Privacy Policy — Personal Data Processing Notice
Alleantia S.r.l.
Via Tosco Romagnola 136, 56025 Pontedera (PI) — Italy
Email: info@alleantia.com
Privacy Contact: privacy@alleantia.com
Alleantia S.r.l. is not required to appoint a Data Protection Officer (DPO) under Art. 37 GDPR. For any matter relating to the protection of your personal data, you may contact our Privacy Contact at the address above.
Depending on how you interact with our website and services, we may process the following categories of personal data:
- First name, last name, email address, company name, professional role
- Content of messages, requests for information or technical support
- Curriculum vitae and data relating to job applications
- Account credentials for access to the Cloud Portal
- IP address, browser type and operating system
- Pages visited, session duration, traffic source
- Cookies and similar technologies (for details, see our Cookie Policy)
We do not collect special categories of personal data (sensitive data) under Art. 9 GDPR, unless voluntarily provided by the user, for example within a curriculum vitae.
Responding to requests for information, technical demos, assistance and support related to our products and services. Legal basis: performance of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR).
Managing software downloads, licence activation and delivery of subscribed services. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Registration, authentication and user account management on the cloud platform. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Evaluating CVs and profiles received for potential recruitment. Legal basis: performance of pre-contractual measures (Art. 6(1)(b) GDPR).
Complying with statutory obligations in tax, accounting and administrative matters. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
Establishing, exercising or defending Alleantia's legal rights in judicial or extrajudicial proceedings. Legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR).
Sending commercial communications, product updates, event invitations and newsletters, subject to the data subject's prior explicit consent. Consent may be withdrawn at any time. Legal basis: consent (Art. 6(1)(a) GDPR).
Sending commercial communications regarding products or services analogous to those already purchased, to customers whose data were collected in the context of a sale. Legal basis: legitimate interest and Art. 130(4) of Italian Legislative Decree 196/2003. The data subject may object at any time and each communication includes an immediate unsubscribe option.
Personal data are processed by authorised Alleantia employees and collaborators, bound by confidentiality obligations. Data may also be disclosed to:
- Technology service providers acting as Data Processors (e.g. CRM platforms, email marketing, cloud hosting)
- Professional advisors (legal, tax, accounting) to the extent strictly necessary
- Public authorities and supervisory bodies, where required by law
Data are never sold or transferred to third parties for their own marketing purposes.
Some of our service providers are established in or process data in the United States. In such cases, the transfer takes place in compliance with the safeguards required by Chapter V of the GDPR. The table below lists the main transfers and the applicable safeguards:
| Provider | Service | Country | Safeguard |
|---|---|---|---|
| HubSpot Inc. | CRM, email marketing, chat | USA | Standard Contractual Clauses (SCC) — EC Decision 2021/914 |
| Google LLC | Google Analytics 4, Google Ads | USA | SCC + EU–US Data Privacy Framework |
| Microsoft Corporation | Microsoft Clarity | USA | SCC + EU–US Data Privacy Framework |
| Meta Platforms Inc. | Facebook/Instagram Ads | USA | SCC — EC Decision 2021/914 |
| LinkedIn Ireland | LinkedIn Ads | EU/USA | EU entity; US transfers covered by SCC |
To obtain a copy of the safeguards in place, please write to privacy@alleantia.com.
| Purpose | Retention period | Rationale |
|---|---|---|
| A — Enquiries and contacts | 24 months from closure of the request | Reasonable period for potential commercial follow-up |
| B — Software and services | Duration of contract + 10 years | Tax and accounting obligations (Art. 2220 Italian Civil Code) |
| C — Cloud Portal | Duration of account + 24 months | Post-cancellation management and support |
| D — Job applications | 24 months from receipt of CV | Italian Data Protection Authority guidelines |
| E — Legal obligations | 10 years | Tax and accounting obligations (Art. 2220 Italian Civil Code) |
| F — Protection of rights | Duration of proceedings + 10 years | Ordinary limitation period (Art. 2946 Italian Civil Code) |
| G — Newsletter | Until consent is withdrawn | Consent is the legal basis for processing |
| H — Soft opt-in marketing | Until the right to object is exercised | Art. 130(4) Italian Legislative Decree 196/2003 |
Under Arts. 15–22 of the GDPR, you have the right to:
The site uses technical cookies (necessary for operation) and, subject to consent, analytical, marketing and functional cookies. For detailed information about the types of cookies used, the third-party providers involved and how to manage your preferences, please refer to our Cookie Policy.
This Privacy Policy may be updated to reflect regulatory, technological or operational changes. Any material changes will be communicated to users through notices on the website. The date of the latest update is shown at the top of this page.
Alleantia S.r.l.
Via Tosco Romagnola 136, 56025 Pontedera (PI) — Italy
Email: info@alleantia.com
Privacy: privacy@alleantia.com
Supervisory Authority: Garante per la protezione dei dati personali — www.garanteprivacy.it