This Policy describes how the website www.altrovestudio.com is managed with regard to the processing of personal data of users who visit it and fill out the contact form.

1. Data Controller

The Data Controller is Matteo Macchiavelli, with registered office in Via Vittoria 5/b - 40068 San Lazzaro di Savena (BO), VAT number 03694111208. For any clarification or to exercise the rights provided for by the GDPR, you can contact the Data Controller at the following email address: matteo.macchiavelli@proton.me.

2. Type of Data Collected

When using this website, the data collected is exclusively:

• Data provided voluntarily via the Contact Form: Name, email address, and any information or details included in the text of the message sent by the user.
• Technical navigation data: IP addresses and system logs required exclusively for the correct functioning and technical security of the site.

3. Purpose and Legal Basis of the Processing

The personal data provided by the user via the contact form is collected and processed for the sole purpose of responding to contact requests, information, or quotes sent by the user.

Legal basis: Processing is lawful because it is necessary for the implementation of pre-contractual or contractual measures taken at the user's request (Art. 6, par. 1, letter b of the GDPR).

4. Processing Methods and Security

Personal data is processed using computerized and electronic means for the time strictly necessary to manage the request. Appropriate technical security measures (including SSL/TLS encryption on site communications) are adopted to prevent data loss and unlawful or unauthorized use.

5. Data Retention Period

The data sent via the contact form is retained for the time strictly necessary to manage and respond to the user's request and in any case no longer than 12 months from submission, unless a subsequent contractual or professional relationship is established.

6. Recipients and Data Transfer

The collected data will not be publicly disclosed or transferred to third parties for marketing purposes. It may be processed exclusively by technical service providers strictly related to the website's operation (e.g., hosting providers and email management service providers), appointed as Data Processors if necessary.

7. Rights of the interested party

Pursuant to Articles 15-22 of the GDPR, you have the right to request access to your personal data at any time, rectification, erasure (right to be forgotten), or restriction of processing.

8. Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Policy at any time. The date of the last update can be found in the header of the page.