AlbertaOS
.txt
README
.pdf
CV.pdf
Privacy.txt

Privacy Policy

Information provided pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter "the GDPR").

Last updated: 21 August 2026

1. Introduction

This document describes how the personal data of users visiting the website albertascardapane.it (hereinafter "the Site") are processed.

The Site does not carry out sales activities, does not provide restricted areas and does not require registration of any kind. No processing is carried out for direct marketing purposes, for profiling, or for automated decision-making within the meaning of Article 22 of the GDPR. Personal data are neither disseminated nor transferred to third parties.

2. Data Controller

The Data Controller is Alberta Scardapane, C.da Follani 300, 66034 Lanciano (CH), Italy, email address alberta@seoabruzzo.it.

No Data Protection Officer has been appointed, the conditions set out in Article 37 of the GDPR not being met.

3. Categories of data processed

3.1 Data provided through the contact form

The contact form available on the Site collects the user's name, email address, the subject selected from those offered, and the text of the message.

The provision of such data is optional. However, failure to provide the name, the email address and the message prevents the request from being submitted and consequently from being answered.

3.2 Data recorded upon submission of the form

When the form is submitted, the system records the following information together with the message:

This information is generated by the server and is not transmitted by the user's browser. That choice is intended to ensure its integrity, since it would otherwise be impossible to rule out that the same values had been altered upon submission. The information is retained within the email message received by the Data Controller and not in any separate archive.

3.3 Browsing data

The computer systems and software procedures used to operate the Site acquire, in the course of their normal operation, certain data whose transmission is inherent in the use of Internet communication protocols, including the IP address. Such data are used solely in order to deliver the service and to ensure the security of the Site.

Subject to the user's consent, expressed through the dedicated banner, statistical measurement tools are also activated. In the absence of consent, the relevant scripts are not executed. Details of cookies and other tracking tools are set out in the cookie policy.

3.4 Display preferences

The user's preference for the light or dark theme is stored in the local storage of the user's browser, under the key albertaos-tema. The data is purely technical, contains no personal information, is not transmitted to any server and is not accessible to the Data Controller. It may be removed at any time by clearing the site data from the browser settings.

3.5 Data recorded with the cookie choice

When a choice is made through the banner, the following are recorded: a random identifier generated by the browser, the date and time of the choice expressed in Coordinated Universal Time, the choice made, the exact text and version of the notice displayed, the language of the page, the IP address and the country derived from it, and the identifier of the browser.

This record is necessary in order to demonstrate that consent was given, as required by Article 7(1) of the GDPR. Here too the information is generated by the server and is not transmitted by the user's browser. It is stored in a database bound to the jurisdiction of the European Union.

4. Purposes and legal bases of processing

PurposeLegal basis
Responding to requests submitted through the contact formConsent of the data subject, given by ticking the dedicated checkbox (Article 6(1)(a) GDPR)
Retaining the consent statement and the elements evidencing itRequirement to demonstrate that the data subject has given consent (Article 7(1) GDPR)
Retaining evidence of consent to the use of statistical toolsRequirement to demonstrate that the data subject has given consent (Article 7(1) GDPR)
Operation, maintenance and security of the SiteLegitimate interest of the Data Controller (Article 6(1)(f) GDPR)
Statistical measurement of visitsConsent of the data subject, given through the banner (Article 6(1)(a) GDPR)

Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal. Consent to statistical tools may be withdrawn from the "Cookie preferences" entry in the system menu, available on every page of the Site. Consent relating to the contact form may be withdrawn by writing to the address given in section 2.

5. Recipients of the data

Personal data are processed by the Data Controller and may be disclosed to the parties listed below, acting as data processors within the meaning of Article 28 of the GDPR.

PartyActivity performedLocation
Cloudflare, Inc.Hosting and delivery of the Site, receipt of the contact form, storage of the consent recordUnited States
Sendinblue SAS (Brevo)Delivery of the email message generated by the formFrance
Aruba S.p.A.Operation of the destination mailboxItaly
Google Ireland LimitedStatistical measurement of visits, subject to consentIreland

Data may also be disclosed to the competent authorities in compliance with legal obligations.

6. Transfers to third countries

Three of the parties listed in section 5 are established in the European Union. Cloudflare, Inc. is established in the United States of America; the consent record referred to in section 3.5 is nevertheless stored in a database bound to the jurisdiction of the European Union, and the data it contains do not leave it. Google Ireland Limited, although established in Ireland, relies on its parent company Google LLC, established in the United States of America.

In both cases the transfer takes place on the basis of the Standard Contractual Clauses adopted by the European Commission pursuant to Article 46(2)(c) of the GDPR, and of the adherence of those parties to the EU-US Data Privacy Framework, which is the subject of the European Commission adequacy decision of 10 July 2023.

7. Retention period

Messages received through the contact form, together with the information referred to in section 3.2, are retained for as long as necessary to handle the request and any relationship arising from it, and in any event for no longer than 24 months from the last contact between the parties.

Where a contractual relationship arises from the request, the related documentation is retained for the periods prescribed by the applicable civil and tax legislation.

The records referred to in section 3.5 are retained for 24 months from the date of the choice, that being the period within which it may be necessary to demonstrate that consent was given.

Browsing data and data collected through statistical tools are retained for the periods established by the respective providers. The duration of individual cookies is stated in the cookie policy.

8. Rights of the data subject

In the cases provided for by Articles 15 to 22 of the GDPR, the data subject has the right to obtain from the Data Controller:

Requests are to be addressed to the email address given in section 2. A reply is provided without undue delay and in any event within one month of receipt of the request, free of charge.

A data subject who considers that the processing does not comply with applicable law also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it), or with the supervisory authority of the Member State of their habitual residence.

9. Amendments to this policy

The Data Controller reserves the right to amend this policy as a result of changes in the methods of processing or in the tools employed. Amendments are published on this page, and the date shown at the top is updated accordingly. Where amendments concern processing subject to consent, consent is requested again through the banner.