Privacy Policy

1. Data Controller

The data controller for this website is:

2. Legal Basis and Applicable Legislation

This privacy policy is provided in accordance with:

• EU General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679
• ePrivacy Directive — Directive 2002/58/EC (as amended by Directive 2009/136/EC)
• Italian Data Protection Code — Legislative Decree no. 196/2003, as amended by Legislative Decree no. 101/2018
• California Consumer Privacy Act (CCPA) — for California residents

3. Personal Data We Collect

We collect personal data only when strictly necessary. The categories of data we may process include:

• Navigation data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps. This data is collected automatically by our web server.
• Data provided voluntarily: If you contact us via email, we process your email address, name, and any information you include in your message.
• Cookies and similar technologies: See our Cookie Policy for details.

4. Purpose and Legal Basis for Processing

5. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected:

• Navigation data: deleted within 90 days, unless required for security investigations.
• Contact enquiries: retained for the duration of the correspondence and up to 24 months thereafter.
• Cookie consent records: retained for 12 months from the date of consent.

6. Data Sharing and Transfers

We do not sell, rent, or trade your personal data. Data may be shared with:

• Hosting provider: our web hosting service, which processes data on our behalf under a data processing agreement.
• Legal authorities: when required by law.

If any data transfer outside the European Economic Area (EEA) occurs, it will be subject to appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access — obtain confirmation of whether your data is being processed and request a copy (Art. 15).
• Rectification — correct inaccurate or incomplete data (Art. 16).
• Erasure — request deletion of your data ("right to be forgotten") (Art. 17).
• Restriction — limit the processing of your data (Art. 18).
• Data portability — receive your data in a structured, machine-readable format (Art. 20).
• Object — object to processing based on legitimate interest (Art. 21).
• Withdraw consent — at any time, without affecting the lawfulness of prior processing (Art. 7(3)).

To exercise any of these rights, contact us at info@uall-si.com. We will respond within 30 days.

8. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Italy, the competent authority is the Garante per la protezione dei dati personali (www.garanteprivacy.it).

9. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.