Privacy Policy


WHY THIS NOTICE

This page describes how the website is managed with regard to the processing of personal data of users who visit it.

This notice is also provided pursuant to EU General Data Protection Regulation 2016/679 (hereinafter, the “GDPR”) on the protection of personal data, to individuals who interact with the web services of Air Alliance srl, accessible online at https://airalliance.it/ (hereinafter, the “website”).

This notice applies only to the Air Alliance srl website at https://airalliance.it/ and not to any other websites that users may access through links.

DATA CONTROLLER

The Data Controller is Air Alliance srl, who can be contacted at the following email address: info@airalliance.eu

LOCATION OF DATA PROCESSING
Processing activities related to the web services of this website take place at the Data Controller’s registered office and are carried out exclusively by authorised technical personnel, or by personnel assigned to occasional maintenance operations.

The hosting/housing/cloud servers are located at Aruba, which is based in the European Economic Area and operates in compliance with European regulations (Privacy Policy).

No data derived from the web service is disclosed or disseminated.

TYPES OF DATA PROCESSED

The Personal Data collected through the Data Controller’s website, either independently or through third parties, includes: cookies; usage data; first name; last name; address; email address; city; and data provided while using the service. Personal Data may be provided voluntarily by the User or, in the case of Usage Data, collected automatically while browsing and using the services offered on the website.

Browsing data
The IT systems and software procedures used to operate this website acquire certain personal data during their normal operation, the transmission of which is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified individuals, but by its very nature could, through processing and association with data held by third parties, make it possible to identify users.

This category of data includes IP addresses or domain names of the computers used by users connecting to the website, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s response (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment.

This data is used solely to obtain anonymous statistical information about website usage and to check that the website is functioning correctly. It is deleted immediately after processing. The data may be used to establish liability in the event of alleged cybercrime against the website. Except in such circumstances, web contact data is not currently retained for longer than the time necessary for browsing.

Data voluntarily provided by the user

To use the services provided by Air Alliance srl, users may be asked to complete contact request forms and/or registration forms containing mandatory and optional fields for personal data. Providing the personal data marked as mandatory is necessary to complete the contact request or registration procedure. Failure to provide all or part of this data makes it impossible to register for and/or use the services. Providing non-mandatory data is optional; therefore, failure to provide all or part of such data does not prevent users from registering for and/or using the services.

The personal data requested by Air Alliance srl for registration for the services may vary depending on the registration forms used.

The voluntary and explicit sending of emails to the addresses indicated in the various access channels of this website does not require a request for consent and results in the acquisition of the sender’s email address and data, which are necessary to respond to requests, as well as any other personal data included in the message. Such data is considered to have been voluntarily provided by the user when requesting the service.

COOKIES
As explained in greater detail in the “Cookie Policy”, the website uses “cookies”, understood as short text files (letters and/or numbers) that allow the web server to store information on the client device (the browser), to be reused during the same visit to the website (session cookies) or on subsequent visits to the same website (persistent cookies).

For further information, please visit the Cookie Policy page, where you can configure the types of cookies to be used ( https://www.airalliance.it/cookie-policy/ ).

 

PURPOSES AND LEGAL BASIS OF DATA PROCESSING
The User’s Personal Data provided through the website will be processed for the following purposes:

  1. purposes relating to providing information about the services available through the website (e.g. contact requests submitted through the forms available on the website, account registration, provision of services, etc.);
  2. statistical research and analysis purposes involving aggregated or anonymous data, which therefore does not allow users to be identified, aimed at measuring website performance and the operation of its features, including the resolution of any technical issues;
  3. purposes aimed at preventing or detecting fraudulent activities or improper use that could damage the website or compromise the security of operations;
  4. purposes relating to compliance with a legal obligation to which we are subject;
  5. purposes necessary to establish, exercise or defend a legal claim, or whenever judicial authorities exercise their judicial functions.
  6. purposes relating to the sending of advertising, informational and promotional material, as well as periodic updates about Air Alliance srl’s initiatives, services, products and events (so-called marketing).

The processing of personal data for the purposes referred to in points a) to e) above does not require your explicit consent (Article 24, letters a) and b) of the Code and Article 6, letters b) and e) of the GDPR), as it forms part of a service contract. The legal basis for processing is the Data Controller’s legitimate interest in fulfilling contractual obligations towards data subjects in accordance with their respective requests.

The processing of personal data for the purpose referred to in point f) above requires your explicit consent (Article 23 of the Code and Article 7 of the GDPR). This consent covers both the automated and traditional communication methods described above.

You will always have the right to object, easily and free of charge, to all or part of the processing of your data for these purposes, for example by opting out of automated contact methods and expressing your wish to receive commercial and promotional communications exclusively through traditional contact methods.

The legal basis for processing is the data subject’s consent.

 

DETAILS ON THE PROCESSING OF PERSONAL DATA

Personal Data is collected for the following purposes and through the following services:

Direct contact
Contact form

By completing the contact form with their Personal Data, the User consents to its use for sending and receiving requests for information or any other requests indicated in the form heading.

Personal Data collected: email address, first name, last name, telephone number.

Contact by telephone

Users who have provided their telephone number may be contacted by Air Alliance srl for informational or promotional purposes, as well as to respond to support requests.

Personal Data collected: telephone number.

Interaction with social networks and external platforms

These services allow users to interact with social networks or other external platforms directly from the pages of the website.

Any interactions and information acquired by the website are in all cases subject to the User’s privacy settings for each social network.

If a social networking interaction service is installed, it may collect traffic data relating to the pages on which it is installed, even if users do not use the service.

Facebook Like Button and Social Widgets (Facebook, Inc.)

The Facebook “Like” button and social widgets are services that enable interaction with the Facebook social network, provided by Facebook, Inc.

Personal Data collected: Cookies and Usage Data.

Processing location: USA – Privacy Policy.

Embedded YouTube Videos (Google Inc.)

Embedded YouTube videos, i.e. videos displayed directly within the website, are services that enable interaction with the YouTube social network, provided by Google Inc.

Personal Data collected: Cookies and Usage Data.

Processing location: USA – Privacy Policy – Terms of Use.

Google Maps (Google Inc.)

Google Maps displayed within the website provides interaction with the Google Maps service, supplied by Google Inc.

Personal Data collected: Cookies and Usage Data.

Processing location: USA – Privacy Policy – Terms of Use.

Platform monitoring

These services allow the website to monitor its use and behaviour in order to improve performance and functionality, carry out maintenance or resolve issues.

The Personal Data processed depends on the characteristics and implementation methods of these services, which by their nature monitor website activity.

Statistics

The services in this section allow the Data Controller to monitor and analyse traffic data and track User behaviour.

Google Analytics (Google Inc.)

Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and examine how the website is used, compile reports and share them with other services developed by Google.

Google may use Personal Data to contextualise and personalise advertisements within its advertising network. IP anonymisation is enabled on the website.

Personal Data collected: Cookies and Usage Data.

Processing location: USA – Privacy Policy – Opt Out.

Statistics collected directly

The website may use an internal statistics system that does not involve third parties, for the purpose of collecting additional statistical data.

Personal Data collected: Cookies and Usage Data.

 

OPTIONAL NATURE OF DATA PROVISION

Except as specified for browsing data, users are free to provide the personal data requested in forms or otherwise supplied when contacting the office to request orders, materials, information or other communications.

Therefore, any refusal to provide such data, even partially, may make it impossible to establish and manage the relevant relationship and provide the requested service.

 

PROCESSING METHODS

The Data Controller adopts appropriate security measures to prevent unauthorised access to, disclosure, alteration or destruction of Personal Data.

Data is processed using both paper-based records and automated electronic tools (through our IT system, in which case the data is recorded on protected electronic media) for the time strictly necessary to achieve the purposes for which it was collected.

These records, whether electronic or paper-based, are properly maintained and protected by us for the entire period required for processing, using appropriate procedures to ensure their security and confidentiality and to prevent data loss, in compliance with the security measures set out in Article 32 of GDPR 2016/679, as well as to protect against unlawful or improper use and unauthorised access.

 

DURATION OF PROCESSING AND PERSONAL DATA RETENTION PERIOD

The collected data is processed for as long as necessary to fulfil the purposes for which it was collected, and in any case no longer than the periods prescribed by law. Data required for tax purposes is retained until the relevant tax assessments have been completed, and therefore for at least 10 years, or longer if the relevant tax year has not yet become time-barred for tax purposes.

At the end of this period, the data will be deleted or anonymised unless further purposes for retaining it exist (e.g. warranty obligations or tax obligations).

Personal data that is no longer necessary, or for which there is no longer a legal basis for retention, is irreversibly anonymised (and may therefore be retained) or securely destroyed.

The following retention periods apply to the different purposes listed above:

  1. Fulfilment of contractual obligations: data processed to fulfil any contractual obligation may be retained for the duration of the contract and, in any case, for no longer than the following 10 years, in order to verify any outstanding matters, including accounting documents such as invoices.
  2. Operational management and purposes strictly related to website access: data may be retained for the time necessary to measure website performance from the date on which we obtained your latest consent for this purpose (except where you object to receiving further communications), after which it will be destroyed or anonymised.
  3. Customer satisfaction surveys: data processed for this purpose may be retained for the time necessary to analyse the survey, starting from the date on which we obtained your latest consent for this purpose (except where you object to receiving further communications).
  4. Disputes: if we need to defend ourselves, take action or assert claims against you or third parties, we may retain the personal data that we reasonably consider necessary for these purposes for as long as such claims may be pursued.
  5. Where the collected data is processed on the basis of explicit consent, it will be processed until that consent is withdrawn or the service provided has ended.

SOCIAL NETWORK PLUGINS

This website may also incorporate social network plugins and/or buttons to make it easy to share content on users’ preferred social networks. These plugins are designed not to set any cookies when the page is accessed, in order to protect users’ privacy. Cookies may be set, where provided for by the social networks, only when the user actively and voluntarily uses the plugin.

Please note that if users browse the website while logged in to a social network, they have already consented to the use of cookies transmitted through this website when registering with that social network.

The collection and use of information obtained through plugins are governed by the respective privacy policies of the social networks, which users are invited to consult.

DATA SUBJECT RIGHTS

Please be informed that, as a data subject, under Articles 15 to 23 of GDPR 2016/679, you have the rights listed below, which you may exercise by submitting a specific request to the Data Controller and/or the Data Processor, in addition to the right to lodge a complaint with a supervisory authority.

Art. 15 – Right of access

The data subject has the right to obtain confirmation from the Data Controller as to whether or not personal data concerning them is being processed and, where that is the case, to access the personal data and information relating to the processing.

Art. 16 – Right to rectification

The data subject has the right to obtain from the Data Controller, without undue delay, the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Art. 17 – Right to erasure (right to be forgotten)

The data subject has the right to obtain from the Data Controller the erasure of personal data concerning them without undue delay, and the Data Controller is obliged to erase personal data without undue delay.

Art. 18 – Right to restriction of processing

The data subject has the right to obtain from the Data Controller restriction of processing where one of the following applies:

  1. the data subject contests the accuracy of the personal data, for a period enabling the Data Controller to verify its accuracy;
  2. the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead;
  3. although the Data Controller no longer needs the personal data for processing purposes, the data is required by the data subject for the establishment, exercise or defence of legal claims;
  4. the data subject has objected to processing pursuant to Article 21(1), pending verification of whether the legitimate grounds of the Data Controller override those of the data subject.

Art. 20 – Right to data portability

The data subject has the right to receive the personal data concerning them, which they have provided to a Data Controller, in a structured, commonly used and machine-readable format, and has the right to transmit that data to another Data Controller without hindrance from the Data Controller to which the personal data was provided.

When exercising their right to data portability pursuant to paragraph 1, the data subject has the right to have personal data transmitted directly from one Data Controller to another, where technically feasible.

Art. 21 – Right to object

The data subject has the right to object, at any time and on grounds relating to their particular situation, to the processing of personal data concerning them pursuant to Article 6(1)(e) or (f), including profiling based on those provisions.

Art. 22 – Right not to be subject to automated decision-making, including profiling

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

DISCLOSURE AND DISSEMINATION

We will not “disseminate” your data (meaning making it available to an unspecified number of people by any means, including making it available for consultation, unless the data subject has given specific consent in a separate document).

However, we may “disclose” your data (meaning making it known to one or more specific parties) in the following circumstances:

  • to individuals within Air Alliance srl who are authorised to process your data, particularly administrative staff;
  • to parties entitled to access the data under laws, regulations or European Union legislation, within the limits established by such provisions;
  • to parties who need access to your data for purposes ancillary to the relationship between you and us, strictly to the extent necessary to perform the ancillary tasks assigned to them;
  • to our consultants, to the extent necessary to carry out their assignments for Air Alliance srl, or under outsourcing arrangements as external Data Processors, following our formal appointment requiring them to maintain the confidentiality and security of your data.

HOW TO EXERCISE YOUR RIGHTS

You may exercise your rights or withdraw your consent at any time by sending a communication to the addresses and using the methods indicated below.

 

CONTACT DETAILS

All requests should be sent to: info@airalliance.eu