Who is responsible for your data
The data controller is Alpha Prime SRL, Via del Giordano 9, 26100 Cremona, Italy, VAT and tax code (P.IVA / C.F.) IT01836650190.
For any question about this notice or about your personal data, write to info@alpha-prime.it.
What we collect and why
Enquiry form: your full name, company name, work e-mail, destination or target market, category of interest, whether you contact us as a brand, a buyer, an e-commerce seller, a wholesaler or otherwise, and the text of your request. We use them only to answer your enquiry and to prepare any commercial offer you ask for.
Category brief request: your work e-mail, used only to prepare and send the category brief you request. We do not add it to any newsletter or marketing list.
Both forms also send the language of the page you used, so that we can reply in that language. A hidden anti-spam field must stay empty and carries no personal data.
Direct contact: if you write to info@alpha-prime.it or call us, we process your contact details and the content of your message or call only to reply and to handle your request.
Server logs: when you visit the site, our web server records technical data about each request, including your IP address, the date and time of the request, the page or file requested, the referring page and your browser’s user-agent string. We use these records only to keep the site running and secure.
Abuse protection: to limit automated submissions, the server counts form submissions per IP address over the last hour; for IPv6 addresses it keeps only the network prefix (the first 64 bits). These counters are kept only in the server’s memory and are removed at the latest when the server restarts.
Please do not include special categories of personal data, such as health information, in your messages.
Legal bases
Answering enquiries, brief requests and direct contacts made on behalf of a company: our legitimate interest in replying to business enquiries and preparing the offers requested (Art. 6(1)(f) GDPR).
If you contact us for yourself, for example as a sole trader or future contracting party, answering is a step taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
Server logs and abuse protection: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
Contract and accounting records, if a business relationship follows: compliance with our legal obligations (Art. 6(1)(c) GDPR).
Providing your details is voluntary, but without the fields marked as required we cannot answer your enquiry.
Who receives your data
Within Alpha Prime, only authorised staff who handle commercial enquiries, bound by confidentiality, can access your data.
Form messages are delivered to our mailbox by Resend (Plus Five Five, Inc., San Francisco, USA), an e-mail delivery service acting as our processor, and are then stored by our e-mail hosting provider, also acting as our processor. Resend retains sent-email content, metadata, delivery events and logs for 30 days, and backups for 7 days.
The website runs on a virtual private server operated by OVH S.r.l. (OVHcloud) in a data centre in Gravelines, France (European Union), under a data processing agreement.
Where the law requires it, we disclose data to public authorities, and we share it with our professional advisers, such as accountants and lawyers, who are bound by professional secrecy.
We do not sell your data and we do not share it with third parties for their own marketing.
Transfers outside the EU
When using Resend, form messages are transferred outside the European Economic Area. Resend data is stored in the United States even when an EU sending region is selected. These transfers are covered by the EU Standard Contractual Clauses incorporated into Resend’s data processing agreement (Art. 46 GDPR). Resend also participates in the EU-U.S. Data Privacy Framework; the Standard Contractual Clauses apply independently of that participation. You can ask us for a copy of these safeguards at info@alpha-prime.it.
How long we keep it
Enquiries, brief requests and direct contacts: as long as needed to answer and follow them up. If no business relationship follows, we delete them within 24 months of our last contact. If a contract follows, the related records are kept for the periods required by Italian law, such as 10 years for accounting records (art. 2220 of the Italian Civil Code).
Server logs: up to 90 days.
Abuse-protection counters: in server memory only; removed at the latest when the server restarts.
Cookies and similar technologies
This website sets no cookies and uses no advertising or social-media tracking. Fonts, images, videos and scripts are served from our own server, so your browser contacts no third-party service while you browse.
We use self-hosted Umami to produce aggregate statistics on visits, clicks and successful form deliveries. Umami uses no cookies and does not track visitors across websites. It derives country, region and city from the IP address without storing the IP itself. A pseudonymous visitor hash, based on the IP address, user agent and a salt, rotates daily. Events are stored individually and shown in aggregate. Analytics events and session data are kept for 24 months.
One technical flag is stored in your browser’s session storage so that the intro animation plays only once per visit. It contains no personal data and is deleted when you close the browser tab.
Your rights
Under Articles 15 to 20 GDPR you can ask us for access to your personal data, its rectification or erasure, the restriction of its processing and its portability.
To exercise these rights, write to info@alpha-prime.it. We reply within one month; where necessary, this period can be extended by two further months, in which case we will tell you why (Art. 12(3) GDPR).
We do not use your data for automated decision-making or profiling.
Your right to object
You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Art. 21 GDPR). We then stop, unless we demonstrate compelling legitimate grounds or need the data to establish, exercise or defend legal claims. To object, write to info@alpha-prime.it.
Complaints
If you believe that your data is processed unlawfully, you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it, or with the supervisory authority of the EU country where you live or work.
Changes to this notice
We update this notice when our processing changes. Last updated: 22 October 2026.