Privacy

Controller and contact

The data controller is Allix S.r.l. For information about personal data and to exercise your rights, contact Christian Allevi, privacy contact, at Contact form. Registered office: Via Matteotti 10/10, 20012 Cuggiono (MI), Italy. VAT no.: 03145900969.

Data, purposes and legal bases

When you contact us, we process your name, email address, optional phone number and message to respond and manage your enquiry. Enquiries about quotations or services are processed to take pre-contractual steps at your request (GDPR Article 6(1)(b)). Other professional communications rely on our legitimate interest in responding to enquiries (Article 6(1)(f)), taking account of your rights. Statutory obligations rely on Article 6(1)(c).

Required fields identify the information necessary to handle your enquiry; without it we cannot respond. Your phone number is optional. Please do not send special-category or unnecessary personal data. We do not use your contact details for analytics, profiling or marketing and do not make automated decisions.

Browsing and security

The hosting infrastructure may process technical data such as IP address, time, requested resource and browser information to provide and secure the service. This relies on the legitimate interest in website operation and security. The website does not integrate traffic analytics or marketing tools.

Recipients

Form submissions are delivered through Aruba email services and handled in Allix email accounts. Allix does not transfer them to CRM or ticketing systems, shared folders or additional backup archives. Access is limited to authorised Allix personnel and Aruba S.p.A., the hosting and email provider, as needed to deliver and secure the services. Processing entrusted to Aruba is governed by its contractual terms and appointment as processor under GDPR Article 28. Any technical copies and logs maintained by the provider are separate from archives organised by Allix. Data may be disclosed to authorities when required by law and are not made public.

Retention

Enquiries that do not lead to a business relationship are kept while they are being handled and for 12 months after closure, then deleted. Where a business relationship is established, the data needed to manage it are processed for its duration; documents subject to statutory retention requirements are kept for the periods required by applicable law. In a dispute, only the data needed to establish, exercise or defend legal claims may be retained for the duration of the dispute and for any period required by applicable law. The 12-month period applies to the enquiry content handled by Allix. Aruba has indicated that logs are retained for no longer than 6 months for service delivery and management, diagnostics and security. It clarified that this does not confirm the existence or availability of all logs for every service: email log availability must be checked case by case. This limit is separate from the 12 months applied by Allix to enquiries. Aruba has not confirmed whether technical copies, replicas, snapshots or infrastructure backups exist for the specific email accounts, or how long messages remain in any such copies; no definite deletion period for these possible copies is therefore stated.

External services and transfers

No external video, map, font or tracking service loads automatically. Links to Vimeo and other websites open separate services with their own privacy notices; these may process data outside the European Economic Area. Please read their notices before using them. Allix uses Aruba services to deliver the form and handle enquiries. Processing terms, including any subprocessors, are set out in the Aruba service terms. In its replies of 27 October 2026, Aruba confirmed that data relating to service delivery, including the email service active on the domain, are stored on infrastructure in Italy, with no transfers to countries outside the European Union or access by third parties located in those countries.

Your rights

Where applicable under the GDPR, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. Use the contact form linked above and enter “Privacy” in the subject. You may lodge a complaint with the Italian data protection authority. Marketing consent is not required to send an enquiry.

Updated: 28 October 2026. Notice revised on the basis of Aruba’s replies of 27 October 2026. The existence and deletion periods of any technical copies of email accounts remain unconfirmed by the provider.