Privacy policy

Data controller

Alberto Lopez
Italian tax code: LPZLRT97A18L328M
Barletta (BT), Italy
Email: alberto.lopez@alcybercloud.it
Support: support@alcybercloud.it
Certified email: lopez.alberto@pec.it

No Data Protection Officer has been appointed, as the conditions under Article 37 of Regulation (EU) 2016/679 do not apply.

What we collect and why

1. Contact form

Data: name, email address, subject, message, browsing language, IP address, browser and device type, anti-spam score returned by reCAPTCHA.

Purpose: answering your request and, where a professional relationship follows, handling preliminary contacts.

Legal basis: Article 6(1)(b) GDPR — pre-contractual measures taken at your request. For IP address and technical data, Article 6(1)(f) — legitimate interest in site security and abuse prevention.

Provision: optional. Without name, email and message, however, no reply is possible.

Retention: 24 months from the last relevant contact, unless a professional relationship follows, in which case tax and contractual retention periods apply.

2. Browsing

Data: IP address, date and time of request, page requested, response code, user agent, data automatically recorded in server logs and in Cloudflare's security systems.

Purpose: running the site, keeping it secure, detecting abuse.

Legal basis: Article 6(1)(f) — legitimate interest in security and service continuity.

Retention: 6 months from recording, after which logs are automatically deleted.

3. Cookies and tracking tools

See the Cookie policy, which forms an integral part of this notice.

4. Consent register

Data: choices made on the cookie banner, date and time, version of the notice in force at that moment, pseudonymised IP address, technical session identifier.

Purpose: being able to demonstrate that consent was given freely and on an informed basis, as required by Article 7(1) GDPR, and to evidence its withdrawal.

Legal basis: Article 6(1)(c) — compliance with the controller's legal accountability obligation.

Provision: automatic when the choice is made. A preference cannot be expressed without being recorded: the record itself is the evidence that protects you.

Retention: 6 months, matching the duration of the choice, unless longer retention is needed to defend a legal claim.

Who receives the data

Data is never disclosed publicly or sold. It is processed by the following processors under Article 28 GDPR:

Provider	Role	Location	Transfer outside the EU
IONOS SE	Server hosting and email service	Germany, datacentre in Spain	No — data stays within the European Union
Cloudflare, Inc.	Content delivery network and protection	United States	Yes — Standard Contractual Clauses and Data Privacy Framework
Google Ireland Limited	reCAPTCHA v3, embedded YouTube videos, encrypted backup storage	Ireland, with infrastructure also outside the EU	Yes — Standard Contractual Clauses and Data Privacy Framework

Site backups are encrypted before leaving the server and kept as two daily copies, the oldest being replaced at each new save. As a result, data deleted on request may persist in backups for up to 48 hours.

Data may also be disclosed to public authorities where required by law.

Your rights

You may at any time exercise the rights under Articles 15 to 22 GDPR: access, rectification, erasure, restriction, objection to processing based on legitimate interest, data portability, and withdrawal of cookie consent at any time without affecting the lawfulness of prior processing.

Write to alberto.lopez@alcybercloud.it or lopez.alberto@pec.it. A reply follows within one month, extendable by two months in complex cases, with reasons given.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or with the supervisory authority of your country of residence.

Minors

This site is not aimed at children under fourteen and does not knowingly collect their data. If you believe a minor has submitted data through the contact form, please report it to the addresses above and it will be deleted.

Automated decision-making

The score returned by reCAPTCHA v3 is used solely to assess the likelihood that a submission comes from an automated system. It produces no legal effects and does not similarly significantly affect the individual under Article 22 GDPR. A rejected submission can always be replaced by a direct email.

Changes

This notice may be updated. The version in force is the one published at this address, with the date of last update at the foot of the page.

Last updated: [publication date]