Privacy Policy

Last update: 02/10/2025

1. Data Controller

ALFIERI SRL
CF: 02904410178 – P.IVA: 00703760983
Viale Francesco Agello 114/A, 25015 Desenzano del Garda, Italia
Tel: +39 030 553999 – Email: [email protected]

2. Types of Data Processed

• Browsing data (e.g. IP addresses, technical logs, device identifiers, session data, user agent), automatically collected by the website for security and functionality purposes.
• Data voluntarily provided (e.g. name, surname, email, phone, message content) through contact or booking request forms.
• Contractual data (e.g. billing details, booking information) when proceeding with requests/quotes/services.
• Cookies and similar technologies. For more details, please see our Cookie Policy.

3. Purposes and Legal Bases

• Website operation and security (logs, abuse prevention) – legitimate interest of the Controller (Art. 6.1.f GDPR).
• Handling requests sent via forms/email and related communications – pre-contractual measures or contract performance (Art. 6.1.b).
• Management of bookings/services , administrative and accounting obligations – contract performance (Art. 6.1.b) and legal obligation (Art. 6.1.c).
• Direct marketing by email/phone (only if requested or authorized) – consent (Art. 6.1.a) or legitimate interest towards existing clients, within the limits of the law.
• Legal defense – legitimate interest (Art. 6.1.f).

4. Data Provision

Providing mandatory data in forms is necessary to handle your request or deliver the service. Failure to provide such data may prevent us from fulfilling the request. Data provided for optional purposes (e.g. marketing) is subject to consent.

5. Processing Methods

Processing is carried out using IT and/or paper-based tools, with appropriate technical and organizational measures to ensure data security, in compliance with the principles of lawfulness, fairness and transparency (Art. 5 GDPR). No fully automated decision-making producing legal effects on the data subject is carried out, unless otherwise indicated in the Cookie Policy.

6. Data Retention

• Contact data: for the time necessary to respond and up to 24 months from the last useful contact.
• Contractual/billing data: for the periods established by civil and tax law (usually 10 years).
• Marketing data: until withdrawal of consent or objection, and in any case within legal limits.
• Technical logs: according to security and maintenance needs (typically 6–24 months).

7. Data Recipients

Data may be disclosed to subjects acting as Data Processors pursuant to Art. 28 GDPR (e.g. hosting providers, IT maintenance, booking engines, CRM/email providers, accounting consultants), as well as to subjects legally entitled (authorities and supervisory bodies). The updated list of Processors is available upon request.

8. Transfers to Non-EU Countries

Some service providers may operate outside the EU. In such cases, the transfer will take place in compliance with Chapter V of the GDPR, based on adequacy decisions of the European Commission, Standard Contractual Clauses or other appropriate safeguards. A copy of the safeguards may be requested from the Controller.

9. Data Subject Rights

You may exercise at any time the rights provided by Articles 15–22 GDPR, including access, rectification, erasure, restriction, portability, objection, and withdrawal of consent (without prejudice to the lawfulness of processing based on consent before withdrawal). Requests should be sent to [email protected] or to the postal address indicated in Section 1.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the Supervisory Authority of your country of residence or work.

11. External Links

The website may contain links to third-party websites/services. The respective privacy and cookie policies are the sole responsibility of those third parties. Please review them on the relevant sites.

12. Changes

The Controller reserves the right to modify this policy to comply with regulatory or technical updates. Changes will be published on this page with the update date. Le modifiche saranno pubblicate su questa pagina con indicazione della data di aggiornamento.

Short Notice for Online Forms

By filling out and submitting the forms on this website, you declare that you have read this privacy policy and consent to the processing of your personal data for the management of your request (Art. 6.1.b GDPR). For marketing purposes, where applicable, a specific and separate consent is required.