Privacy notice

Last updated: 4 August 2026

This notice describes how personal data of users who visit www.almi-italia.it or contact us is processed, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

1. Data controller

The data controller is Almi Italia S.r.l., with registered office at Via Strozzi 7, 35018 San Martino di Lupari (PD), VAT No. 03678040282, R.E.A. 328714 PD.

For any request relating to the processing of personal data, you may contact the controller at info@almi-italia.it or by phone at +39 049 5952018.

A Data Protection Officer (DPO) has not been appointed at this time, as the conditions under Article 37 GDPR do not apply.

2. Categories of data processed

Depending on how you interact with the website or the company, the following categories of data may be processed:

• Contact data provided voluntarily: name, surname, company name, email address, telephone number, job role and message content when you contact us by email or phone (including via mailto links on the site).
• Application data: CVs and professional information you may send spontaneously by email.
• Technical browsing data: IP address, date and time of the request, requested URL, browser user-agent and other log data that may be recorded by the hosting server for security and service operation. The site does not use profiling cookies or third-party analytics tools.

3. Purposes of processing

Personal data is processed for the following purposes:

• Handling and responding to contact requests, commercial enquiries, technical support or quality requests.
• Assessing spontaneous applications and managing any recruitment process.
• Ensuring the security, stability and proper operation of the website (technical server logs).
• Complying with legal, regulatory or authority obligations where applicable.

4. Legal basis

Processing is based on the following legal bases under Article 6 GDPR:

• Art. 6.1.b — performance of pre-contractual measures taken at the request of the data subject (replying to contact requests and managing potential business relationships).
• Art. 6.1.f — legitimate interest of the controller in responding to incoming communications, protecting website security and handling spontaneous applications in an orderly manner.
• Art. 6.1.c — compliance with legal obligations to which the controller is subject, where applicable.

5. Recipients of the data

Data may be disclosed, within the limits strictly necessary for the purposes indicated, to: hosting and email service providers acting as processors under Article 28 GDPR; professional advisers and authorised staff of the controller; public or judicial authorities where required by law. Data is not disseminated to the public.

6. Transfers outside the EEA

The website and its assets (including typefaces) are delivered without automatically loading third-party resources from servers located outside the European Economic Area. No transfers of personal data to third countries are envisaged. Should a future provider involve a transfer outside the EEA, the controller will adopt the safeguards required by Chapter V GDPR and update this notice.

7. Retention period

Data is retained for no longer than necessary for the purposes for which it was collected:

• Contact requests: for the time needed to handle the request and related correspondence, and in any event no longer than 24 months from the last meaningful contact, unless legal protection requires otherwise.
• Spontaneous applications: as a rule for a maximum of 12 months from receipt, unless otherwise agreed or the selection process continues.
• Technical server logs: according to the hosting provider's policies and for periods compatible with security purposes (as a rule no longer than 12 months, unless investigation needs or legal obligations apply).

8. Data subject rights

Under Articles 15-22 GDPR, you have the right to:

• obtain confirmation as to whether personal data concerning you is being processed and access that data (Art. 15);
• obtain rectification of inaccurate data and completion of incomplete data (Art. 16);
• obtain erasure of data in the cases provided for (Art. 17 — "right to be forgotten");
• obtain restriction of processing in the cases provided for (Art. 18);
• receive the data in a structured, commonly used format and transmit it to another controller where applicable (Art. 20 — data portability);
• object to processing based on legitimate interest (Art. 21);
• not be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you (Art. 22).

To exercise your rights, write to info@almi-italia.it. The controller will reply without undue delay and in any event within one month of receipt of the request, extendable in the cases provided by law.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali — www.garanteprivacy.it) under Article 77 GDPR, or to seek a judicial remedy.

9. Cookies and similar technologies

The site does not set first-party or third-party cookies. No profiling, advertising or analytics cookies are used. localStorage and sessionStorage are not used for tracking purposes. A cookie consent banner is therefore not required. Any strictly necessary technical cookies may be set solely by the hosting server for security or network configuration; in that case they do not require consent under applicable law.

10. Links to third-party sites

The site may contain links to external websites (for example Google Maps, Almi Group, Almi Austria). Those sites operate independently under their own privacy notices. Clicking an external link takes you away from the Almi Italia website and subjects you to the third party's policies.

11. Automated decision-making

No decision based solely on automated processing is made, nor is any profiling of website users carried out.

12. Nature of the provision of data

Providing data by email or phone is optional. Failure to provide it means we cannot reply to your request. Simply browsing the website does not require you to provide identity data.

13. Updates

This notice may be updated for legal, organisational or technical reasons. The date of the latest update is shown at the top of the page. Please consult this page periodically.