Privacy Policy.

Article 1

Data controller

The owner of the processing of personal data collected through the website www.aldenasite.com it is:

For any question regarding the processing of your personal data, you can contact us directly at the above-mentioned contact details.

Article 2

Categories of personal data processed

We only process the data that you provide voluntarily or that is collected automatically during navigation. The categories are as follows:

• Navigation data — IP address, browser type, operating system, pages visited, session duration. Collected automatically by the servers and by Google Analytics.
• Data provided through the contact form — name, email address, subject and text of the message that you voluntarily enter into the form.
• Automation data (Make.com) — the form data pass through the Make.com platform for automatic routing to our support inbox. No data is permanently stored on that platform beyond the time strictly necessary for the transmission.
• Cookies and profiling data — only with your explicit consent, as described in Art. 7.

We do not collect special categories of data (so-called sensitive data under Article 9 of the GDPR) nor data relating to persons under 16 years of age. We ask you not to send us such information.

Article 3

Purposes of the processing and legal bases

Your data are processed for the following purposes, each with its own legal basis:

• Response to contact requests — when filling out the contact form, your data is used exclusively to respond to your request and to contact you again through our support team.
  Legal basis: Article 6(1)(b) GDPR — pre-contractual measures at the request of the data subject
• Site management and security — the navigation data are processed to ensure the proper functioning of the site, prevent abuse, and resolve technical problems.
  Legal basis: Art. 6(1)(f) GDPR — legitimate interest of the data controller
• Aggregate statistical analysis — through Google Analytics we collect anonymous data on the use of the site to improve its content and performance.
  Legal basis: Art. 6(1)(a) GDPR — consent of the data subject
• Protection against spam and bots — the Google reCAPTCHA service verifies that the interactions come from real users.
  Legal basis: Art. 6(1)(f) GDPR — legitimate interest of the data controller

We do not use your data for purposes other than those indicated. We do not engage in direct marketing, commercial profiling, or the transfer of data to third parties for our own purposes.

Article 4

Mode of treatment and data flow

The data sent through the contact form follow the following path:

• Submission from the form — the data (name, email, subject, message) are transmitted in encrypted form via HTTPS to the webhook of the Make.com platform.
• Automation Make.com — Make.com automatically forwards the message to Aldena's support email box. The data passes through the platform without being permanently stored within it.
• Internal reception and management — our support team receives the request via email and contacts you using the address you provided.
• Conservation — the message is kept in the company email box for the time necessary to process the request (see Art. 6).

The processing takes place using computer and telematics tools, adopting security measures adequate to prevent unauthorized access, loss or unlawful disclosure of data.

Article 5

Third-party services and data controllers

To provide its services, the site uses the following providers, appointed as data controllers pursuant to Article 28 of the GDPR or operating as autonomous controllers:

Suppliers based in the USA operate in compliance with the EU-US Data Privacy Framework or through standard contractual clauses approved by the European Commission (Article 46 GDPR), ensuring an adequate level of protection.

Your data is not disclosed to third parties for their own purposes, nor is it disseminated.

Article 6

Data retention period

• Data from the contact form — kept for the time necessary to handle the request and for a maximum of 24 months from the receipt, except for legal obligations that require longer storage.
• Navigation data (system log) — kept for a maximum of 12 months for security and technical diagnostic purposes.
• Google Analytics analytical data — stored according to the retention settings configured on the service (usually 14 months from collection).
• Technical cookies — kept for the duration of the session or up to 12 months, depending on the specific type.

After the specified deadlines have passed, the data is deleted or rendered irreversibly anonymous.

Article 7

Cookies and tracking technologies

The site uses cookies and similar technologies. Depending on their function, they can be divided into:

• Technical cookies / strictly necessary — indispensable for the functioning of the site (session management, security, preferences). They do not require your consent.
• Third-party analytical cookies (Google Analytics) — collect aggregated data on user behavior to improve the site. They are activated only with your consent.
• ReCAPTCHA cookies (Google) — used to distinguish real users from automated bots. They are activated when the contact form is loaded.

Upon first access, a banner is displayed that allows you to express or deny consent to non-essential cookies. You can modify your preferences at any time via the "Cookie Management" link in the footer of the site.

You can also disable or delete cookies directly from your browser settings at any time, without this affecting the navigation of the essential features of the site.

Article 8

Your rights

Pursuant to Articles 15–22 of the GDPR, you have the right to:

To exercise your rights, write to info@aldenasite.com by indicating in the subject "Exercise GDPR rights". We will respond within 30 days of receiving the request, as provided for in Article 12 of the GDPR.

Article 9

Minors

The site is not intended for persons under the age of 16. We do not knowingly collect personal data from minors. If you believe that a minor has sent us data without the consent of a parent or legal guardian, please contact us immediately at info@aldenasite.comWe will proceed with the cancellation without delay.

Article 10

Data security

We adopt appropriate technical and organizational measures to protect your data from unauthorized access, loss, destruction, or unlawful disclosure. These include HTTPS encryption for all communications, access to data limited to authorized personnel only, and regular updating of the systems and platforms used.

No transmission system over the Internet can be guaranteed to be completely secure. In the event of a data breach (data breach) that poses a high risk to your rights, we will inform you promptly in accordance with Article 34 of the GDPR.

Article 11

Changes to this information

We reserve the right to update this Privacy Policy to adapt it to regulatory changes or new treatments. The "last modified" date at the top of the page will always be updated. We invite you to consult this page periodically.

For uses of your data that are significantly different from those described, we will ask for a new explicit consent.

Article 12

Reference legislation

• EU Regulation 2016/679 (GDPR) — General Regulation on the protection of personal data
• Legislative Decree 196/2003 (Privacy Code) as modified by Legislative Decree 101/2018
• Provisions of the Data Protection Commissioner
• Guidelines and Privacy — regarding cookies and tracking technologies (Garante, 2021)