Privacy Policy

Data controller

The data controller is DigiAlto, Milano, Italy. You can reach us at info@digialto.com for any question about your data.

What we collect and why

We collect personal data only when you give it to us or when you agree to analytics.

• Contact form: name, email address, company (optional), the service you are interested in (optional), your message, and the language and page you wrote from. No IP address or browser details are stored with your message; the server only keeps a non-reversible hash of your IP address for ten minutes to block abuse of the form. Purpose: to read and answer your enquiry and, if you ask, to prepare a proposal. Legal basis: steps taken at your request before entering into a contract (art. 6.1.b GDPR).
• Booking a call: if you choose to open the calendar, the booking is handled by Calendly LLC (USA) under its own privacy policy. We receive the name, email and time you enter. Purpose: to hold the call you booked. Legal basis: art. 6.1.b GDPR.
• Email: if you write to info@digialto.com we keep the correspondence to answer you. Legal basis: art. 6.1.b and, for follow-up on a genuine business enquiry, our legitimate interest (art. 6.1.f GDPR).
• Analytics: only if you accept cookies, Google Analytics 4 collects anonymised usage data (pages viewed, approximate location, device) so we can understand which pages are useful. Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time from the cookie policy page.

Who receives the data

Data is processed by DigiAlto staff and by the providers we need to run the site, each bound by a data processing agreement or its own compliance framework:

• Web hosting and email delivery: Bluehost (Newfold Digital, USA). Form submissions are sent by email from the hosting server to our mailbox.
• Calendar bookings: Calendly LLC (USA), only if you open the calendar.
• Analytics: Google Ireland Ltd (Google Analytics 4), only with your consent.
• Where a provider is outside the European Economic Area, transfers rely on the European Commission adequacy decision for the EU-US Data Privacy Framework or on Standard Contractual Clauses.

How long we keep it

Enquiries and related correspondence are kept for as long as needed to answer you and for up to 24 months afterwards, unless a contract follows, in which case the data is kept for the duration of the relationship and the legal retention periods that apply.

Analytics data is kept for the period set in Google Analytics (14 months by default).

Your rights

Under articles 15 to 22 GDPR you can ask to access, correct, delete or receive your data, to restrict or object to its processing, and to withdraw consent at any time. Write to info@digialto.com. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

Security

The site is served over HTTPS, the contact form is protected against automated abuse, and access to the mailbox and hosting account is limited to authorised people. No method of transmission is completely secure, so we cannot guarantee absolute security.

Changes

We may update this policy when the site or the law changes. The date at the top shows the latest version.