Privacy Policy

1. Data Controller

The Data Controller is:

AlphaWeb di Chernysh Pavlo
Via Bondanello 18/B, 40013 Castel Maggiore (BO) — Italy
VAT IT04071621207
Email: info@alphawebsolutions.it

No Data Protection Officer (DPO) has been appointed, as the mandatory conditions under art. 37 GDPR do not apply. For any privacy matter, you may write directly to the Controller.

2. Data collected

AlphaWeb processes the following categories of personal data:

2.1 Data provided voluntarily by the user

• Contact details: first name, last name, email, phone number, company name, provided by filling in the contact forms, quote requests or the quote calculator.
• Communication content: the text of messages sent via the site's forms or messaging channels (e.g. WhatsApp).
• Service-related data: information provided as part of a web development project (content, materials, technical access), processed to perform the contract.
• Payment data: processed directly by the provider Stripe (based in Ireland, EU). AlphaWeb does not store credit card numbers or bank details; it receives only payment confirmation and the minimum data required for invoicing.

2.2 Data collected automatically

• Navigation data: IP address, browser type, operating system, referring URL, pages visited, date and time of the visit.
• Cookies: please refer to the Cookie Policy for details of the types used.
• System logs: files generated automatically by IT systems for security and diagnostic purposes.

3. Purposes and legal bases of processing

The personal data collected is processed for the following purposes:

Providing contact details is optional, but failure to do so makes it impossible to receive a reply to requests or to use the services.

4. Data retention

Personal data is kept for the time strictly necessary for the purposes for which it was collected:

• Contact and quote data: up to 24 months from the last contact, unless a contractual relationship is subsequently established.
• Contractual and invoicing data: 10 years, as required by tax and civil law.
• Navigation data and logs: up to 12 months, unless needed to investigate offences.
• Data processed on the basis of consent: until consent is withdrawn.

5. Data recipients

Personal data may be shared with third parties acting as data processors, solely for the purposes indicated above:

• Hosting provider — for technical management of the site and data;
• Stripe — for payment processing;
• Google (Analytics) — for navigation statistics, subject to consent;
• Meta — for marketing purposes, subject to consent;
• Tax advisors and professionals — for administrative and legal obligations.

Data is never disclosed publicly or sold to third parties.

6. Non-EU data transfers

Some providers (e.g. Google, Meta) may process data outside the European Economic Area. In such cases, the transfer takes place with adequate safeguards pursuant to art. 44 et seq. of the GDPR, such as the Standard Contractual Clauses approved by the European Commission or adequacy decisions.

7. Rights of the data subject

As a data subject, you have the right to exercise the following rights under arts. 15-22 of the GDPR at any time:

• Access — obtain confirmation and a copy of the data processed;
• Rectification — correct inaccurate or incomplete data;
• Erasure ("right to be forgotten") — obtain deletion of the data;
• Restriction — restrict processing in certain cases;
• Portability — receive the data in a structured, readable format;
• Objection — object to processing based on legitimate interest or marketing;
• Withdrawal of consent — at any time, without affecting the lawfulness of prior processing.

To exercise your rights, write to info@alphawebsolutions.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

8. Data security

AlphaWeb adopts appropriate technical and organisational measures to protect data from unauthorised access, loss or disclosure: encrypted connections (HTTPS/SSL), passwords stored exclusively in encrypted form using secure hashing algorithms, periodic backups and access limited to authorised personnel only.

9. Minors' data

AlphaWeb's services are aimed at a professional audience and are not intended for minors under 16. We do not knowingly collect minors' data. Should we become aware of any unintentional processing of such data, we will promptly delete it.

10. Changes to this policy

AlphaWeb reserves the right to update this policy to reflect regulatory or organisational changes. The updated version is always available on this page with the date of the last revision.

For any questions: info@alphawebsolutions.it.