personal Data will be deleted. Therefore, at the expiration of this period the right of access, deletion, rectification and the right to Data portability can no longer be exercised.

Purposes of the data collected

User Data is collected for the following purposes:

• To monitor the infrastructure;

• Contacting the User in case of contact requests from the User;

Security measures

This site processes user data in a lawful and correct manner, taking appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of data. The processing is carried out by means of computer and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes. In addition to the owner, in some cases, may have access to data categories of those involved in the organization of the site or external parties (such as third party technical service providers, hosting providers, IT companies, communication agencies).

Rights of the user

With regard to the personal data itself, the data subject may exercise the rights provided for in Art. 15 et seq. GDPR, namely:

Right of access (art. 15) - Consists in obtaining from the Data Controller the confirmation whether or not a processing of personal data concerning him/her is taking place, and if so, to obtain access to the same data and to certain information (explicated in the mentioned article) regarding the data in question. Right of rectification (art. 16) - Consists of giving the data subject the opportunity to change his or her data in case they are inaccurate. Right of deletion (art. 17) - Possibility on the part of the data subject to delete his or her data in the possession of the data controller when, for example, consent to processing is revoked or the purpose pursued is reached or when it proves to be unlawful. Of course, it will not always be possible to fulfill the request for deletion. This happens, for example, when the data are needed to fulfill a legal obligation or are necessary for the defense of a right in court. Right of object (art. 21) - The possibility to object to processing, should be guaranteed when the legal basis is legitimate interest or the performance of a public interest task. This right also has its limits in that there may be cases where the legitimate interest of the data controller prevails over that of the data subject, fundamental will be to make the right balance, or the processing is necessary for a task of public interest or the establishment, defense or exercise of a right before a judge. Right to portability (art. 20) – provides that where a processing is based on contract or consent, upon request, the data subject shall be provided with his or her personal data in a structured, machine-readable format (json, xml, csv), this right applies only to data provided spontaneously and not to inferred or derived data.  

Right of revocation (art. 7) - In case of signing any form of consent to the processing required by the Data Controller, it is noted that the data subject may revoke it at any time, without prejudice to the mandatory requirements of the legislation in force at the time of the request for revocation, by contacting the Data Controller at the contact details given above, at the address given above, or by email, specifying the subject of his request, the right he intends to exercise and attaching a photocopy of an identity document attesting to the legitimacy of the request.

The data subject has the right to lodge a complaint with the competent supervisory authority in the Member State where he or she normally resides or works or in the State where the alleged violation occurred.

All of the aforementioned rights may be exercised by sending an appropriate request to the Data Controller through the contact channels indicated in this notice.

Data Controller

The Data Controller is ALPING ITALIA S.R.L. having its registered office in Via Alessandro Volta, 18 - 33050 Pavia di Udine (UD) whom you can contact by writing to the following e-mail address: info@alping.it, or by calling 0432.526331.


Pavia di Udine (UD), December 16th 2024