Notice provided pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR) and the Italian Data Protection Code (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018) to anyone interacting with the Altair Ceramiche website and contact form.
Last updated: 25 August 2026.
Data controller
Altair Ceramiche, Viale Virgilio, 58/C, 41123 Modena (MO) — Email: info@ceramichealtair.com
Types of data collected
This site is static and does not use a database or any user profiling system. The personal data processed falls into two categories: data voluntarily provided by the user through the contact form or direct email (name, email address, phone number, message content); browsing data automatically collected while using the site (e.g. IP address, browser type, pages visited, date and time of access), recorded in server logs for technical and security purposes.
Purpose and legal basis of processing
Data submitted through the contact form is processed to reply to information or quote requests (legal basis: performance of pre-contractual measures requested by the data subject, Art. 6(1)(b) GDPR). Browsing data is processed to ensure the correct functioning and security of the site (legal basis: legitimate interest of the Controller, Art. 6(1)(f) GDPR). The contact form is protected by the Google reCAPTCHA service, which analyses the user's interaction with the page in the background to distinguish genuine requests from automated submissions (spam/bots); this processing is also based on the Controller's legitimate interest in ensuring the security and reliability of the form (Art. 6(1)(f) GDPR). Any promotional communications are sent only with specific, separate consent (Art. 6(1)(a) GDPR), never bundled with other purposes.
Nature of data provision
Providing the data marked as mandatory in the contact form is necessary to reply to the request: failure to provide it prevents the message from being sent. Providing optional data does not affect the possibility of receiving a reply.
Recipients and data transfers
Data is processed by the Controller's authorised staff and may be shared with providers of instrumental services (e.g. hosting, email management), appointed as data processors under Art. 28 GDPR where applicable. For its own visual rendering, to protect the contact form, and for the map on the Contact page, the site loads resources hosted on third-party servers: Google Fonts and the jsDelivr CDN (Bootstrap, Bootstrap Icons) for fonts and libraries, Google reCAPTCHA to protect the contact form against automated submissions (spam), and Google Maps for the map, the latter loaded only with prior consent (see Cookie Policy). These providers are also based outside the European Union; any transfer of data to non-EU countries relies on the safeguards provided by the respective providers (standard contractual clauses or other adequate safeguards under Arts. 44 et seq. GDPR). For more information, see Google's privacy policy (policies.google.com/privacy) and jsDelivr's (jsdelivr.com/-/legal/privacy-policy).
Data retention period
Data collected through the contact form is kept for as long as necessary to handle the request and, thereafter, for a maximum of 24 months, unless longer retention is required to establish, exercise or defend a legal claim or to comply with legal obligations. Browsing data recorded in server logs is kept for as long as technically necessary, and in any case no longer than required by applicable law.
Security measures
The Controller adopts technical and organisational measures appropriate to the risk, pursuant to Art. 32 GDPR, including transmission of data over an encrypted protocol (HTTPS) and access to data restricted to authorised personnel only.
Data subject rights
At any time you may exercise, by writing to the Controller's email address indicated above, the rights set out in Articles 15-22 GDPR: access to your data; rectification of inaccurate or incomplete data; erasure of data, in the cases provided by law; restriction of processing; data portability, where technically feasible; objection to processing on legitimate grounds; withdrawal of consent at any time, without affecting the lawfulness of processing carried out beforehand. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it) or refer the matter to the competent court.
Minors
This site is not directed at children under 16, and the Controller does not knowingly collect personal data from minors without the consent of a parent or legal guardian.
Changes to this notice
This notice may be updated over time, including as a result of regulatory changes. Any changes will be published on this page, with an indication of the last update date.