DATA PROTECTION DECLARATION (PRIVACY POLICY)

Information pursuant to Articles 13 and 14 of the EU General Data Protection Regulation (GDPR / EU 2016/679) and the Italian Data Protection Code ( Legislative Decree No. 196/2003 as amended by Legislative Decree No. 101/2018).

 

1. Data Controller

The controller responsible for the processing of personal data on this website is:

ALCHEWAT by Lorenz Puff, Telser Galerie 11/3, I-39100 Bolzano (BZ), South Tyrol, Italy | Phone: +39 347 078 8923 | Email: info@alchewat.com | Certified PEC: lorenz-puff@mypec.eu

 

2. General principles of data processing

We process your personal data in strict compliance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality (Art. 5 GDPR).

 

3. Categories of processed data, purposes and legal bases

 

3.1 Server log files / navigation data

When you access our website, the servers automatically collect information that your browser transmits to us. This includes:

  • P-address of the accessing computer/device
  • Date and time of access
  • Name and URL of the retrieved file / subpage
  • Amount of data transferred and access status (HTTP status code)
  • Browser type, operating system and name of your internet access provider.
  • Referrer URL (the previously visited page)

Purpose: To ensure smooth connection setup, system security, and technical administration.

Legal basis: Legitimate interest of the controller (Art. 6 para. 1 lit. f GDPR).

 

3.2 Contacting Us (Email, Telephone, Contact Form)

When you contact us by email or telephone, the data you provide (e.g., name, email address, telephone number, content of your inquiry) will be stored in order to answer your questions and process any follow-up questions. Purpose: Processing customer inquiries and preparing quotations. Legal basis: Performance of pre-contractual measures or fulfillment of a contract (Art. 6 para. 1 lit. b GDPR) or our legitimate interest in processing inquiries (Art. 6 para. 1 lit. f GDPR). 3.3 Processing Customer Orders, Deliveries, and Invoicing For the execution of purchase agreements, services, and for legally required electronic invoicing ( Fatturazione ). In accordance with Italian tax law (Elettronica ), we process master data, contact data, order data, tax identification numbers/VAT numbers, and payment data. The legal basis for this processing is the performance of a contract (Art. 6 para. 1 lit. b GDPR) and compliance with legal and tax obligations (Art. 6 para. 1 lit. c GDPR in conjunction with Art. 2220 Codice) . Civil and Italian tax laws).

 

4. Recipients of data & data processors

Within our company, only those individuals who need access to your data to fulfill our contractual and legal obligations will have access to it. Data will only be shared with third parties in accordance with legal regulations.

  • IT service providers & web hosting providers: For the provision and security of our online infrastructure.
  • Tax advisors, accountants & banks: For fulfilling commercial and tax obligations and processing payments.
  • Tax authorities & public bodies: (e.g. Agenzia delle Entrate) for the transmission of electronic invoices via the SDi system.
  • Logistics and transport companies: For the delivery of ordered goods.

All service providers we commission who process personal data are contractually obligated as data processors in accordance with Art. 28 GDPR.

 

5. Data transfer to third countries

Personal data is generally not transferred to countries outside the European Union (EU) or the European Economic Area (EEA), unless this is necessary for the performance of a contract or you have given your explicit consent. Should a transfer take place, we ensure that appropriate safeguards are in place in accordance with Articles 44 et seq. of the GDPR (e.g., EU Standard Contractual Clauses or adequacy decisions such as the EU-US Data Privacy Framework).

 

6. Storage period and deletion

We only store personal data for as long as is necessary to achieve the respective purpose or as required by statutory retention periods:

  • Server log files : To ensure security, these are automatically deleted or anonymized after a maximum of 7 to 14 days.
  • Inquiries & Correspondence: These will be deleted after final processing, unless legal retention obligations apply.
  • Contract and accounting documents: These are processed in accordance with Italian commercial and tax law (Art. 2220 Codice). Civile ) for at least 10 years.

 

7. Use of cookies and tracking technologies

Our website uses cookies. Cookies are small text files that are stored on your device.

  • Technically necessary cookies: Required for the operation and basic functionality of the website. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest).
  • Analytics and advertising cookies: These are used to statistically analyze website usage in order to optimize our services. Such cookies are only set after you have given your explicit consent (Art. 6 para. 1 lit. a GDPR) via our cookie banner. You can adjust or withdraw your consent at any time using the cookie settings tool in the footer of our website.

 

7.1 Use of Web Analytics Services (Google Analytics)

Provided that you have given your consent (Art. 6(1)(a) GDPR), this website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"). Google Analytics uses cookies that enable an analysis of how users use the website. The information generated by the cookie regarding your use of this website is generally transmitted to and stored on a Google server in the United States. We use Google Analytics exclusively with IP anonymization activated. Any transfer of data to the parent company Google LLC in the United States is carried out on the basis of the EU-U.S. Data Privacy Framework. You may withdraw your consent at any time with effect for the future via our Cookie Settings tool.

 

8. Rights of the data subject (Your rights under the GDPR)

As a data subject, you have the following rights against the controller in accordance with Chapter III of the GDPR:

  • Right of access (Art. 15 GDPR): The right to request confirmation as to whether personal data are being processed, and to obtain information about this data.
  • Right to rectification (Art. 16 GDPR): The right to request the immediate rectification of inaccurate data or the completion of incomplete data.
  • Right to erasure / "right to be forgotten " (Art. 17 GDPR): The right to have your data erased, provided that no legal retention obligations prevent this.
  • Right to restriction of processing (Art. 18 GDPR): The right to request the restriction of processing under certain conditions.
  • Right to data portability (Art. 20 GDPR): The right to receive your provided data in a structured, commonly used and machine-readable format.
  • Right to object (Art. 21 GDPR): The right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you.
  • Withdrawal of consent (Art. 7 para. 3 GDPR): You have the right to withdraw your consent at any time with effect for the future.
  • Exercising your rights: To exercise your rights, please contact us informally by email at info@alchewat.com or by certified email (PEC) at lorenz-puff@mypec.eu.

Provided you have given your consent via our cookie banner (Art. 6(1)(a) GDPR), we use analytics and marketing services provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our website, including Google Analytics and tracking functions for ad optimization. Google also processes data (such as IP address and browsing behavior) on our behalf. Any data transfer to parent companies in the USA is carried out on the basis of the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses.

 

9. Right to lodge a complaint with the supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a competent data protection supervisory authority. In Italy, this is:

 

Garante per la protezione dei data personali 

Piazza Venezia n. 11, 00187 Roma (RM), Italia 

Telephone: +39 06.696771 | Email: protocollo@gpdp.it | PEC: protocollo@pec.gpdp.it 

Website: www.garanteprivacy.it

 

10. Protection of minors 

Our website is generally intended for people over 18 years of age. People under 16 years of age should not transmit any personal data to us without the consent of their parents or guardians.

 

11. Updates and changes to this privacy policy 

This privacy policy is currently valid (as of August 2026). Due to the ongoing development of our website and services, or due to changes in legal or regulatory requirements, it may become necessary to revise this policy. The most current version can be accessed on our website at any time.

  

Language Regulation

The company has its registered office in the Autonomous Province of Bolzano – South Tyrol (Italy) and, in accordance with the provisions regarding the equality of official languages (Presidential Decree No. 670 of August 31, 1972), primarily uses the German language.

Where these legal notices are made available in other languages (such as Italian or English), these translations are provided solely to facilitate understanding and improve service for our international customers. For business-to-business transactions (B2B), the German language version is authoritative for interpretation. Mandatory statutory consumer protection rights under the laws of the country in which the consumer has their habitual residence (in particular under the Italian Consumer Code (Codice del Consumo) and Art. 6 of the Rome I Regulation) shall remain unaffected.